You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by Pradeep Agrawal <pr...@gmail.com> on 2023/12/20 09:30:32 UTC
Re: Review Request 74752: RANGER-4543 : Add flink service user to default audit filters, and add spark3 path for default audit filters in HDFS
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/74752/#review226071
-----------------------------------------------------------
Ship it!
Ship It!
- Pradeep Agrawal
On Nov. 22, 2023, 12:14 p.m., Abhishek Patil wrote:
>
> -----------------------------------------------------------
> This is an automatically generated e-mail. To reply, visit:
> https://reviews.apache.org/r/74752/
> -----------------------------------------------------------
>
> (Updated Nov. 22, 2023, 12:14 p.m.)
>
>
> Review request for ranger, Dineshkumar Yadav, Mehul Parikh, and Pradeep Agrawal.
>
>
> Bugs: RANGER-4543
> https://issues.apache.org/jira/browse/RANGER-4543
>
>
> Repository: ranger
>
>
> Description
> -------
>
> The flink service user generates a huge number of audits on the path "/user/flink/applicationHistory" for the listStatus operation. This operation is performed frequently and these audits do not add much value.
> It will be better to add the flink user to the default hdfs audit filters for the above mentioned operation
>
> Similarly, spark user generates audits for the path "/user/spark/spark3ApplicationHistory". Although, there is a default audit filter for spark user,
> it is present for the path "/user/spark/spark3ApplicationHistory", and not for Spark3 application.
> Hence, the path for Spark3 application also has to be added in the default audit filters
>
>
> Diffs
> -----
>
> agents-common/src/main/resources/service-defs/ranger-servicedef-hdfs.json bc021a0dd
>
>
> Diff: https://reviews.apache.org/r/74752/diff/3/
>
>
> Testing
> -------
>
> Tested on a fresh install cluster and verified that no audits are logged for flink user on the path "/user/flink/applicationHistory", for the "listStatus" operation, after the servicedef is updated for hdfs service
>
>
> Thanks,
>
> Abhishek Patil
>
>