THIS IS A TEST INSTANCE. ALL YOUR CHANGES WILL BE LOST!!!!
...
An example of such Blueprint where everything is set manually (note that this just covers a subset of currently supported configuration properties and ranger plugins):
| Wiki Markupcode |
|---|
{
"configurations" : [
{
"admin-properties" : {
"properties_attributes" : { },
"properties" : {
"DB_FLAVOR" : "MYSQL",
"audit_db_name" : "ranger_audit",
"db_name" : "ranger",
"audit_db_user" : "rangerlogger",
"SQL_CONNECTOR_JAR" : "/usr/share/java/mysql-connector-java.jar",
"db_user" : "rangeradmin",
"policymgr_external_url" : "http://%HOSTGROUP::host_group_1%:6080",
"db_host" : "172.17.0.9:3306",
"db_root_user" : "root"
}
}
},
{
"ranger-kms-security" : {
"properties_attributes" : { },
"properties" : {
"ranger.plugin.kms.policy.cache.dir" : "/etc/ranger/{{repo_name}}/policycache",
"ranger.plugin.kms.policy.pollIntervalMs" : "30000",
"ranger.plugin.kms.policy.rest.ssl.config.file" : "/etc/ranger/kms/conf/ranger-policymgr-ssl.xml",
"ranger.plugin.kms.policy.source.impl" : "org.apache.ranger.admin.client.RangerAdminRESTClient",
"ranger.plugin.kms.service.name" : "{{repo_name}}",
"ranger.plugin.kms.policy.rest.url" : "{{policymgr_mgr_url}}"
}
}
},
{
"ranger-kms-site" : {
"properties_attributes" : { },
"properties" : {
"ranger.service.shutdown.port" : "7085",
"ranger.contextName" : "/kms",
"xa.webapp.dir" : "./webapp",
"ranger.service.https.port" : "9393",
"ranger.service.host" : "{{kms_host}}",
"ranger.service.https.attrib.ssl.enabled" : "false",
"ranger.service.http.port" : "{{kms_port}}"
}
}
},
{
"cluster-env" : {
"properties_attributes" : { },
"properties" : {
"user_group" : "hadoop",
"repo_ubuntu_template" : "{{package_type}} {{base_url}} {{components}}",
"repo_suse_rhel_template" : "[{{repo_id}}]\nname={{repo_id}}\n{% if mirror_list %}mirrorlist={{mirror_list}}{% else %}baseurl={{base_url}}{% endif %}\n\npath=/\nenabled=1\ngpgcheck=0",
"kerberos_domain" : "EXAMPLE.COM",
"fetch_nonlocal_groups" : "true",
"override_uid" : "true",
"smokeuser" : "ambari-qa",
"security_enabled" : "false",
"smokeuser_keytab" : "/etc/security/keytabs/smokeuser.headless.keytab",
"ignore_groupsusers_create" : "false"
}
}
},
{
"kms-site" : {
"properties_attributes" : { },
"properties" : {
"hadoop.kms.security.authorization.manager" : "org.apache.ranger.authorization.kms.authorizer.RangerKmsAuthorizer",
"hadoop.kms.current.key.cache.timeout.ms" : "30000",
"hadoop.kms.authentication.signer.secret.provider.zookeeper.path" : "/hadoop-kms/hadoop-auth-signature-secret",
"hadoop.kms.key.provider.uri" : "dbks://http@localhost:9292/kms",
"hadoop.kms.cache.enable" : "true",
"hadoop.kms.audit.aggregation.window.ms" : "10000",
"hadoop.kms.authentication.type" : "simple",
"hadoop.kms.cache.timeout.ms" : "600000",
"hadoop.kms.authentication.signer.secret.provider.zookeeper.connection.string" : "#HOSTNAME#:#PORT#,...",
"hadoop.kms.authentication.signer.secret.provider.zookeeper.auth.type" : "kerberos",
