Helm Chart for Apache Nifi

Introduction

This Helm chart installs nifi in a Kubernetes cluster.

Prerequisites

• Kubernetes cluster 1.10+
• Helm 3.0.0+
• PV provisioner support in the underlying infrastructure.

Installation

Add Helm repository

helm repo add cetic https://github.com/lptarik/helm-nifi
helm repo update

Configure the chart

The following items can be set via --set flag during installation or configured by editing the values.yaml directly (need to download the chart first).

Configure the way how to expose nifi service:

• Ingress: The ingress controller must be installed in the Kubernetes cluster.
• ClusterIP: Exposes the service on a cluster-internal IP. Choosing this value makes the service only reachable from within the cluster.
• NodePort: Exposes the service on each Node’s IP at a static port (the NodePort). You’ll be able to contact the NodePort service, from outside the cluster, by requesting NodeIP:NodePort.
• LoadBalancer: Exposes the service externally using a cloud provider’s load balancer.

Configure the way how to persistent data:

• Disable: The data does not survive the termination of a pod.
• Persistent Volume Claim(default): A default StorageClass is needed in the Kubernetes cluster to dynamic provision the volumes. Specify another StorageClass in the storageClass or set existingClaim if you have already existing persistent volumes to use.

Install the chart

Install the nifi helm chart with a release name my-release:

helm install --name my-release cetic/nifi

Install from local clone

git clone https://github.com/lptarik/helm-nifi.git nifi
cd nifi
helm repo add incubator https://kubernetes-charts-incubator.storage.googleapis.com
helm repo update
helm dep up
helm install --name nifi .

Uninstallation

To uninstall/delete the my-release deployment:

helm delete --purge my-release

Configuration

The following table lists the configurable parameters of the nifi chart and the default values.

Parameter	Description	Default
ReplicaCount
replicaCount	Number of nifi nodes	1
Image
image.repository	nifi Image name	apache/nifi
image.tag	nifi Image tag	1.11.4
image.pullPolicy	nifi Image pull policy	IfNotPresent
image.pullSecret	nifi Image pull secret	nil
SecurityContext
securityContext.runAsUser	nifi Docker User	1000
securityContext.fsGroup	nifi Docker Group	1000
sts
sts.podManagementPolicy	Parallel podManagementPolicy	Parallel
sts.AntiAffinity	Affinity for pod assignment	soft
secrets
secrets	Pass any secrets to the nifi pods. The secret can also be mounted to a specific path if required.	nil
configmaps
configmaps	Pass any configmaps to the nifi pods. The configmap can also be mounted to a specific path if required.	nil
nifi properties
properties.externalSecure	externalSecure for when inbound SSL	false
properties.isNode	cluster node properties (only configure for cluster nodes)	true
properties.httpPort	web properties HTTP port	8080
properties.httpsPort	web properties HTTPS port	null
properties.clusterPort	cluster node port	6007
properties.clusterSecure	cluster nodes secure mode	false
properties.needClientAuth	nifi security client auth	false
properties.provenanceStorage	nifi provenance repository max storage size	8 GB
properties.siteToSite.secure	Site to Site properties Secure mode	false
properties.siteToSite.port	Site to Site properties Secure port	10000
properties.siteToSite.authorizer		managed-authorizer
properties.safetyValve	Map of explicit 'property: value' pairs that overwrite other configuration	nil
nifi user authentication
auth.ldap.enabled	Enable User auth via ldap	false
auth.ldap.host	ldap hostname	ldap://<hostname>:<port>
auth.ldap.searchBase	ldap searchBase	CN=Users,DC=example,DC=com
auth.ldap.searchFilter	ldap searchFilter	CN=john
postStart
postStart	Include additional libraries in the Nifi containers by using the postStart handler	nil
Headless Service
headless.type	Type of the headless service for nifi	ClusterIP
headless.annotations	Headless Service annotations	service.alpha.kubernetes.io/tolerate-unready-endpoints: "true"
UI Service
service.type	Type of the UI service for nifi	LoadBalancer
service.httpPort	Port to expose service	80
service.httpsPort	Port to expose service in tls	443
service.annotations	Service annotations	{}
service.loadBalancerIP	LoadBalancerIP if service type is LoadBalancer	nil
service.loadBalancerSourceRanges	Address that are allowed when svc is LoadBalancer	[]
service.processors.enabled	Enables additional port/ports to nifi service for internal processors	false
service.processors.ports	Specify "name/port/targetPort/nodePort" for processors sockets	[]
Ingress
ingress.enabled	Enables Ingress	false
ingress.annotations	Ingress annotations	{}
ingress.path	Path to access frontend (See issue #22)	/
ingress.hosts	Ingress hosts	[]
ingress.tls	Ingress TLS configuration	[]
Persistence
persistence.enabled	Use persistent volume to store data	false
persistence.storageClass	Storage class name of PVCs (use the default type if unset)	nil
persistence.accessMode	ReadWriteOnce or ReadOnly	[ReadWriteOnce]
persistence.dataStorage.size	Size of persistent volume claim	1Gi
persistence.flowfileRepoStorage.size	Size of persistent volume claim	10Gi
persistence.contentRepoStorage.size	Size of persistent volume claim	10Gi
persistence.provenanceRepoStorage.size	Size of persistent volume claim	10Gi
persistence.logStorage.size	Size of persistent volume claim	5Gi
persistence.existingClaim	Use an existing PVC to persist data	nil
jvmMemory
jvmMemory	bootstrap jvm size	2g
SideCar
sidecar.image	Separate image for tailing each log separately	ez123/alpine-tini
Resources
resources	Pod resource requests and limits for logs	{}
logResources
logresources.	Pod resource requests and limits	{}
nodeSelector
nodeSelector	Node labels for pod assignment	{}
tolerations
tolerations	Tolerations for pod assignment	[]
initContainers
initContainers	Container definition that will be added to the pod as initContainers	[]
extraVolumes
extraVolumes	Additional Volumes available within the pod (see spec for format)	[]
extraVolumeMounts
extraVolumeMounts	VolumeMounts for the nifi-server container (see spec for details)	[]
ens
env	Additional environment variables for the nifi-container (see spec for details)	[]
zookeeper
zookeeper.enabled	If true, deploy Zookeeper	true
zookeeper.url	If the Zookeeper Chart is disabled a URL and port are required to connect	nil
zookeeper.port	If the Zookeeper Chart is disabled a URL and port are required to connect	2181

Credits

Initially inspired from https://github.com/YolandaMDavis/apache-nifi.

Contributing

Feel free to contribute by making a pull request.

Please read the official Contribution Guide from Helm for more information on how you can contribute to this Chart.

License

Apache License 2.0