You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ranger.apache.org by rm...@apache.org on 2026/04/09 00:32:45 UTC
(ranger) branch RANGER-5520-patch updated (f6ec12bb3 -> 088fac593)
This is an automated email from the ASF dual-hosted git repository.
rmani pushed a change to branch RANGER-5520-patch
in repository https://gitbox.apache.org/repos/asf/ranger.git
from f6ec12bb3 RANGER-5520:Audit Server refactoring to segregate audit ingestion and dispatching functionality - Fix review comments #4 - remove audit dispatcher registry
add e29143694 RANGER-5524: Bump GitHub Action versions (#883)
add ca0675e59 RANGER-5527: fix unit tests in TestLdapUserGroupBuilder (#887)
add 123fadb42 RANGER-5526: Security Zone creation fails with tag service due to NonUniqueResultException (#884)
add 15ffb04e4 RANGER-5523: replace jersey-bundle dependency with jersey-client and jersey-core in plugins (#882)
add 63d5aab1a RANGER-5529: RangerAuthorizer update to be REST friendly (#890)
add f180bee5b RANGER-5522: update tagsync to process Atlas notifications for Trino entities (#895)
add 70138c40c RANGER-5435: Change the default KMS ZoneKey length from 128 to 256 (#902)
add e4c0a6628 RANGER-5371: pdp server implementation (#899)
add 160674812 RANGER-5463: Update userstore version after group-user mapping changes in createOrDeleteXGroupUserList
add fd5ec7aea RANGER-5532: Ranger Performance Analyser: Python 3.11 Support and Enhancements (#900)
add 088fac593 Merge branch 'master' into RANGER-5520-patch
No new revisions were added by this update.
Summary of changes:
.github/workflows/ci.yml | 28 +-
.github/workflows/docs.yml | 6 +-
.github/workflows/upgrade-ranger.yaml | 2 +-
agents-common/pom.xml | 18 +-
.../service-defs/ranger-servicedef-ozone.json | 2 +-
.../apache/ranger/authz/api/RangerAuthorizer.java | 8 +-
.../ranger/authz/model/RangerAuthzResult.java | 13 +-
.../ranger/authz/model/RangerMultiAuthzResult.java | 13 +-
....java => RangerResourcePermissionsRequest.java} | 44 +-
.../org/apache/ranger/authz/DummyAuthorizer.java | 5 +-
.../ranger/authz/embedded/RangerAuthzPlugin.java | 26 +-
.../authz/embedded/RangerEmbeddedAuthorizer.java | 48 +-
.../authz/embedded/TestEmbeddedAuthorizer.java | 3 +-
dev-support/ranger-docker/.dockerignore | 7 +
dev-support/ranger-docker/.env | 4 +
...ile.ranger-opensearch => Dockerfile.ranger-pdp} | 25 +-
dev-support/ranger-docker/README.md | 13 +-
.../ranger-docker/docker-compose.ranger-pdp.yml | 61 +++
.../ranger-docker/scripts/kdc/entrypoint.sh | 7 +
.../ranger-docker/scripts/pdp}/logback.xml | 22 +-
.../ranger-docker/scripts/pdp/ranger-pdp-site.xml | 240 ++++++++++
.../ranger-pdp.sh} | 23 +-
distro/pom.xml | 8 +
distro/src/main/assembly/admin-web.xml | 1 +
distro/src/main/assembly/kms.xml | 2 +-
distro/src/main/assembly/pdp.xml | 207 +++++++++
distro/src/main/assembly/plugin-atlas.xml | 4 +-
distro/src/main/assembly/plugin-elasticsearch.xml | 4 +-
distro/src/main/assembly/plugin-kafka.xml | 3 +-
distro/src/main/assembly/plugin-ozone.xml | 12 +-
distro/src/main/assembly/plugin-presto.xml | 8 +-
distro/src/main/assembly/plugin-solr.xml | 4 +-
distro/src/main/assembly/plugin-trino.xml | 8 +-
distro/src/main/assembly/ranger-tools.xml | 2 +-
distro/src/main/assembly/sample-client.xml | 2 +-
distro/src/main/assembly/storm-agent.xml | 4 +-
distro/src/main/assembly/usersync.xml | 2 +-
hbase-agent/pom.xml | 12 +-
hdfs-agent/pom.xml | 6 +
hive-agent/pom.xml | 6 +