"hadoop.kms.authentication.kerberos.name.rules" : "DEFAULT",
"hadoop.kms.authentication.kerberos.keytab" : "${user.home}/kms.keytab",
"hadoop.kms.authentication.kerberos.principal" : "HTTP/localhost",
"hadoop.kms.authentication.signer.secret.provider" : "random",
"hadoop.kms.authentication.signer.secret.provider.zookeeper.kerberos.principal" : "kms/#HOSTNAME#",
"hadoop.kms.authentication.signer.secret.provider.zookeeper.kerberos.keytab" : "/etc/hadoop/conf/kms.keytab"
}
}
},
{
"ranger-hdfs-plugin-properties" : {
"properties_attributes" : { },
"properties" : {
"REPOSITORY_CONFIG_USERNAME" : "hadoop",
"ranger-hdfs-plugin-enabled" : "Yes",
"common.name.for.certificate" : "",
"policy_user" : "ambari-qa",
"hadoop.rpc.protection" : ""
}
}
},
{
"ranger-yarn-audit" : {
"properties_attributes" : { },
"properties" : {
"xasecure.audit.destination.solr.batch.filespool.dir" : "/var/log/hadoop/yarn/audit/solr/spool",
"xasecure.audit.destination.hdfs.dir" : "hdfs://ambari-agent-1.node.dc1.consul:8020/ranger/audit",
"xasecure.audit.destination.solr.urls" : "",
"xasecure.audit.destination.hdfs.batch.filespool.dir" : "/var/log/hadoop/yarn/audit/hdfs/spool",
"xasecure.audit.is.enabled" : "true",
"xasecure.audit.destination.hdfs" : "true",
"xasecure.audit.credential.provider.file" : "jceks://file{{credential_file}}",
"xasecure.audit.provider.summary.enabled" : "false",
"xasecure.audit.destination.db.jdbc.driver" : "{{jdbc_driver}}",
"xasecure.audit.destination.db.batch.filespool.dir" : "/var/log/hadoop/yarn/audit/db/spool",
"xasecure.audit.destination.solr" : "false",
"xasecure.audit.destination.db.user" : "{{xa_audit_db_user}}",
"xasecure.audit.destination.db" : "true",
"xasecure.audit.destination.db.jdbc.url" : "{{audit_jdbc_url}}",
"xasecure.audit.destination.solr.zookeepers" : "NONE"
}
}
},
{
"ranger-admin-site" : {
"properties_attributes" : { },
"properties" : {
"ranger.ldap.group.searchfilter" : "{{ranger_ug_ldap_group_searchfilter}}",
"ranger.ldap.group.searchbase" : "{{ranger_ug_ldap_group_searchbase}}",
"ranger.sso.enabled" : "false",
"ranger.externalurl" : "{{ranger_external_url}}",
"ranger.sso.browser.useragent" : "Mozilla,chrome",
"ranger.service.https.attrib.ssl.enabled" : "false",
"ranger.ldap.ad.referral" : "ignore",
"ranger.jpa.jdbc.url" : "jdbc:mysql://172.17.0.9:3306/ranger",
"ranger.https.attrib.keystore.file" : "/etc/ranger/admin/conf/ranger-admin-keystore.jks",
"ranger.ldap.user.searchfilter" : "{{ranger_ug_ldap_user_searchfilter}}",
"ranger.jpa.jdbc.driver" : "com.mysql.jdbc.Driver",
"ranger.authentication.method" : "UNIX",
"ranger.service.host" : "{{ranger_host}}",
"ranger.jpa.audit.jdbc.user" : "{{ranger_audit_db_user}}",
"ranger.ldap.referral" : "ignore",
"ranger.jpa.audit.jdbc.credential.alias" : "rangeraudit",
"ranger.service.https.attrib.keystore.pass" : "SECRET:ranger-admin-site:2:ranger.service.https.attrib.keystore.pass",
"ranger.audit.solr.username" : "ranger_solr",
"ranger.sso.query.param.originalurl" : "originalUrl",
"ranger.service.http.enabled" : "true",
