You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@kudu.apache.org by to...@apache.org on 2020/04/07 22:21:16 UTC
[kudu] 02/04: [ranger] update description of Ranger integration
related flags
This is an automated email from the ASF dual-hosted git repository.
todd pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/kudu.git
commit cd65d50a464dba0aef0738f02cf4b08378099fb9
Author: Hao Hao <ha...@cloudera.com>
AuthorDate: Mon Apr 6 21:41:09 2020 -0700
[ranger] update description of Ranger integration related flags
This patch updates the description of Ranger related flags to
make it more clear how to enable Ranger integration.
Change-Id: If782f022ada6606b31d720f1dba793af45e8003e
Reviewed-on: http://gerrit.cloudera.org:8080/15670
Reviewed-by: Andrew Wong <aw...@cloudera.com>
Tested-by: Kudu Jenkins
---
src/kudu/ranger/ranger_client.cc | 27 +++++++++++++++------------
1 file changed, 15 insertions(+), 12 deletions(-)
diff --git a/src/kudu/ranger/ranger_client.cc b/src/kudu/ranger/ranger_client.cc
index c661f69..00352e2 100644
--- a/src/kudu/ranger/ranger_client.cc
+++ b/src/kudu/ranger/ranger_client.cc
@@ -49,22 +49,25 @@
#include "kudu/util/string_case.h"
#include "kudu/util/subprocess.h"
-DEFINE_string(ranger_java_path, "",
- "The path where the Java binary was installed. If "
- "the value isn't an absolute path (e.g. 'java'), it will be "
- "evaluated using the Kudu user's PATH. Empty string means "
- "$JAVA_HOME/bin/java is used. If $JAVA_HOME is not found, Kudu "
- "will attempt to find 'java' in $PATH.");
-
DEFINE_string(ranger_config_path, "",
"Path to directory containing Ranger client configuration. "
- "Enables Ranger authorization provider. "
- "sentry_service_rpc_addresses must not be set if this is "
- "enabled.");
+ "When set, Ranger integration is enabled, fine-grained access "
+ "control is enforced, and clients are issued authorization "
+ "tokens. In addition, both --ranger_java_path and --ranger_jar_path "
+ "flags need to be set properly for Ranger integration to work. "
+ "The --sentry_service_rpc_addresses flag, which enables Sentry "
+ "integration, must not be set if this is enabled.");
+
+DEFINE_string(ranger_java_path, "",
+ "Path where the Java binary was installed. If the value "
+ "isn't an absolute path (e.g. 'java'), it will be evaluated "
+ "using the Kudu user's PATH. If not specified, $JAVA_HOME/bin/java "
+ "is used. If $JAVA_HOME is not found, Kudu will attempt to "
+ "find 'java' in the Kudu user's PATH.");
DEFINE_string(ranger_jar_path, "",
- "Path to the JAR file containing the Ranger subprocess. "
- "If not set, the default JAR file path is expected to be"
+ "Path to the JAR file containing the Ranger subprocess. If "
+ "not specified, the default JAR file path is expected to be "
"next to the master binary.");
DEFINE_string(ranger_receiver_fifo_dir, "",