Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

If you are here, you already know that Apache Ranger is becoming an universal Authorization Framework for most of the data platforms in the CLOUD.  To make it easier for new Ranger users to try the Apache Ranger in action, we have created a docker based setup process that will take few steps to make the Apache Ranger running on your system (in few mins).

software prerequisites

Here are the pre-requisites to run Apache Ranger on your system: 

  • You must have a latest version of Docker and Docker-Compose installed on your system
  • You should be able to run BASH (shell) script from your system

Downloading Apache Ranger

With these simple requirements, you can start  downloading the latest version of Apache Ranger using the following command:

Code Block
languagebash
firstline1
titleDownloading Apache Ranger
linenumberstrue
mkdir -p ${HOME}/git
cd ${HOME}/git
git clone https://github.com/apache/ranger.git

Anchor
bringup_ranger
bringup_ranger
Bring up Apache Ranger (Builds if needed)

Once you have latest Apache Ranger on your system, you can start the setup of Apache Ranger by following commands below:

...

As specified in the ENABLED_RANGER_SERVICES variables, additional services are also created as docker containers and runs with ranger plugin(s) installed and configured to work with the Ranger instance. You can login into these services (e.g.: Apache Hive Service)  and execute appropriate  (e.g.: Hive SQL) commands to see how Apache Ranger is enforcing your Authorization Policies and also, creates necessary audit records to provide an Enterprise Data Governance Framework.

Shutdown Apache Ranger & related services

If you want to turn off the Apache Ranger & its related services, please follow the instruction below:

...

You can always bring the services up by following the instruction specified in section:  Bring up Apache Ranger (Builds if needed)

List of Ranger Services & its LISTEN port

#Service NameListen PortCore Ranger Service ?
1ranger6080/tcpY (ranger engine)
2ranger-postgres5432/tcpY (ranger datastore)
3ranger-solr8983/tcpY (audit store)
4ranger-zk2181/tcpY (used by solr)
5ranger-usersync-Y (user/group synchronization from Local Linux/Mac)
6ranger-kms8443N (needed only for Encrypted Storage / TDE)
7ranger-tagsync-N (needed only for Tag Based Policies to be sync from ATLAS)

List of Data Engine Services (protected by Apache Ranger) & its LISTEN port

#Service NameListen PortService Description
1Hadoop

8088/tcp
9000/tcp

Apache Hadoop 3.3.0
Protected by Apache Ranger's Hadoop Plugin

2HBase16000/tcp
16010/tcp
16020/tcp
16030/tcp
Apache HBase 2.2.6
Protected by Apache Ranger's HBase Plugin
3

Hive

10000/tcpApache Hive 3.1.2
Protected by Apache Ranger's Hive Plugin
4Kafka6667/tcpApache Kafka 2.12-2.5.0
Protected by Apache Ranger's Kafka Plugin
5Knox8443/tcpApache Knox 1.4.0
Protected by Apache Ranger's Knox Plugin

...