This is an automated email from the ASF dual-hosted git repository.
pradeepagrawal8184 pushed a change to branch RANGER-4563_master_jetty
in repository https://gitbox.apache.org/repos/asf/ranger.git
omit 8f0f28a31 RANGER-4563: Exclude transitive Jetty libraries from Ranger
Maven modules
add b1db293ed RANGER-5601: Bump urllib3 to 2.7.0 and requests from 2.32.5
to 2.33.0 (#954)
add 2eca8b764 RANGER-5630:Swagger UI requests non-existent swagger.json
instead of generated openapi.json (#998)
add c32fb42dc RANGER-5609 : Updating library dependencies in Ranger Admin
React package-lock.json (#996)
add deda4f544 RANGER-5604: Bump org.glassfish.jersey.core:jersey-client
from 2.22.1 to 2.46 in /plugin-schema-registry (#955)
add e3babee05 RANGER-5632: update plugins packaging to have audit-server
as the only audit destination (#999)
add 96282864f Fix: Update Ozone Runner image to use Java 17 to match
Ranger build
add 7685006a4 Revert: Change OZONE_RUNNER_VERSION back to 20230615-1
add d000d3e7e RANGER-5611 : Support TLSv1.3 Encryption for all
Communications for R… (#964)
add f4edfa620 RANGER-5627: Support configuration-based super users and
super groups in Ranger Admin (#1000)
add f2cec6eaf RANGER-5636: Configure GitHub workflows to use concurrency
(#1003)
add 31c74699a RANGER-5614 : Performance improvement for role create/update
with many users, groups, and sub-roles (#980)
add 137a5dd4a RANGER-5637: Fix Knox and Ozone plugin docker CI smoke-test
failures (#1006)
add 4a061759b RANGER-5633: Wire audit-server Kafka producer and consumer
tuning (#1001)
add 09b531564 RANGER-5640: Bump Docker Ozone to 2.1 and package
audit-server JARs in ozone plugin (#1007)
add 409e8a72c RANGER-5634: CTAS & Temporary-Table queries from Hive bypass
UDF Select authorization (#1012)
add 10bda4d11 RANGER-5642, RANGER-5644: Package Jersey auditserver REST
client JARs in Kafka and HBase plugins (#1015)
add ce93068d2 RANGER-5643: Fix docker Kerberos for Solr audit dispatcher
(#1016)
add b283bdad2 Add THREAT_MODEL.md + AGENTS.md/SECURITY.md discoverability
chain (#994)
add 4db9cc9a0 RANGER-4563: Exclude transitive Jetty libraries from Ranger
Maven modules
add 8fd03e6ac Enable Docker plugin audit-to-Solr validation on master
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (8f0f28a31)
\
N -- N -- N refs/heads/RANGER-4563_master_jetty (8fd03e6ac)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.github/workflows/ci.yml | 37 +-
AGENTS.md | 27 +
SECURITY.md | 29 +
THREAT_MODEL.md | 333 +++++++++
.../ranger/audit/provider/BaseAuditHandler.java | 2 +-
.../audit/utils/RangerJSONAuditWriterTest.java | 37 +-
.../org/apache/ranger/plugin/store/RoleStore.java | 8 +
.../ranger/plugin/util/RangerRESTClient.java | 2 +-
.../apache/ranger/plugin/util/RangerSslHelper.java | 2 +-
audit-server/audit-common/pom.xml | 6 +
.../ranger/audit/server/AuditServerConstants.java | 34 +-
.../ranger/audit/utils/AuditMessageQueueUtils.java | 29 +
.../audit/utils/AuditMessageQueueUtilsTest.java | 68 ++
.../ranger/audit/dispatcher/EmbeddedServer.java | 14 +-
.../conf/ranger-audit-dispatcher-hdfs-site.xml | 22 +
.../conf/ranger-audit-dispatcher-solr-site.xml | 24 +
audit-server/audit-ingestor/pom.xml | 6 +
.../ranger/audit/producer/kafka/AuditProducer.java | 147 ++--
.../apache/ranger/audit/server/EmbeddedServer.java | 14 +-
.../resources/conf/ranger-audit-ingestor-site.xml | 68 ++
.../audit/producer/kafka/AuditProducerTest.java | 106 +++
