Skip to content

HDDS-4485. [DOC] add the authentication rules of the Ozone Ranger. #1603

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
runzhiwang merged 7 commits into from
Dec 1, 2020
Merged

HDDS-4485. [DOC] add the authentication rules of the Ozone Ranger. #1603

Show file tree
Hide file tree
Changes from 3 commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
7e56638
Modification of the operating introduction of ozone ranger.
captainzmc Nov 19, 2020
4e9ae26
fix style
captainzmc Nov 19, 2020
f460df7
fix style
captainzmc Nov 19, 2020
826429e
Update hadoop-hdds/docs/content/security/SecurityWithRanger.md
captainzmc Nov 19, 2020
a61a3b9
Update hadoop-hdds/docs/content/security/SecurityWithRanger.md
captainzmc Nov 19, 2020
652a566
fix review issues.
captainzmc Nov 23, 2020
c310d72
trigger new CI check
captainzmc Nov 23, 2020
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
21 changes: 19 additions & 2 deletions hadoop-hdds/docs/content/security/SecurityWithRanger.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -27,8 +27,9 @@ icon: user


Apache Ranger™ is a framework to enable, monitor and manage comprehensive data
security across the Hadoop platform. Any version of Apache Ranger which is greater
than 1.20 is aware of Ozone, and can manage an Ozone cluster.
security across the Hadoop platform. Apache Ranger has supported Ozone authentication
since version 2.0. However, due to some bugs in 2.0, we prefer to use Apache Ranger
2.1 and later version.
Comment thread
captainzmc marked this conversation as resolved.
Outdated


To use Apache Ranger, you must have Apache Ranger installed in your Hadoop
Expand All @@ -44,3 +45,19 @@ Property|Value
--------|------------------------------------------------------------
ozone.acl.enabled | true
ozone.acl.authorizer.class| org.apache.ranger.authorization.ozone.authorizer.RangerOzoneAuthorizer

The ranger permissions corresponding to Ozone operation are as follows:
Comment thread
captainzmc marked this conversation as resolved.
Outdated

| operation&permission | Volume permission | Bucket permission | Key permission |
| :--- | :--- | :--- | :--- |
| Create volume | CREATE | | |
| List volume | LIST | | |
| Get volume Info | READ | | |
| Delete volume | DELETE | | |
| Create bucket | READ | CREATE | |
| List bucket | LIST, READ | | |
| Get bucket info | READ | READ | |
| Delete bucket | READ | DELETE | |
| List key | READ | LIST, READ | |
| Write key | READ | READ | CREATE, WRITE |
| Read key | READ | READ | READ |
18 changes: 17 additions & 1 deletion hadoop-hdds/docs/content/security/SecurityWithRanger.zh.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,7 @@ icon: user
-->


Apache Ranger™ 是一个用于管理和监控 Hadoop 平台复杂数据权限的框架。版本大于 1.20 的 Apache Ranger 都可以用于管理 Ozone 集群。
Apache Ranger™ 是一个用于管理和监控 Hadoop 平台复杂数据权限的框架。Apache Ranger 从2.0版本开始支持ozone鉴权。但由于在2.0中存在一些bug，因此我们更推荐使用Apache Ranger 2.1及以后版本。

@cku328 cku328 Nov 21, 2020

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ozone -> Ozone
I think Ozone should start with a uppercase letter.


你需要先在你的 Hadoop 集群上安装 Apache Ranger，安装指南可以参考 [Apache Ranger 官网](https://ranger.apache.org/index.html).

Expand All @@ -36,3 +36,19 @@ Apache Ranger™ 是一个用于管理和监控 Hadoop 平台复杂数据权限
--------|------------------------------------------------------------
ozone.acl.enabled | true
ozone.acl.authorizer.class| org.apache.ranger.authorization.ozone.authorizer.RangerOzoneAuthorizer

Ozone各类操作对应ranger权限如下：

| operation&permission | Volume permission | Bucket permission | Key permission |
| :--- | :--- | :--- | :--- |
| Create volume | CREATE | | |
| List volume | LIST | | |
| Get volume Info | READ | | |
| Delete volume | DELETE | | |
| Create bucket | READ | CREATE | |
| List bucket | LIST, READ | | |
| Get bucket info | READ | READ | |
| Delete bucket | READ | DELETE | |
| List key | READ | LIST, READ | |
| Write key | READ | READ | CREATE, WRITE |
| Read key | READ | READ | READ |