Yunye Zhang created RANGER-5705:
-----------------------------------
Summary: Ranger Copilot — Governance-Grade AI Assistant for Apache
Ranger
Key: RANGER-5705
URL: https://issues.apache.org/jira/browse/RANGER-5705
Project: Ranger
Issue Type: New Feature
Components: Ranger
Affects Versions: 2.6.0
Reporter: Yunye Zhang
Assignee: Yunye Zhang
Introduce a new, side-car Maven module — **`ranger-copilot`** — that turns
Apache Ranger into an assisted-governance platform. Copilot runs as an
independent Spring Boot 3.x service (no changes to `security-admin`), reads
policy metadata via Ranger REST, reads audit records through a pluggable
**`AuditSource`** abstraction with two implementations — direct
Elasticsearch (default, required for aggregation-based baselines) and
Ranger REST (`/service/xaudit/access_audit`) fallback for deployments
without direct ES access — and combines **deterministic detectors** with
an **LLM reasoning layer** to produce explainable, auditable, revertible
suggestions. Every AI output lands in a `PENDING` suggestion queue and is
only applied to Ranger after an administrator approves it — with a full
before/after policy snapshot and one-click rollback.
The Epic delivers **six child issues** — one bootstrap plus five feature
sub-tasks — and can be merged incrementally: each sub-task carries an
independently-testable MVP and is gated behind a feature flag. The six
child issues are:
| Child issue | Scope |
|-------------|----------------------------------------------------------------------------------------------------------------------------------------------|
| SUB-00 | **Bootstrap** — module skeleton, `LlmClient` / `AuditSource` /
`PasswordDecoder` SPIs, `SuggestionWorkflowService` state machine, DDL. |
| SUB-01 | **Audit Intelligence** — ES-backed anomaly detection + LLM
explanation. |
| SUB-02 | **Policy Recommendation** — least-privilege mining from audit
aggregations. |
| SUB-03 | **Policy Governance** — redundancy / conflict / stale /
risky-pattern detection. |
| SUB-04 | **NL2Policy** — natural-language authoring via LLM → JSON Schema →
Ranger `dryRun`. |
| SUB-05 | **Automated Response** — Webhook / mail / ticketing adapters on
confidence-gated events. |
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
