This is an automated email from the ASF dual-hosted git repository.
dependabot[bot] pushed a change to branch
dependabot/maven/com.fasterxml.jackson.core-jackson-databind-2.22.0
in repository https://gitbox.apache.org/repos/asf/ranger.git
discard 51d5f81af Bump com.fasterxml.jackson.core:jackson-databind from 2.17.2
to 2.22.0
add 7017225e6 RANGER-5654: Fix Solr audit dispatcher Kerberos TGT relogin
(No key to store) via keytab-aware JAAS relogin (#1030)
add 597f6506c RANGER-5648: Solr authorization fails with NPE (#1029)
add 9c887928b RANGER-5639: Upgrade bouncycastle to 1.84 (#1022)
add dcf5947fe RANGER-5628: Support for actions in Ozone Service Definition
(#995)
add 5aa6629ba RANGER-5656: TagSync Atlas REST sync fails with
AbstractMethodError after RANGER-4076 Jersey 2 migration (#1035)
add 12ea9a791 RANGER-5653: Updates to apache-ranger Python client with
Python 3 support only (#1034)
add a23c30c60 RANGER-4676, RANGER-5615: Add OpenSearch Dispatcher to
Ranger Audit Server (#986)
add abe67188f RANGER-5660: Fix YARN plugin packaging and enable script lib
path (#1039)
add 6d9b1b2cf RANGER-5661:Fix Kafka plugin packaging for broker-delegate
classloading on Kafka 3.9+ (#1040)
add deaf13df3 RANGER-5658: Tag Sync: remove atlas.kafka.zookeeper.connect
and fix Atlas Kafka consumer for Kafka 3.9 (#1037)
add 0274a6a0b RANGER-5657:Limit getAllModuleNames() to sys-admin sessions
in SessionMgr (#1036)
add d980f9f58 RANGER-5623: Updated XUserMgr.java to solve UI consistency
for put groupusers endpoint (#992)
add bfa621a25 RANGER-5624: Fix inconsistent updatedBy masking in groupName
API (#993)
add 9bf7a9364 RANGER-5667: fixes in support for actions in Ozone policies
(#1053)
add ad447b9b9 RANGER-5666: update graalvm version to 25.1.3 (#1052)
add 96a000d6b Bump com.fasterxml.jackson.core:jackson-databind from 2.17.2
to 2.18.9
This update added new revisions after undoing existing revisions.
That is to say, some revisions that were in the old version of the
branch are not in the new version. This situation occurs
when a user --force pushes a change and generates a repository
containing something like this:
* -- * -- B -- O -- O -- O (51d5f81af)
\
N -- N -- N
refs/heads/dependabot/maven/com.fasterxml.jackson.core-jackson-databind-2.22.0
(96a000d6b)
You should already have received notification emails for all of the O
revisions, and so the following emails describe only the N revisions
from the common base, B.
Any revisions marked "omit" are not gone; other references still
refer to them. Any revisions marked "discard" are gone forever.
No new revisions were added by this update.
