[
https://issues.apache.org/jira/browse/RANGER-2157?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16550346#comment-16550346
]
Koji Kawamura edited comment on RANGER-2157 at 8/7/18 6:55 AM:
---------------------------------------------------------------
Attaching the first pass of a patch for NiFi Registry service def and resource
lookup.
In order to test this against a real NiFi Registry instance, you can do the
following:
Build this branch with "mvn clean install -Pinclude-ranger"
https://github.com/ijokarumawak/nifi-registry/tree/nifireg-186
The NiFi Registry distribution will be in nifi-registry-assembly/target, copy
the tar.gz somewhere and extract it.
Refer [NiFi Registry Ranger extension
README.md|https://github.com/apache/nifi-registry/blob/29239be99a5f6275060ecbdcb16ae9a8e7abef86/nifi-registry-extensions/nifi-registry-ranger-extension/README.md]
for configuration details.
In order for NiFi Registry to perform authorization, it needs to be secured,
this is done by configuring conf/nifi-registry.properties to use HTTPS. Also,
conf/authorizers.xml should be configured to use RangerAuthorizer. Example
configurations are available here:
https://github.com/ijokarumawak/nifi-registry-ranger/tree/master/nifi-registry/conf
To start NiFi Registry, execute 'bin/nifi-registry.sh start'.
Navigate to https://localhost:18443/nifi-registry
You will need a client certificate loaded in your browser to authenticate, or
configure NiFi Registry to use LDAP.
was (Author: ijokarumawak):
Attaching the first pass of a patch for NiFi Registry service def and resource
lookup.
In order to test this against a real NiFi Registry instance, you can do the
following:
Build this branch with "mvn clean install"
https://github.com/ijokarumawak/nifi-registry/tree/nifireg-186
The NiFi Registry distribution will be in nifi-registry-assembly/target, copy
the tar.gz somewhere and extract it.
Also, you will need to build the ranger plug-in at NiFi Registry side by:
{code}
mvn -f nifi-registry-ranger install
mkdir -p ${NIFI_REG_HOME}/ranger/lib/
cp -rp nifi-registry-ranger/target/lib/* ${NIFI_REG_HOME}/ranger/lib/
{code}
In order for NiFi Registry to perform authorization, it needs to be secured,
this is done by configuring conf/nifi-registry.properties to use HTTPS. Also,
conf/authorizers.xml should be configured to use RangerAuthorizer. Example
configurations are available here:
https://github.com/ijokarumawak/nifi-registry-ranger/tree/master/nifi-registry/conf
To start NiFi Registry, execute 'bin/nifi-registry.sh start'.
Navigate to https://localhost:18443/nifi-registry
You will need a client certificate loaded in your browser to authenticate, or
configure NiFi Registry to use LDAP.
> Add NiFi Registry service definition and NiFiRegistryClient
> -----------------------------------------------------------
>
> Key: RANGER-2157
> URL: https://issues.apache.org/jira/browse/RANGER-2157
> Project: Ranger
> Issue Type: Improvement
> Components: plugins
> Reporter: Koji Kawamura
> Assignee: Koji Kawamura
> Priority: Major
> Attachments: 0001-RANGER-2157-Added-NiFi-Registry-service.patch
>
>
> Apache NiFi Registry is a subproject of Apache NiFi. NiFi Registry can manage
> versioned flow definitions so that NiFi users can version control their flows.
> Ranger already has NiFi service. This JIRA adds similar integration with NiFi
> Registry.
> The NiFi Registry integration will be split into two parts...
> The first part will be the service definition and the NiFiRegistryClient to
> perform resource look ups against NiFi Registry. This work will be tracked
> with this ticket.
> The second part is the plugin that will run in NiFi Registry and this part
> will live in the NiFi Registry codebase and is being tracked with this JIRA:
> NIFIREG-186
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)