"ranger.audit.source.type" : "solr",
"ranger.ldap.url" : "{{ranger_ug_ldap_url}}",
"ranger.service.https.attrib.clientAuth" : "want",
"ranger.ldap.ad.domain" : "",
"ranger.ldap.ad.bind.dn" : "{{ranger_ug_ldap_bind_dn}}",
"ranger.credential.provider.path" : "/etc/ranger/admin/rangeradmin.jceks",
"ranger.jpa.audit.jdbc.driver" : "{{ranger_jdbc_driver}}",
"ranger.audit.solr.urls" : "",
"ranger.sso.publicKey" : "",
"ranger.ldap.bind.dn" : "{{ranger_ug_ldap_bind_dn}}",
"ranger.unixauth.service.port" : "5151",
"ranger.ldap.group.roleattribute" : "cn",
"ranger.jpa.jdbc.dialect" : "{{jdbc_dialect}}",
"ranger.sso.cookiename" : "hadoop-jwt",
"ranger.service.https.attrib.keystore.keyalias" : "rangeradmin",
"ranger.audit.solr.zookeepers" : "NONE",
"ranger.jpa.jdbc.user" : "{{ranger_db_user}}",
"ranger.jpa.jdbc.credential.alias" : "rangeradmin",
"ranger.ldap.ad.user.searchfilter" : "{{ranger_ug_ldap_user_searchfilter}}",
"ranger.ldap.user.dnpattern" : "uid={0},ou=users,dc=xasecure,dc=net",
"ranger.ldap.base.dn" : "dc=example,dc=com",
"ranger.service.http.port" : "6080",
"ranger.jpa.audit.jdbc.url" : "{{audit_jdbc_url}}",
"ranger.service.https.port" : "6182",
"ranger.sso.providerurl" : "",
"ranger.ldap.ad.url" : "{{ranger_ug_ldap_url}}",
"ranger.jpa.audit.jdbc.dialect" : "{{jdbc_dialect}}",
"ranger.unixauth.remote.login.enabled" : "true",
"ranger.ldap.ad.base.dn" : "dc=example,dc=com",
"ranger.unixauth.service.hostname" : "{{ugsync_host}}"
}
}
},
{
"dbks-site" : {
"properties_attributes" : { },
"properties" : {
"ranger.ks.jpa.jdbc.url" : "jdbc:mysql://172.17.0.9:3306/rangerkms",
"hadoop.kms.blacklist.DECRYPT_EEK" : "hdfs",
"ranger.ks.jpa.jdbc.dialect" : "{{jdbc_dialect}}",
"ranger.ks.jdbc.sqlconnectorjar" : "{{ews_lib_jar_path}}",
"ranger.ks.jpa.jdbc.user" : "{{db_user}}",
"ranger.ks.jpa.jdbc.credential.alias" : "ranger.ks.jdbc.password",
"ranger.ks.jpa.jdbc.credential.provider.path" : "/etc/ranger/kms/rangerkms.jceks",
"ranger.ks.masterkey.credential.alias" : "ranger.ks.masterkey.password",
"ranger.ks.jpa.jdbc.driver" : "com.mysql.jdbc.Driver"
}
}
},
{
"kms-env" : {
"properties_attributes" : { },
"properties" : {
"kms_log_dir" : "/var/log/ranger/kms",
"create_db_user" : "true",
"kms_group" : "kms",
"kms_user" : "kms",
"kms_port" : "9292"
}
}
},
{
"ranger-hdfs-security" : {
"properties_attributes" : { },
"properties" : {
"ranger.plugin.hdfs.policy.source.impl" : "org.apache.ranger.admin.client.RangerAdminRESTClient",
"xasecure.add-hadoop-authorization" : "true",
"ranger.plugin.hdfs.policy.rest.ssl.config.file" : "/etc/hadoop/conf/ranger-policymgr-ssl.xml",
"ranger.plugin.hdfs.policy.pollIntervalMs" : "30000",
"ranger.plugin.hdfs.policy.cache.dir" : "/etc/ranger/{{repo_name}}/policycache",
"ranger.plugin.hdfs.service.name" : "{{repo_name}}",
"ranger.plugin.hdfs.policy.rest.url" : "{{policymgr_mgr_url}}"
}
}
},
{
"ranger-env" : {
"properties_attributes" : { },
"properties" : {
"xml_configurations_supported" : "true",
"ranger_user" : "ranger",