intg/src/main/python/README.md | 470 +++++++++++++++-----
.../main/python/apache_ranger/client/__init__.py | 31 ++
.../apache_ranger/client/ranger_pdp_client.py | 84 ++++
intg/src/main/python/apache_ranger/exceptions.py | 22 +-
.../main/python/apache_ranger/model/__init__.py | 19 +
.../python/apache_ranger/model/ranger_authz.py | 260 +++++++++++
.../apache/hadoop/crypto/key/kms/server/KMS.java | 3 +-
knox-agent/pom.xml | 6 +
pdp/conf.dist/README-k8s.md | 103 +++++
.../main/resources => pdp/conf.dist}/logback.xml | 9 +-
pdp/conf.dist/ranger-pdp-site.xml | 364 +++++++++++++++
pdp/pom.xml | 200 +++++++++
pdp/scripts/ranger-pdp-services.sh | 223 ++++++++++
pdp/scripts/ranger-pdp.sh | 76 ++++
.../org/apache/ranger/pdp/RangerPdpServer.java | 295 +++++++++++++
.../java/org/apache/ranger/pdp/RangerPdpStats.java | 113 +++++
.../apache/ranger/pdp/RangerPdpStatusServlet.java | 129 ++++++
.../apache/ranger/pdp/config/RangerPdpConfig.java | 281 ++++++++++++
.../ranger/pdp/config/RangerPdpConstants.java | 94 ++++
.../org/apache/ranger/pdp/model/ErrorResponse.java | 33 +-
.../ranger/pdp/rest/RangerPdpApplication.java | 62 +++
.../org/apache/ranger/pdp/rest/RangerPdpREST.java | 491 +++++++++++++++++++++
.../pdp/security/HttpHeaderAuthNHandler.java | 71 +++
.../ranger/pdp/security/JwtAuthNHandler.java | 105 +++++
.../ranger/pdp/security/KerberosAuthNHandler.java | 275 ++++++++++++
.../ranger/pdp/security/PdpAuthNHandler.java | 111 +++++
.../ranger/pdp/security/RangerPdpAuthNFilter.java | 189 ++++++++
.../security/RangerPdpRequestContextFilter.java | 47 +-
pdp/src/main/resources/ranger-pdp-default.xml | 364 +++++++++++++++
.../org/apache/ranger/pdp/RangerPdpStatsTest.java | 54 +++
.../ranger/pdp/RangerPdpStatusServletTest.java | 108 +++++
.../ranger/pdp/config/RangerPdpConfigTest.java | 39 +-
.../apache/ranger/pdp/rest/RangerPdpRESTTest.java | 360 +++++++++++++++
.../pdp/security/HttpHeaderAuthNHandlerTest.java | 84 ++++
.../pdp/security/KerberosAuthHandlerTest.java | 69 +++
.../pdp/security/RangerPdpAuthNFilterTest.java | 99 +++++
.../RangerPdpRequestContextFilterTest.java | 132 ++++++
plugin-kafka/pom.xml | 6 +
plugin-kms/pom.xml | 6 +
pom.xml | 4 +
.../src/main/python/sample_kms_client.py | 86 ++++
.../src/main/python/sample_pdp_client.py | 101 +++++
ranger-tools/src/main/python/README.md | 22 +-
.../src/main/python/performance_analyzer.py | 24 +-
.../ranger_perf_utils/dataframe_utils.py | 4 +-
ranger-tools/src/main/python/requirements.txt | 8 +-
security-admin/pom.xml | 6 +
.../main/java/org/apache/ranger/biz/XUserMgr.java | 10 +-
.../apache/ranger/service/XGroupUserService.java | 8 +-
.../main/java/org/apache/ranger/view/VXKmsKey.java | 2 +-
.../src/views/Encryption/KeyCreate.jsx | 2 +-
...stXGroupUserServiceGroupUserMappingUpdator.java | 45 +-
tagsync/pom.xml | 6 +
.../source/atlas/AtlasResourceMapperUtil.java | 1 +
.../source/atlas/AtlasTrinoResourceMapper.java | 122 +++++
.../tagsync/process/TestTrinoResourceMapper.java | 179 ++++++++
ugsync/pom.xml | 17 +
.../process/TestLdapUserGroupBuilder.java | 12 +-
unixauthclient/pom.xml | 11 -
99 files changed, 6702 insertions(+), 368 deletions(-)
copy authz-api/src/main/java/org/apache/ranger/authz/model/{RangerAuthzRequest.java => RangerResourcePermissionsRequest.java} (66%)
copy dev-support/ranger-docker/{Dockerfile.ranger-opensearch => Dockerfile.ranger-pdp} (54%)
create mode 100644 dev-support/ranger-docker/docker-compose.ranger-pdp.yml
