Deploy a simple nifi

[paulocabrita-ionos]

Hallo.

I'm trying to do a simple deployment of a Nifi server but everytime I try to access it (using a port-forward to the port 8443), I have "connection reused" in my console.

This is what I've done:

• The stackable operators are installed for the version 23.4;
• kubectl apply -f ./zookeeper.yaml

---
apiVersion: zookeeper.stackable.tech/v1alpha1
kind: ZookeeperCluster
metadata:
  name: simple-zk
spec:
  image:
    productVersion: 3.8.0
    stackableVersion: 23.4.0
  servers:
    roleGroups:
      default:
        replicas: 1

• kubectl apply -f ./nifi.yaml

---
apiVersion: nifi.stackable.tech/v1alpha1
kind: NifiCluster
metadata:
  name: simple-nifi
spec:
  image:
    productVersion: 1.18.0
    stackableVersion: 23.4.0
  clusterConfig:
    zookeeperConfigMapName: simple-zk
    authentication:
      method:
        singleUser:
          adminCredentialsSecret: nifi-admin-credentials
          autoGenerate: true
    sensitiveProperties:
      keySecret: nifi-sensitive-property-key
      autoGenerate: true
  nodes:
    roleGroups:
      default:
        replicas: 1

• I've created the "nifi-admin-credentials" secret;
• kubectl get pods

NAME                         READY   STATUS    RESTARTS   AGE   IP             NODE                  
nifi-node-default-0          1/1     Running   0          32m   10.214.4.228   pjc-node-h5kj6e7egu   
simple-zk-server-default-0   1/1     Running   0          34m   10.214.4.226   pjc-node-h5kj6e7egu

• kubectl get svc

NAME                         READY   STATUS    RESTARTS   AGE   IP             NODE                  
NAME                       TYPE        CLUSTER-IP      EXTERNAL-IP   PORT(S)             
nifi                       ClusterIP   10.233.35.237   <none>        8443/TCP            
nifi-node-default          ClusterIP   None            <none>        8443/TCP,8081/TCP   
simple-zk                  ClusterIP   10.233.52.59    <none>        2282/TCP            
simple-zk-server-default   ClusterIP   None            <none>        2282/TCP,9505/TCP  

• kubectl port-forward nifi-node-default-0 8443:8443

Questions:

• can I use http (8080) instead of https (8043)?
• what am I missing in my present configuration?

I looked here https://github.com/stackabletech/nifi-operator/blob/main/deploy/helm/nifi-operator/crds/crds.yaml, but I could find anything related to my issue,

Please advise.

Thanks

PJC

[soenkeliebau]

At a glance it looks like you are doing everything correct. The issue is, that NiFi doesn't listen on localhost for .. reasons. It can only be configured to either listen on localhost (and thus not accept connections from the outside) or on the kubernetes internal interface (and thus not accepting port forwards which try to access localhost).

The solution is to use a Nodeport or LoadBalancer service to access NiFi.

For nodeport services, the operator can automatically create these for you, see here: https://docs.stackable.tech/home/stable/concepts/service-exposition.html

LoadBalancer services you currently have to create manually.

We should really add this NiFi limitation to our docs though, I'll create a PR for this.

[paulocabrita-ionos]

Thanks for your answer.

I used NodePort and LoadBalancer and it worked.