authz-embedded/pom.xml | 8 +-
dev-support/ranger-docker/.env | 10 +-
dev-support/ranger-docker/Dockerfile.ranger-ozone | 3 +-
.../ranger-docker/docker-compose.ranger-ozone.yml | 18 +-
dev-support/ranger-docker/download-archives.sh | 89 ++-
.../ranger-audit-dispatcher-solr-site.xml | 2 +-
.../scripts/hadoop/ranger-hadoop-setup.sh | 8 +
.../hadoop/ranger-hdfs-plugin-install.properties | 6 +-
.../scripts/hadoop/test-hdfs-audit-to-solr.sh | 61 ++
.../hbase/ranger-hbase-plugin-install.properties | 6 +-
.../scripts/hbase/ranger-hbase-setup.sh | 4 +-
.../scripts/hbase/test-hbase-audit-to-solr.sh | 63 ++
.../hive/ranger-hive-plugin-install.properties | 6 +-
.../scripts/hive/ranger-hive-setup.sh | 4 +-
.../scripts/hive/test-hive-audit-to-solr.sh | 62 ++
.../kafka/ranger-kafka-plugin-install.properties | 8 +-
.../scripts/kafka/ranger-kafka-setup.sh | 7 +
.../scripts/kafka/test-kafka-audit-to-solr.sh | 78 ++
.../knox-jdk17-env.sh} | 18 +-
.../scripts/knox/ranger-knox-setup.sh | 4 +
.../ranger-docker/scripts/knox/ranger-knox.sh | 8 +
.../ranger-docker/scripts/ozone/docker-config | 4 +
.../scripts/ozone/ranger-ozone-setup.sh | 27 +-
.../ranger-docker/scripts/pdp/ranger-pdp-site.xml | 50 +-
.../ranger-docker/scripts/solr/ranger-solr.sh | 2 +-
.../ranger-docker/scripts/solr/solr-security.json | 4 +-
.../ranger-docker/scripts/solr/test-audit-e2e.sh | 65 ++
distro/pom.xml | 6 +
distro/src/main/assembly/admin-web.xml | 10 +
distro/src/main/assembly/hbase-agent.xml | 8 +-
distro/src/main/assembly/hdfs-agent.xml | 6 +-
distro/src/main/assembly/hive-agent.xml | 6 +-
distro/src/main/assembly/kms.xml | 2 -
distro/src/main/assembly/knox-agent.xml | 24 +-
distro/src/main/assembly/pdp.xml | 2 -
distro/src/main/assembly/plugin-atlas.xml | 2 -
distro/src/main/assembly/plugin-elasticsearch.xml | 2 -
distro/src/main/assembly/plugin-kafka.xml | 11 +-
distro/src/main/assembly/plugin-kms.xml | 2 -
distro/src/main/assembly/plugin-kylin.xml | 2 -
distro/src/main/assembly/plugin-ozone.xml | 18 +-
distro/src/main/assembly/plugin-presto.xml | 2 -
distro/src/main/assembly/plugin-solr.xml | 15 +-
distro/src/main/assembly/plugin-sqoop.xml | 2 -
distro/src/main/assembly/plugin-trino.xml | 2 -
distro/src/main/assembly/plugin-yarn.xml | 2 -
distro/src/main/assembly/storm-agent.xml | 2 -
docs/src/site/resources/index.js | 4 +-
.../ranger/server/tomcat/EmbeddedServer.java | 18 +-
hbase-agent/pom.xml | 20 -
hdfs-agent/pom.xml | 10 -
hive-agent/pom.xml | 10 -
.../hive/authorizer/RangerHiveAuthorizer.java | 2 +
.../hive/authorizer/TestRangerHiveAuthorizer.java | 64 +-
knox-agent/pom.xml | 16 -
pdp/pom.xml | 5 +
plugin-atlas/pom.xml | 10 -
plugin-elasticsearch/pom.xml | 10 -
plugin-kafka/pom.xml | 10 -
plugin-kms/pom.xml | 10 -
plugin-kudu/pom.xml | 10 -
plugin-kylin/pom.xml | 10 -
plugin-nifi-registry/pom.xml | 10 -
.../registry/client/NiFiRegistryConnectionMgr.java | 2 +-
plugin-nifi/pom.xml | 10 -
plugin-ozone/pom.xml | 22 +-
plugin-presto/pom.xml | 10 -
plugin-schema-registry/pom.xml | 2 +-
.../connection/DefaultSchemaRegistryClient.java | 2 +-
plugin-solr/pom.xml | 10 -
plugin-sqoop/pom.xml | 10 -
plugin-trino/pom.xml | 10 -
plugin-yarn/pom.xml | 10 -
ranger-examples/plugin-sampleapp/pom.xml | 10 -
ranger-tools/src/main/python/requirements.txt | 4 +-
.../scripts/ranger-admin-site-template.xml | 10 +
.../org/apache/ranger/biz/PolicyRefUpdater.java | 105 ++-
.../java/org/apache/ranger/biz/RangerBizUtil.java | 67 +-
