MDAA TS Docs
    Preparing search index...

    NiFi deployment configuration for data flow orchestration and processing.

    Defines the complete NiFi infrastructure including EKS cluster, networking, certificate management, and cluster configurations.

    Use cases: Data flow orchestration; Multi-cluster NiFi deployment; EKS-based NiFi infrastructure

    AWS: Apache NiFi configuration for EKS-based data flow orchestration

    Validation: vpcId, subnetIds, and adminRoles required; clusters and registry optional

    interface NifiProps {
        additionalEfsIngressSecurityGroupIds?: string[];
        adminRoles: MdaaRoleRef[];
        caCertDuration?: string;
        caCertRenewBefore?: string;
        certKeyAlg?: string;
        certKeySize?: number;
        clusters?: NamedNifiClusterOptions;
        eksSecurityGroupIngressRules?: MdaaSecurityGroupRuleProps;
        existingPrivateCaArn?: string;
        mgmtInstance?: MgmtInstanceProps;
        nodeCertDuration?: string;
        nodeCertRenewBefore?: string;
        registry?: NifiRegistryProps;
        securityGroupEgressRules?: MdaaSecurityGroupRuleProps;
        securityGroupIngressIPv4s?: string[];
        securityGroupIngressSGs?: string[];
        subnetIds: { [name: string]: string };
        vpcId: string;
    }
    Index

    Properties

    additionalEfsIngressSecurityGroupIds?: string[]

    Security groups granted ingress to all NiFi cluster EFS security groups. Per-cluster also supported.

    adminRoles: MdaaRoleRef[]

    Admin roles with access to EKS cluster resources.

    caCertDuration?: string

    CA certificate validity period. Defaults to 6 days. Must be <7 days for ACM Private CA short-term certs.

    caCertRenewBefore?: string

    Time before CA cert expiration to trigger renewal. Defaults to 12 hours.

    certKeyAlg?: string

    Certificate key algorithm (e.g., RSA, ECDSA).

    certKeySize?: number

    Certificate key size in bits (e.g., 2048, 4096).

    Named NiFi cluster configurations.

    eksSecurityGroupIngressRules?: MdaaSecurityGroupRuleProps

    Ingress rules for the EKS control plane security group.

    existingPrivateCaArn?: string

    Existing ACM Private CA ARN for signing the internal CA. If omitted, a new CA is created.

    mgmtInstance?: MgmtInstanceProps

    Optional EC2 management instance for EKS cluster administration with kubectl access.

    nodeCertDuration?: string

    Node certificate validity period. Defaults to 5 days. Must be <6 days for ACM Private CA short-term certs.

    nodeCertRenewBefore?: string

    Time before node cert expiration to trigger renewal. Defaults to 12 hours.

    NiFi Registry configuration for flow versioning and template management.

    securityGroupEgressRules?: MdaaSecurityGroupRuleProps

    Global egress rules for all NiFi cluster security groups. Per-cluster rules also supported.

    securityGroupIngressIPv4s?: string[]

    IPv4 CIDRs granted ingress to all NiFi cluster security groups. Per-cluster also supported.

    securityGroupIngressSGs?: string[]

    Security groups granted ingress to all NiFi cluster security groups. Per-cluster also supported.

    subnetIds: { [name: string]: string }

    Named subnet ID mappings for cluster deployment.

    vpcId: string

    VPC ID for EKS and NiFi cluster deployment.