-
Notifications
You must be signed in to change notification settings - Fork 1k
RANGER-5383: updated plugin install to support configurations for Kerberized Solr audit destination #714
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
…berized Solr audit destination
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Pull Request Overview
This PR adds support for Kerberos authentication when connecting to Solr audit destinations across all Apache Ranger plugins, enabling secure audit logging in Kerberized environments.
Key changes:
- Added JAAS configuration properties for Kerberos authentication in all plugin install.properties files
- Updated audit configuration change files to map JAAS properties to the plugin audit XML files
- Configurations include login module specification, keytab paths, principals, and control flags
Reviewed Changes
Copilot reviewed 31 out of 31 changed files in this pull request and generated no comments.
Show a summary per file
| File | Description |
|---|---|
| storm-agent/scripts/install.properties | Added Kerberos JAAS configuration properties for Storm plugin |
| storm-agent/conf/ranger-storm-audit-changes.cfg | Added JAAS property mappings for Storm audit configuration |
| plugin-yarn/scripts/install.properties | Added Kerberos JAAS configuration properties for YARN plugin |
| plugin-yarn/conf/ranger-yarn-audit-changes.cfg | Added JAAS property mappings for YARN audit configuration |
| plugin-trino/scripts/install.properties | Added Kerberos JAAS configuration properties for Trino plugin |
| plugin-trino/conf/ranger-trino-audit-changes.cfg | Added JAAS property mappings for Trino audit configuration |
| plugin-sqoop/scripts/install.properties | Added Kerberos JAAS configuration properties for Sqoop plugin |
| plugin-sqoop/conf/ranger-sqoop-audit-changes.cfg | Added JAAS property mappings for Sqoop audit configuration |
| plugin-solr/scripts/install.properties | Added Kerberos JAAS configuration properties for Solr plugin |
| plugin-solr/conf/ranger-solr-audit-changes.cfg | Added JAAS property mappings for Solr audit configuration |
| plugin-presto/scripts/install.properties | Added Kerberos JAAS configuration properties for Presto plugin |
| plugin-presto/conf/ranger-presto-audit-changes.cfg | Added JAAS property mappings for Presto audit configuration |
| plugin-ozone/scripts/install.properties | Added Kerberos JAAS configuration properties for Ozone plugin |
| plugin-ozone/conf/ranger-ozone-audit-changes.cfg | Added JAAS property mappings for Ozone audit configuration |
| plugin-kylin/scripts/install.properties | Added Kerberos JAAS configuration properties for Kylin plugin |
| plugin-kylin/conf/ranger-kylin-audit-changes.cfg | Added JAAS property mappings for Kylin audit configuration |
| plugin-kms/conf/ranger-kms-audit-changes.cfg | Added JAAS property mappings for KMS audit configuration |
| plugin-kafka/scripts/install.properties | Added Kerberos JAAS configuration properties for Kafka plugin |
| plugin-kafka/conf/ranger-kafka-audit-changes.cfg | Added JAAS property mappings for Kafka audit configuration |
| plugin-elasticsearch/scripts/install.properties | Added Kerberos JAAS configuration properties for Elasticsearch plugin |
| plugin-elasticsearch/conf/ranger-elasticsearch-audit-changes.cfg | Added JAAS property mappings for Elasticsearch audit configuration |
| plugin-atlas/scripts/install.properties | Added Kerberos JAAS configuration properties for Atlas plugin |
| knox-agent/scripts/install.properties | Added Kerberos JAAS configuration properties for Knox agent |
| knox-agent/conf/ranger-knox-audit-changes.cfg | Added JAAS property mappings for Knox audit configuration |
| kms/scripts/install.properties | Added Kerberos JAAS configuration properties for KMS |
| hive-agent/scripts/install.properties | Added Kerberos JAAS configuration properties for Hive agent |
| hive-agent/conf/ranger-hive-audit-changes.cfg | Added JAAS property mappings for Hive audit configuration |
| hdfs-agent/scripts/install.properties | Added Kerberos JAAS configuration properties for HDFS agent |
| hdfs-agent/conf/ranger-hdfs-audit-changes.cfg | Added JAAS property mappings for HDFS audit configuration |
| hbase-agent/scripts/install.properties | Added Kerberos JAAS configuration properties for HBase agent |
| hbase-agent/conf/ranger-hbase-audit-changes.cfg | Added JAAS property mappings for HBase audit configuration |
Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.
What changes were proposed in this pull request?
install.propertiesused to setup plugins has been updated to support configurations for Kerberized Solr audit destination.How was this patch tested?
Verified that plugin installation sets up new configurations in ranger--audit.xml.