"xasecure.audit.destination.hdfs.dir" : "hdfs://ambari-agent-1.node.dc1.consul:8020/ranger/audit",
"create_db_dbuser" : "true",
"ranger-hdfs-plugin-enabled" : "Yes",
"ranger_privelege_user_jdbc_url" : "jdbc:mysql://172.17.0.9:3306",
"ranger-knox-plugin-enabled" : "No",
"is_solrCloud_enabled" : "false",
"bind_anonymous" : "false",
"ranger-yarn-plugin-enabled" : "Yes",
"ranger-kafka-plugin-enabled" : "No",
"xasecure.audit.destination.hdfs" : "true",
"ranger-hive-plugin-enabled" : "No",
"ranger_pid_dir" : "/var/run/ranger",
"ranger-storm-plugin-enabled" : "No",
"ranger_usersync_log_dir" : "/var/log/ranger/usersync",
"xasecure.audit.destination.solr" : "false",
"xasecure.audit.destination.db" : "true",
"ranger_group" : "ranger",
"ranger_admin_username" : "amb_ranger_admin",
"ranger-hbase-plugin-enabled" : "Yes",
"ranger_admin_log_dir" : "/var/log/ranger/admin",
"admin_username" : "admin"
}
}
},
{
"kms-properties" : {
"properties_attributes" : { },
"properties" : {
"REPOSITORY_CONFIG_USERNAME" : "keyadmin",
"KMS_MASTER_KEY_PASSWD" : "SECRET:kms-properties:1:KMS_MASTER_KEY_PASSWD",
"DB_FLAVOR" : "MYSQL",
"db_name" : "rangerkms",
"SQL_CONNECTOR_JAR" : "/usr/share/java/mysql-connector-java.jar",
"db_user" : "rangerkms",
"db_host" : "172.17.0.9:3306",
"db_root_user" : "root"
}
}
},
{
"ranger-yarn-security" : {
"properties_attributes" : { },
"properties" : {
"ranger.plugin.yarn.service.name" : "{{repo_name}}",
"ranger.plugin.yarn.policy.rest.ssl.config.file" : "/etc/hadoop/conf/ranger-policymgr-ssl-yarn.xml",
"ranger.plugin.yarn.policy.source.impl" : "org.apache.ranger.admin.client.RangerAdminRESTClient",
"ranger.plugin.yarn.policy.rest.url" : "{{policymgr_mgr_url}}",
"ranger.plugin.yarn.policy.pollIntervalMs" : "30000",
"ranger.plugin.yarn.policy.cache.dir" : "/etc/ranger/{{repo_name}}/policycache"
}
}
},
{
"usersync-properties" : {
"properties_attributes" : { },
"properties" : { }
}
},
{
"ranger-hbase-security" : {
"properties_attributes" : { },
"properties" : {
"ranger.plugin.hbase.policy.pollIntervalMs" : "30000",
"ranger.plugin.hbase.policy.source.impl" : "org.apache.ranger.admin.client.RangerAdminRESTClient",
"ranger.plugin.hbase.policy.cache.dir" : "/etc/ranger/{{repo_name}}/policycache",
"ranger.plugin.hbase.service.name" : "{{repo_name}}",
"ranger.plugin.hbase.policy.rest.ssl.config.file" : "/etc/hbase/conf/ranger-policymgr-ssl.xml",
"xasecure.hbase.update.xapolicies.on.grant.revoke" : "true",
"ranger.plugin.hbase.policy.rest.url" : "{{policymgr_mgr_url}}"
}
}
},
{
"ranger-yarn-policymgr-ssl" : {
"properties_attributes" : { },
"properties" : {
"xasecure.policymgr.clientssl.truststore.credential.file" : "jceks://file{{credential_file}}",
"xasecure.policymgr.clientssl.keystore.credential.file" : "jceks://file{{credential_file}}",
"xasecure.policymgr.clientssl.truststore" : "/usr/hdp/current/hadoop-client/conf/ranger-yarn-plugin-truststore.jks",
"xasecure.policymgr.clientssl.keystore" : "/usr/hdp/current/hadoop-client/conf/ranger-yarn-plugin-keystore.jks"