Summary of changes:
.cursor/rules/ranger-python.mdc | 88 +++
.../audit/provider/AuditProviderFactory.java | 2 +
.../ranger/audit/utils/AbstractKerberosUser.java | 76 ++-
.../apache/ranger/audit/utils/KerberosAction.java | 27 +-
.../ranger/audit/utils/KerberosJAASConfigUser.java | 38 +-
.../dest-os}/pom.xml | 56 +-
.../destination/OpenSearchAuditDestination.java | 321 +++++++++
.../TestOpenSearchAuditDestination.java | 192 ++++++
agents-audit/pom.xml | 1 +
agents-common/pom.xml | 1 +
agents-common/scripts/enable-agent.sh | 5 +-
...sterCondition.java => RangerActionMatcher.java} | 31 +-
.../ranger/plugin/model/RangerInlinePolicy.java | 20 +-
.../RangerInlinePolicyEvaluator.java | 17 +-
.../plugin/util/RangerActionListMatcher.java | 125 ++++
.../service-defs/ranger-servicedef-ozone.json | 8 +
.../RangerActionMatcherTest.java | 111 ++++
.../plugin/util/RangerActionListMatcherTest.java | 265 ++++++++
.../test_inline_policies_ozone.json | 111 ++++
.../audit-dispatcher/dispatcher-app/pom.xml | 6 +
.../dispatcher-opensearch}/pom.xml | 189 +++---
.../dispatcher/OpenSearchDispatcherManager.java | 239 +++++++
.../kafka/AuditOpenSearchDispatcher.java | 149 +++++
.../src/main/resources/conf/logback.xml | 55 ++
.../ranger-audit-dispatcher-opensearch-site.xml} | 108 ++-
.../TestOpenSearchDispatcherManager.java | 80 +++
.../kafka/TestAuditOpenSearchDispatcher.java | 116 ++++
audit-server/audit-dispatcher/pom.xml | 1 +
.../scripts/start-audit-dispatcher.sh | 6 +-
dev-support/README-TAGSYNC-ATLAS-KAFKA-CONFIG.md | 202 ++++++
dev-support/checkstyle-suppressions.xml | 1 +
dev-support/ranger-docker/Dockerfile.ranger-kdc | 5 +-
dev-support/ranger-docker/README.md | 48 ++
...compose.ranger-audit-dispatcher-opensearch.yml} | 39 +-
.../ranger-docker/docker-compose.ranger.yml | 3 +
dev-support/ranger-docker/download-archives.sh | 10 +-
.../admin/ranger-admin-install-postgres.properties | 34 +-
.../ranger-audit-dispatcher-opensearch-site.xml | 107 +--
.../ranger-docker/scripts/kdc/entrypoint.sh | 8 +-
.../scripts/opensearch/opensearch.yml | 3 +
.../tagsync/ranger-tagsync-install.properties | 12 +-
distro/pom.xml | 12 +
distro/src/main/assembly/audit-dispatcher.xml | 32 +
distro/src/main/assembly/hbase-agent.xml | 14 +-
distro/src/main/assembly/hdfs-agent.xml | 14 +-
distro/src/main/assembly/hive-agent.xml | 14 +-
distro/src/main/assembly/plugin-kafka.xml | 19 +-
distro/src/main/assembly/plugin-solr.xml | 14 +-
distro/src/main/assembly/plugin-yarn.xml | 15 +-
distro/src/main/assembly/tagsync.xml | 3 -
.../ranger/server/tomcat/EmbeddedServer.java | 14 +
.../server/tomcat/OpenSearchIndexBootStrapper.java | 219 +++++++
intg/scripts/setup.py | 30 -
intg/src/main/python/README.md | 679 +++++--------------
intg/src/main/python/setup.py | 16 +-
intg/src/test/python/test_ranger_client.py | 225 +++++--
.../template/configuration.xml | 0
.../ozone/authorizer/RangerOzoneAuthorizer.java | 7 +-
.../authorizer/TestRangerOzoneAuthorizer.java | 72 ++
plugin-ozone/src/test/resources/om_dev_ozone.json | 6 +
.../solr/authorizer/RangerSolrAuthorizer.java | 106 +--
.../solr/authorizer/TestRangerSolrAuthorizer.java | 90 +++
.../template/configuration.xml | 0
pom.xml | 14 +-
.../sample-client/scripts/run-pyclient.sh | 50 --
ranger-examples/sample-client/scripts/setup.py | 30 -
.../conf/ranger_opensearch_schema.json} | 3 +
security-admin/pom.xml | 5 +
security-admin/scripts/install.properties | 13 +
security-admin/scripts/setup.sh | 64 ++