copy {kms/src/main/resources => dev-support/ranger-docker/scripts/pdp}/logback.xml (70%)
create mode 100644 dev-support/ranger-docker/scripts/pdp/ranger-pdp-site.xml
copy dev-support/ranger-docker/scripts/{hadoop/ranger-hadoop-healthcheck.sh => pdp/ranger-pdp.sh} (64%)
mode change 100755 => 100644
create mode 100644 distro/src/main/assembly/pdp.xml
create mode 100644 intg/src/main/python/apache_ranger/client/ranger_pdp_client.py
create mode 100644 intg/src/main/python/apache_ranger/model/ranger_authz.py
create mode 100644 pdp/conf.dist/README-k8s.md
copy {kms/src/main/resources => pdp/conf.dist}/logback.xml (88%)
create mode 100644 pdp/conf.dist/ranger-pdp-site.xml
create mode 100644 pdp/pom.xml
create mode 100644 pdp/scripts/ranger-pdp-services.sh
create mode 100644 pdp/scripts/ranger-pdp.sh
create mode 100644 pdp/src/main/java/org/apache/ranger/pdp/RangerPdpServer.java
create mode 100644 pdp/src/main/java/org/apache/ranger/pdp/RangerPdpStats.java
create mode 100644 pdp/src/main/java/org/apache/ranger/pdp/RangerPdpStatusServlet.java
create mode 100644 pdp/src/main/java/org/apache/ranger/pdp/config/RangerPdpConfig.java
create mode 100644 pdp/src/main/java/org/apache/ranger/pdp/config/RangerPdpConstants.java
copy agents-common/src/main/java/org/apache/ranger/plugin/model/RangerMetrics.java => pdp/src/main/java/org/apache/ranger/pdp/model/ErrorResponse.java (58%)
create mode 100644 pdp/src/main/java/org/apache/ranger/pdp/rest/RangerPdpApplication.java
create mode 100644 pdp/src/main/java/org/apache/ranger/pdp/rest/RangerPdpREST.java
create mode 100644 pdp/src/main/java/org/apache/ranger/pdp/security/HttpHeaderAuthNHandler.java
create mode 100644 pdp/src/main/java/org/apache/ranger/pdp/security/JwtAuthNHandler.java
create mode 100644 pdp/src/main/java/org/apache/ranger/pdp/security/KerberosAuthNHandler.java
create mode 100644 pdp/src/main/java/org/apache/ranger/pdp/security/PdpAuthNHandler.java
create mode 100644 pdp/src/main/java/org/apache/ranger/pdp/security/RangerPdpAuthNFilter.java
copy kms/src/main/java/org/apache/hadoop/crypto/key/kms/server/HSTSFilter.java => pdp/src/main/java/org/apache/ranger/pdp/security/RangerPdpRequestContextFilter.java (53%)
create mode 100644 pdp/src/main/resources/ranger-pdp-default.xml
create mode 100644 pdp/src/test/java/org/apache/ranger/pdp/RangerPdpStatsTest.java
create mode 100644 pdp/src/test/java/org/apache/ranger/pdp/RangerPdpStatusServletTest.java
copy unixauthclient/src/test/java/org/apache/ranger/authentication/unix/jaas/TestUnixGroupPrincipal.java => pdp/src/test/java/org/apache/ranger/pdp/config/RangerPdpConfigTest.java (52%)
create mode 100644 pdp/src/test/java/org/apache/ranger/pdp/rest/RangerPdpRESTTest.java
create mode 100644 pdp/src/test/java/org/apache/ranger/pdp/security/HttpHeaderAuthNHandlerTest.java
create mode 100644 pdp/src/test/java/org/apache/ranger/pdp/security/KerberosAuthHandlerTest.java
create mode 100644 pdp/src/test/java/org/apache/ranger/pdp/security/RangerPdpAuthNFilterTest.java
create mode 100644 pdp/src/test/java/org/apache/ranger/pdp/security/RangerPdpRequestContextFilterTest.java
create mode 100644 ranger-examples/sample-client/src/main/python/sample_kms_client.py
create mode 100644 ranger-examples/sample-client/src/main/python/sample_pdp_client.py
create mode 100644 tagsync/src/main/java/org/apache/ranger/tagsync/source/atlas/AtlasTrinoResourceMapper.java
create mode 100644 tagsync/src/test/java/org/apache/ranger/tagsync/process/TestTrinoResourceMapper.java