}
}
},
{
"ranger-ugsync-site" : {
"properties_attributes" : { },
"properties" : {
"ranger.usersync.unix.minUserId" : "500",
"ranger.usersync.enabled" : "true",
"ranger.usersync.unix.password.file" : "/etc/passwd",
"ranger.usersync.passwordvalidator.path" : "./native/credValidator.uexe",
"ranger.usersync.ldap.bindalias" : "testldapalias",
"ranger.usersync.ldap.user.searchfilter" : "",
"ranger.usersync.ssl" : "true",
"ranger.usersync.group.searchscope" : "",
"ranger.usersync.port" : "5151",
"ranger.usersync.ldap.groupname.caseconversion" : "lower",
"ranger.usersync.source.impl.class" : "org.apache.ranger.unixusersync.process.UnixUserGroupBuilder",
"ranger.usersync.policymanager.baseURL" : "{{ranger_external_url}}",
"ranger.usersync.group.memberattributename" : "memberUid",
"ranger.usersync.ldap.url" : "ldap://192.168.59.103:389",
"ranger.usersync.ldap.user.groupnameattribute" : "memberof, ismemberof",
"ranger.usersync.group.searchfilter" : "",
"ranger.usersync.policymanager.mockrun" : "false",
"ranger.usersync.ldap.user.nameattribute" : "uid",
"ranger.usersync.ldap.user.searchscope" : "sub",
"ranger.usersync.ldap.bindkeystore" : "",
"ranger.usersync.group.nameattribute" : "cn",
"ranger.usersync.truststore.file" : "/usr/hdp/current/ranger-usersync/conf/mytruststore.jks",
"ranger.usersync.sleeptimeinmillisbetweensynccycle" : "60000",
"ranger.usersync.credstore.filename" : "/usr/hdp/current/ranger-usersync/conf/ugsync.jceks",
"ranger.usersync.ldap.binddn" : "cn=admin,dc=dev,dc=local",
"ranger.usersync.keystore.file" : "/usr/hdp/current/ranger-usersync/conf/unixauthservice.jks",
"ranger.usersync.group.searchbase" : "",
"ranger.usersync.ldap.user.searchbase" : "",
"ranger.usersync.ldap.username.caseconversion" : "lower",
"ranger.usersync.sink.impl.class" : "org.apache.ranger.unixusersync.process.PolicyMgrUserGroupBuilder",
"ranger.usersync.pagedresultssize" : "500",
"ranger.usersync.group.usermapsyncenabled" : "true",
"ranger.usersync.group.objectclass" : "posixGroup",
"ranger.usersync.logdir" : "/var/log/ranger/usersync",
"ranger.usersync.pagedresultsenabled" : "true",
"ranger.usersync.filesource.text.delimiter" : ",",
"ranger.usersync.unix.group.file" : "/etc/group",
"ranger.usersync.group.searchenabled" : "false",
"ranger.usersync.ldap.user.objectclass" : "posixAccount",
"ranger.usersync.filesource.file" : "/tmp/usergroup.txt",
"ranger.usersync.policymanager.maxrecordsperapicall" : "1000",
"ranger.usersync.ldap.referral" : "ignore",
"ranger.usersync.ldap.searchBase" : "ou=hdp,dc=dev,dc=local"
}
}
},
{
"hdfs-site" : {
"properties_attributes" : { },
"properties" : {
"dfs.datanode.data.dir" : "/hadoop/hdfs/data",
"dfs.content-summary.limit" : "5000",
"dfs.namenode.https-address" : "%HOSTGROUP::host_group_1%:50470",
"dfs.namenode.checkpoint.txns" : "1000000",
"dfs.namenode.audit.log.async" : "true",
"dfs.datanode.https.address" : "0.0.0.0:50475",
"dfs.journalnode.edits.dir" : "/hadoop/hdfs/journalnode",
"dfs.datanode.failed.volumes.tolerated" : "0",