.../main/java/org/apache/ranger/biz/AssetMgr.java | 5 +
.../java/org/apache/ranger/biz/RangerBizUtil.java | 1 +
.../java/org/apache/ranger/biz/SessionMgr.java | 2 +-
.../main/java/org/apache/ranger/biz/XAuditMgr.java | 7 +
.../main/java/org/apache/ranger/biz/XUserMgr.java | 23 +
.../ranger/elasticsearch/ElasticSearchMgr.java | 1 +
.../OpenSearchAccessAuditsService.java} | 91 +--
.../apache/ranger/opensearch/OpenSearchMgr.java | 199 ++++++
.../apache/ranger/opensearch/OpenSearchUtil.java | 342 ++++++++++
...zoneServiceDefPolicyConditionUpdate_J10065.java | 167 +++++
.../java/org/apache/ranger/rest/XUserREST.java | 27 +-
.../ranger/solr/krb/AbstractKerberosUser.java | 76 ++-
.../org/apache/ranger/solr/krb/KerberosAction.java | 30 +-
.../ranger/solr/krb/KerberosJAASConfigUser.java | 37 +-
.../conf.dist/ranger-admin-default-site.xml | 28 +
.../main/resources/conf.dist/ranger-admin-site.xml | 43 ++
.../src/components/CommonComponents.jsx | 17 +
.../react-webapp/src/components/Editable.jsx | 511 +++++++++------
.../src/hooks/usePruneStaleConditions.js | 153 +++++
.../main/webapp/react-webapp/src/styles/style.css | 12 +
.../src/utils/actionRequirements/ozone.json | 47 ++
.../src/utils/actionRequirements/registry.js} | 15 +-
.../react-webapp/src/utils/policyConditionUtils.js | 722 +++++++++++++++++++++
.../views/GovernedData/Dataset/AccessGrantForm.jsx | 4 +
.../Datashare/DatashareDetailLayout.jsx | 4 +
.../views/PolicyListing/AddUpdatePolicyForm.jsx | 4 +
.../views/PolicyListing/PolicyConditionsComp.jsx | 34 +-
.../views/PolicyListing/PolicyPermissionItem.jsx | 89 ++-
.../java/org/apache/ranger/biz/TestXUserMgr.java | 142 +++-
.../OpenSearchAccessAuditsServiceTest.java | 185 ++++++
.../ranger/opensearch/OpenSearchMgrTest.java | 55 ++
.../ranger/opensearch/OpenSearchUtilTest.java | 219 +++++++
.../java/org/apache/ranger/rest/TestXUserREST.java | 30 +-
.../ranger/solr/krb/AbstractKerberosUserTest.java | 34 +
tagsync/conf/templates/installprop2xml.properties | 1 -
tagsync/pom.xml | 54 --
tagsync/scripts/install.properties | 3 +-
tagsync/scripts/ranger-tagsync-services.sh | 3 +-
tagsync/scripts/setup.py | 28 +-
.../tagsync/source/atlas/AtlasTagSource.java | 131 ++--
.../source/atlasrest/AtlasRESTHttpClient.java | 146 +++++
.../source/atlasrest/AtlasRESTTagSource.java | 186 +++---
.../source/atlas/AtlasTagSourceConfigTest.java | 57 ++
113 files changed, 7036 insertions(+), 1625 deletions(-)
create mode 100644 .cursor/rules/ranger-python.mdc
copy {ranger-elasticsearch-plugin-shim => agents-audit/dest-os}/pom.xml (62%)
create mode 100644
agents-audit/dest-os/src/main/java/org/apache/ranger/audit/destination/OpenSearchAuditDestination.java
create mode 100644
agents-audit/dest-os/src/test/java/org/apache/ranger/audit/destination/TestOpenSearchAuditDestination.java
copy
agents-common/src/main/java/org/apache/ranger/plugin/conditionevaluator/{RangerAccessedFromClusterCondition.java
=> RangerActionMatcher.java} (55%)
create mode 100644
agents-common/src/main/java/org/apache/ranger/plugin/util/RangerActionListMatcher.java
create mode 100644
agents-common/src/test/java/org/apache/ranger/plugin/conditionevaluator/RangerActionMatcherTest.java
create mode 100644
agents-common/src/test/java/org/apache/ranger/plugin/util/RangerActionListMatcherTest.java
copy {plugin-trino =>
audit-server/audit-dispatcher/dispatcher-opensearch}/pom.xml (50%)
create mode 100644
audit-server/audit-dispatcher/dispatcher-opensearch/src/main/java/org/apache/ranger/audit/dispatcher/OpenSearchDispatcherManager.java
