TOSIT-IO / tdp-collection

Ansible collection to deploy the components of TDP
Apache License 2.0
21 stars 19 forks source link

Ranger Audit log export to HDFS not working for hdfs, yarn, hive #845

Closed PACordonnier closed 2 months ago

PACordonnier commented 3 months ago

Even though the collection configures it, the audit log export to HDFS to theses services are not working at all for theses services:

The reason is:

Ranger plugin works with two version of the configurations, namely v2 and v3. At the start of the service, ranger plugin looks for any v3 configuration, if it can't find any it fallback to v2 configuration. tdp-collection configures hdfs export as a v2 configuration. Since the collection configures solr export as a v3 configuration, hdfs export is most likely never used. If you disable solr, then hdfs is working but I noticed some serious issue with v2 version of the plugin (tgt not being renewed and having errors after the initial ticket has expired)