"dfs.datanode.max.transfer.threads" : "16384",
"dfs.encrypt.data.transfer.cipher.suites" : "AES/CTR/NoPadding",
"dfs.datanode.du.reserved" : "1073741824",
"dfs.support.append" : "true",
"dfs.namenode.handler.count" : "200",
"dfs.namenode.checkpoint.dir" : "/hadoop/hdfs/namesecondary",
"nfs.exports.allowed.hosts" : "* rw",
"dfs.encryption.key.provider.uri" : "kms://http@%HOSTGROUP::host_group_1%:9292/kms",
"dfs.domain.socket.path" : "/var/lib/hadoop-hdfs/dn_socket",
"dfs.namenode.name.dir.restore" : "true",
"dfs.namenode.write.stale.datanode.ratio" : "1.0f",
"dfs.namenode.checkpoint.period" : "21600",
"dfs.namenode.avoid.read.stale.datanode" : "true",
"dfs.block.access.token.enable" : "true",
"dfs.replication" : "3",
"dfs.journalnode.https-address" : "0.0.0.0:8481",
"dfs.namenode.stale.datanode.interval" : "30000",
"dfs.client.read.shortcircuit.streams.cache.size" : "4096",
"dfs.permissions.enabled" : "true",
"dfs.namenode.secondary.http-address" : "%HOSTGROUP::host_group_2%:50090",
"dfs.namenode.checkpoint.edits.dir" : "${dfs.namenode.checkpoint.dir}",
"dfs.journalnode.http-address" : "0.0.0.0:8480",
"dfs.datanode.balance.bandwidthPerSec" : "6250000",
"dfs.namenode.http-address" : "%HOSTGROUP::host_group_1%:50070",
"dfs.permissions.superusergroup" : "hdfs",
"dfs.namenode.rpc-address" : "%HOSTGROUP::host_group_1%:8020",
"dfs.namenode.fslock.fair" : "false",
"dfs.datanode.http.address" : "0.0.0.0:50075",
"dfs.namenode.avoid.write.stale.datanode" : "true",
"dfs.datanode.address" : "0.0.0.0:50010",
"dfs.namenode.startup.delay.block.deletion.sec" : "3600",
"dfs.datanode.data.dir.perm" : "750",
"dfs.http.policy" : "HTTP_ONLY",
"nfs.file.dump.dir" : "/tmp/.hdfs-nfs",
"dfs.heartbeat.interval" : "3",
"dfs.cluster.administrators" : " hdfs",
"dfs.namenode.name.dir" : "/hadoop/hdfs/namenode",
"dfs.hosts.exclude" : "/etc/hadoop/conf/dfs.exclude",
"dfs.webhdfs.enabled" : "true",
"dfs.blocksize" : "134217728",
"fs.permissions.umask-mode" : "022",
"dfs.namenode.safemode.threshold-pct" : "1",
"dfs.datanode.ipc.address" : "0.0.0.0:8010",
"dfs.client.retry.policy.enabled" : "false",
"dfs.blockreport.initialDelay" : "120",
"dfs.namenode.inode.attributes.provider.class" : "org.apache.ranger.authorization.hadoop.RangerHdfsAuthorizer",
"dfs.https.port" : "50470",
"dfs.client.read.shortcircuit" : "true",
"dfs.replication.max" : "50",
"dfs.namenode.accesstime.precision" : "0"
}
}
},
{
"ranger-hdfs-policymgr-ssl" : {
"properties_attributes" : { },
"properties" : {
"xasecure.policymgr.clientssl.truststore.credential.file" : "jceks://file{{credential_file}}",
"xasecure.policymgr.clientssl.keystore.credential.file" : "jceks://file{{credential_file}}",
"xasecure.policymgr.clientssl.truststore" : "/usr/hdp/current/hadoop-client/conf/ranger-plugin-truststore.jks",
"xasecure.policymgr.clientssl.keystore" : "/usr/hdp/current/hadoop-client/conf/ranger-plugin-keystore.jks"
}
}
},
{
"ranger-hbase-audit" : {
"properties_attributes" : { },
"properties" : {