.../java/org/apache/ranger/biz/RoleDBStore.java | 47 +-
.../java/org/apache/ranger/biz/RoleRefUpdater.java | 664 ++++++++++++-----
.../java/org/apache/ranger/biz/SessionMgr.java | 49 +-
.../main/java/org/apache/ranger/biz/UserMgr.java | 83 ++-
.../main/java/org/apache/ranger/biz/XUserMgr.java | 52 +-
.../org/apache/ranger/common/RangerConstants.java | 3 +
.../ranger/common/RangerSuperUserConfig.java | 188 +++++
.../org/apache/ranger/common/UserSessionBase.java | 29 +-
.../java/org/apache/ranger/db/XXModuleDefDao.java | 10 +
.../org/apache/ranger/db/XXRoleRefGroupDao.java | 23 +
.../org/apache/ranger/db/XXRoleRefRoleDao.java | 23 +
.../org/apache/ranger/db/XXRoleRefUserDao.java | 23 +
.../java/org/apache/ranger/rest/AssetREST.java | 20 +-
.../main/java/org/apache/ranger/rest/RoleREST.java | 20 +-
.../java/org/apache/ranger/rest/ServiceREST.java | 48 +-
.../java/org/apache/ranger/rest/XUserREST.java | 9 +-
.../handler/RangerAuthenticationProvider.java | 2 +-
.../main/resources/META-INF/jpa_named_queries.xml | 16 +
.../conf.dist/ranger-admin-default-site.xml | 2 +-
.../main/resources/conf.dist/ranger-admin-site.xml | 10 +
.../src/main/webapp/react-webapp/package-lock.json | 813 ++++++++++++++++-----
.../src/main/webapp/react-webapp/package.json | 4 +-
.../main/webapp/react-webapp/src/utils/XAUtils.js | 7 +-
.../apache/ranger/biz/TestPolicyRefUpdater.java | 21 +-
.../org/apache/ranger/biz/TestRangerBizUtil.java | 57 ++
.../org/apache/ranger/biz/TestRoleDBStore.java | 46 +-
.../org/apache/ranger/biz/TestRoleRefUpdater.java | 90 ++-
.../java/org/apache/ranger/biz/TestSessionMgr.java | 153 ++++
.../java/org/apache/ranger/biz/TestUserMgr.java | 236 ++++++
.../java/org/apache/ranger/biz/TestXUserMgr.java | 67 +-
.../ranger/common/TestRangerSuperUserConfig.java | 250 +++++++
.../java/org/apache/ranger/rest/TestAssetREST.java | 26 +
.../java/org/apache/ranger/rest/TestGdsREST.java | 170 ++---
.../java/org/apache/ranger/rest/TestRoleREST.java | 59 +-
.../org/apache/ranger/rest/TestServiceREST.java | 3 +
.../java/org/apache/ranger/rest/TestXUserREST.java | 57 ++
.../process/CustomSSLSocketFactory.java | 2 +-
.../unix/jaas/RemoteUnixLoginModule.java | 2 +-
.../authentication/UnixAuthenticationService.java | 2 +-
.../TestUnixAuthenticationService.java | 8 +-
139 files changed, 4501 insertions(+), 1162 deletions(-)
create mode 100644 AGENTS.md
create mode 100644 SECURITY.md
create mode 100644 THREAT_MODEL.md
create mode 100644
audit-server/audit-common/src/test/java/org/apache/ranger/audit/utils/AuditMessageQueueUtilsTest.java
create mode 100644
audit-server/audit-ingestor/src/test/java/org/apache/ranger/audit/producer/kafka/AuditProducerTest.java
create mode 100755
dev-support/ranger-docker/scripts/hadoop/test-hdfs-audit-to-solr.sh
create mode 100755
dev-support/ranger-docker/scripts/hbase/test-hbase-audit-to-solr.sh
create mode 100755
dev-support/ranger-docker/scripts/hive/test-hive-audit-to-solr.sh
create mode 100755
dev-support/ranger-docker/scripts/kafka/test-kafka-audit-to-solr.sh
copy dev-support/ranger-docker/scripts/{hadoop/ranger-hadoop-healthcheck.sh =>
knox/knox-jdk17-env.sh} (51%)
mode change 100755 => 100644
create mode 100755 dev-support/ranger-docker/scripts/solr/test-audit-e2e.sh
create mode 100644
security-admin/src/main/java/org/apache/ranger/common/RangerSuperUserConfig.java
create mode 100644
security-admin/src/test/java/org/apache/ranger/common/TestRangerSuperUserConfig.java
