Updated node/pod HOSTNAME, HOST and IDENTITY and ADDRESS env variable…

… with Kubernetes pod name from metadata name This StatefulSet of Apache NiFi deployment uses hostname as reference in the cluster names. When Apache NiFi nodes/pods occasionally terminated and redeployed old zombie nodes/pods hostnames are still list in the cluster page and can not be removed, this will/should fix that bug The HOSTNAME env variable is never empty as Kubernetes controller will always populate it if is not set The NIFI_CLUSTER_NODE_ADDRESS requires FQDN else it will generate it own address and that will result in error.
saidsef · Aug 3, 2023 · d010c0c · d010c0c
1 parent 2681b5a
commit d010c0c
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 9 deletions.
diff --git a/deployment/nifi-ssl-configmap.yml b/deployment/nifi-ssl-configmap.yml
@@ -27,7 +27,7 @@ data:
     then
       echo "Creating keystore"
       keytool -genkey -noprompt -alias nifi-keystore \
-      -dname "CN=SA,OU=${ORGANISATION_UNIT},O=${ORGANISATION},L=${CITY},S=${STATE},C=${COUNTRY_CODE}" \
+      -dname "CN=${HOSTNAME},OU=${ORGANISATION_UNIT},O=${ORGANISATION},L=${CITY},S=${STATE},C=${COUNTRY_CODE}" \
       -keystore ${NIFI_HOME}/keytool/keystore.p12 \
       -storepass ${KEYSTORE_PASS:-$NIFI_SENSITIVE_PROPS_KEY} \
       -KeySize 2048 \
@@ -40,7 +40,7 @@ data:
     then
       echo "Creating truststore"
       keytool -genkey -noprompt -alias nifi-truststore \
-      -dname "CN=SA,OU=${ORGANISATION_UNIT},O=${ORGANISATION},L=${CITY},S=${STATE},C=${COUNTRY_CODE}" \
+      -dname "CN=${HOSTNAME},OU=${ORGANISATION_UNIT},O=${ORGANISATION},L=${CITY},S=${STATE},C=${COUNTRY_CODE}" \
       -keystore ${NIFI_HOME}/keytool/truststore.jks \
       -storetype jks \
       -keypass ${KEYSTORE_PASS:-$NIFI_SENSITIVE_PROPS_KEY} \

diff --git a/deployment/nifi.yml b/deployment/nifi.yml
@@ -24,6 +24,7 @@ spec:
       automountServiceAccountToken: false
       enableServiceLinks: false
       restartPolicy: Always
+      subdomain: nifi
       securityContext:
         runAsGroup: 1000
         runAsUser: 1000
@@ -77,23 +78,21 @@ spec:
           - name: NIFI_WEB_HTTP_HOST
             valueFrom:
               fieldRef:
-                fieldPath: status.podIP
+                fieldPath: metadata.name # Use pod name as web host
           - name: NIFI_CLUSTER_NODE_ADDRESS
-            valueFrom:
-              fieldRef:
-                fieldPath: status.podIP
+            value: $(HOSTNAME).nifi # Use pod name as node address
           - name: NIFI_REMOTE_INPUT_HOST
             valueFrom:
               fieldRef:
-                fieldPath: status.podIP
+                fieldPath: metadata.name # Use pod name as input host
           - name: HOSTNAME
             valueFrom:
               fieldRef:
-                fieldPath: status.podIP
+                fieldPath: metadata.name # Use pod name as hostname
           - name: NODE_IDENTITY
             valueFrom:
               fieldRef:
-                fieldPath: metadata.name
+                fieldPath: metadata.name # Use pod name as identity
         envFrom:
           - configMapRef:
               name: nifi-cm