"xasecure.audit.destination.solr.batch.filespool.dir" : "/var/log/hbase/audit/solr/spool",
"xasecure.audit.destination.hdfs.dir" : "hdfs://ambari-agent-1.node.dc1.consul:8020/ranger/audit",
"xasecure.audit.destination.solr.urls" : "",
"xasecure.audit.destination.hdfs.batch.filespool.dir" : "/var/log/hbase/audit/hdfs/spool",
"xasecure.audit.is.enabled" : "true",
"xasecure.audit.destination.hdfs" : "true",
"xasecure.audit.credential.provider.file" : "jceks://file{{credential_file}}",
"xasecure.audit.provider.summary.enabled" : "true",
"xasecure.audit.destination.db.jdbc.driver" : "{{jdbc_driver}}",
"xasecure.audit.destination.db.batch.filespool.dir" : "/var/log/hbase/audit/db/spool",
"xasecure.audit.destination.solr" : "false",
"xasecure.audit.destination.db.user" : "{{xa_audit_db_user}}",
"xasecure.audit.destination.db" : "true",
"xasecure.audit.destination.db.jdbc.url" : "{{audit_jdbc_url}}",
"xasecure.audit.destination.solr.zookeepers" : "NONE"
}
}
},
{
"ranger-yarn-plugin-properties" : {
"properties_attributes" : { },
"properties" : {
"REPOSITORY_CONFIG_USERNAME" : "yarn",
"common.name.for.certificate" : "",
"ranger-yarn-plugin-enabled" : "Yes",
"policy_user" : "ambari-qa",
"hadoop.rpc.protection" : ""
}
}
},
{
"ranger-kms-policymgr-ssl" : {
"properties_attributes" : { },
"properties" : {
"xasecure.policymgr.clientssl.truststore.credential.file" : "jceks://file{{credential_file}}",
"xasecure.policymgr.clientssl.keystore.credential.file" : "jceks://file{{credential_file}}",
"xasecure.policymgr.clientssl.truststore" : "/usr/hdp/current/ranger-kms/conf/ranger-plugin-truststore.jks",
"xasecure.policymgr.clientssl.keystore" : "/usr/hdp/current/ranger-kms/conf/ranger-plugin-keystore.jks"
}
}
},
{
"ranger-hdfs-audit" : {
"properties_attributes" : { },
"properties" : {
"xasecure.audit.destination.solr.batch.filespool.dir" : "/var/log/hadoop/hdfs/audit/solr/spool",
"xasecure.audit.destination.hdfs.dir" : "hdfs://ambari-agent-1.node.dc1.consul:8020/ranger/audit",
"xasecure.audit.destination.solr.urls" : "",
"xasecure.audit.destination.hdfs.batch.filespool.dir" : "/var/log/hadoop/hdfs/audit/hdfs/spool",
"xasecure.audit.is.enabled" : "true",
"xasecure.audit.destination.hdfs" : "true",
"xasecure.audit.credential.provider.file" : "jceks://file{{credential_file}}",
"xasecure.audit.provider.summary.enabled" : "false",
"xasecure.audit.destination.db.jdbc.driver" : "{{jdbc_driver}}",
"xasecure.audit.destination.db.batch.filespool.dir" : "/var/log/hadoop/hdfs/audit/db/spool",
"xasecure.audit.destination.solr" : "false",
"xasecure.audit.destination.db.user" : "{{xa_audit_db_user}}",
"xasecure.audit.destination.db" : "true",
"xasecure.audit.destination.db.jdbc.url" : "{{audit_jdbc_url}}",
"xasecure.audit.destination.solr.zookeepers" : "NONE"
}
}
},
{
"ranger-hbase-policymgr-ssl" : {
"properties_attributes" : { },
"properties" : {
"xasecure.policymgr.clientssl.truststore.credential.file" : "jceks://file{{credential_file}}",
"xasecure.policymgr.clientssl.keystore.credential.file" : "jceks://file{{credential_file}}",