create mode 100644
audit-server/audit-dispatcher/dispatcher-opensearch/src/main/java/org/apache/ranger/audit/dispatcher/kafka/AuditOpenSearchDispatcher.java
create mode 100644
audit-server/audit-dispatcher/dispatcher-opensearch/src/main/resources/conf/logback.xml
copy
audit-server/audit-dispatcher/{dispatcher-solr/src/main/resources/conf/ranger-audit-dispatcher-solr-site.xml
=>
dispatcher-opensearch/src/main/resources/conf/ranger-audit-dispatcher-opensearch-site.xml}
(64%)
create mode 100644
audit-server/audit-dispatcher/dispatcher-opensearch/src/test/java/org/apache/ranger/audit/dispatcher/TestOpenSearchDispatcherManager.java
create mode 100644
audit-server/audit-dispatcher/dispatcher-opensearch/src/test/java/org/apache/ranger/audit/dispatcher/kafka/TestAuditOpenSearchDispatcher.java
create mode 100644 dev-support/README-TAGSYNC-ATLAS-KAFKA-CONFIG.md
copy
dev-support/ranger-docker/{docker-compose.ranger-audit-dispatcher-hdfs.yml =>
docker-compose.ranger-audit-dispatcher-opensearch.yml} (64%)
copy
audit-server/audit-dispatcher/dispatcher-hdfs/src/main/resources/conf/ranger-audit-dispatcher-hdfs-site.xml
=>
dev-support/ranger-docker/scripts/audit-dispatcher/ranger-audit-dispatcher-opensearch-site.xml
(57%)
create mode 100644
embeddedwebserver/src/main/java/org/apache/ranger/server/tomcat/OpenSearchIndexBootStrapper.java
delete mode 100644 intg/scripts/setup.py
copy {hive-agent => plugin-kafka}/template/configuration.xml (100%)
create mode 100644
plugin-solr/src/test/java/org/apache/ranger/authorization/solr/authorizer/TestRangerSolrAuthorizer.java
copy {hive-agent => plugin-yarn}/template/configuration.xml (100%)
delete mode 100755 ranger-examples/sample-client/scripts/run-pyclient.sh
delete mode 100644 ranger-examples/sample-client/scripts/setup.py
copy
security-admin/contrib/{elasticsearch_for_audit_setup/conf/ranger_es_schema.json
=> opensearch_for_audit_setup/conf/ranger_opensearch_schema.json} (97%)
copy
security-admin/src/main/java/org/apache/ranger/{elasticsearch/ElasticSearchAccessAuditsService.java
=> opensearch/OpenSearchAccessAuditsService.java} (73%)
create mode 100644
security-admin/src/main/java/org/apache/ranger/opensearch/OpenSearchMgr.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/opensearch/OpenSearchUtil.java
create mode 100644
security-admin/src/main/java/org/apache/ranger/patch/PatchForOzoneServiceDefPolicyConditionUpdate_J10065.java
create mode 100644
security-admin/src/main/webapp/react-webapp/src/hooks/usePruneStaleConditions.js
create mode 100644
security-admin/src/main/webapp/react-webapp/src/utils/actionRequirements/ozone.json
copy
security-admin/src/main/{java/org/apache/ranger/common/annotation/RangerAnnotationClassName.java
=> webapp/react-webapp/src/utils/actionRequirements/registry.js} (73%)
create mode 100644
security-admin/src/main/webapp/react-webapp/src/utils/policyConditionUtils.js
create mode 100644
security-admin/src/test/java/org/apache/ranger/opensearch/OpenSearchAccessAuditsServiceTest.java
create mode 100644
security-admin/src/test/java/org/apache/ranger/opensearch/OpenSearchMgrTest.java
create mode 100644
security-admin/src/test/java/org/apache/ranger/opensearch/OpenSearchUtilTest.java
create mode 100644
tagsync/src/main/java/org/apache/ranger/tagsync/source/atlasrest/AtlasRESTHttpClient.java
create mode 100644
tagsync/src/test/java/org/apache/ranger/tagsync/source/atlas/AtlasTagSourceConfigTest.java