"xasecure.policymgr.clientssl.truststore" : "/usr/hdp/current/hbase-client/conf/ranger-plugin-truststore.jks",
"xasecure.policymgr.clientssl.keystore" : "/usr/hdp/current/hbase-client/conf/ranger-plugin-keystore.jks"
}
}
},
{
"ranger-site" : {
"properties_attributes" : { },
"properties" : { }
}
},
{
"ranger-kms-audit" : {
"properties_attributes" : { },
"properties" : {
"xasecure.audit.destination.solr.batch.filespool.dir" : "/var/log/ranger/kms/audit/solr/spool",
"xasecure.audit.destination.hdfs.dir" : "hdfs://NAMENODE_HOSTNAME:8020/ranger/audit",
"xasecure.audit.destination.solr.urls" : "{{ranger_audit_solr_urls}}",
"xasecure.audit.destination.hdfs.batch.filespool.dir" : "/var/log/ranger/kms/audit/hdfs/spool",
"xasecure.audit.is.enabled" : "true",
"xasecure.audit.destination.hdfs" : "true",
"xasecure.audit.credential.provider.file" : "jceks://file{{credential_file}}",
"xasecure.audit.provider.summary.enabled" : "false",
"xasecure.audit.destination.db.jdbc.driver" : "{{jdbc_driver}}",
"xasecure.audit.destination.db.batch.filespool.dir" : "/var/log/ranger/kms/audit/db/spool",
"xasecure.audit.destination.solr" : "true",
"xasecure.audit.destination.db.user" : "{{xa_audit_db_user}}",
"xasecure.audit.destination.db" : "false",
"xasecure.audit.destination.db.jdbc.url" : "{{audit_jdbc_url}}",
"xasecure.audit.destination.solr.zookeepers" : "none"
}
}
},
{
"ranger-hbase-plugin-properties" : {
"properties_attributes" : { },
"properties" : {
"REPOSITORY_CONFIG_USERNAME" : "hbase",
"common.name.for.certificate" : "",
"ranger-hbase-plugin-enabled" : "Yes",
"policy_user" : "ambari-qa"
}
}
}
],
"host_groups" : [
{
"name" : "host_group_1",
"configurations" : [ ],
"components" : [
{
"name" : "ZOOKEEPER_CLIENT"
},
{
"name" : "ZOOKEEPER_SERVER"
},
{
"name" : "RANGER_ADMIN"
},
{
"name" : "HBASE_REGIONSERVER"
},
{
"name" : "HBASE_CLIENT"
},
{
"name" : "HBASE_MASTER"
},
{
"name" : "RANGER_USERSYNC"
},
{
"name" : "NAMENODE"
},
{
"name" : "NODEMANAGER"
},
{
"name" : "HDFS_CLIENT"
},
{
"name" : "YARN_CLIENT"
},
{
"name" : "MAPREDUCE2_CLIENT"
},
{
"name" : "DATANODE"
},
{
"name" : "RANGER_KMS_SERVER"
}
],
"cardinality" : "1"
},
{
"name" : "host_group_2",
"configurations" : [ ],
"components" : [
{
"name" : "ZOOKEEPER_SERVER"
},
{
"name" : "HISTORYSERVER"
},
{
"name" : "HBASE_REGIONSERVER"
},
{
"name" : "APP_TIMELINE_SERVER"
},
{
"name" : "HDFS_CLIENT"
},
{
"name" : "NODEMANAGER"
},
{
"name" : "SECONDARY_NAMENODE"
},
{
"name" : "DATANODE"
},
{
"name" : "RESOURCEMANAGER"
}
],
"cardinality" : "1"
},
{
"name" : "host_group_3",
"configurations" : [ ],
"components" : [
{
"name" : "ZOOKEEPER_CLIENT"
},
{
"name" : "ZOOKEEPER_SERVER"
},
{
"name" : "HBASE_REGIONSERVER"
},
{
"name" : "HBASE_CLIENT"
},
{
"name" : "HDFS_CLIENT"
},
{
"name" : "NODEMANAGER"
},
{
"name" : "YARN_CLIENT"
},
{
"name" : "MAPREDUCE2_CLIENT"
},
{
"name" : "DATANODE"
}
],
"cardinality" : "1"
}
],
"Blueprints" : {
"stack_name" : "HDP",
"stack_version" : "2.3"
}
} |
...