[
https://issues.apache.org/jira/browse/RANGER-5705?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Yunye Zhang updated RANGER-5705:
--------------------------------
Description:
Introduce a new, side-car Maven module — {*}{{*}}`ranger-copilot`{{*}}{*} —
that turns
Apache Ranger into an assisted-governance platform. Copilot runs as an
independent Spring Boot 3.x service (no changes to `security-admin`), reads
policy metadata via Ranger REST, reads audit records through a pluggable
{*}{{*}}`AuditSource`{{*}}{*} abstraction with two implementations — direct
Elasticsearch (default, required for aggregation-based baselines) and
Ranger REST (`/service/xaudit/access_audit`) fallback for deployments
without direct ES access — and combines {*}{{*}}deterministic detectors{{*}}{*}
with
an {*}{{*}}LLM reasoning layer{{*}}{*} to produce explainable, auditable,
revertible
suggestions. Every AI output lands in a `PENDING` suggestion queue and is
only applied to Ranger after an administrator approves it — with a full
before/after policy snapshot and one-click rollback.
The Epic delivers {*}{{*}}six child issues{{*}}{*} — one bootstrap plus five
feature
sub-tasks — and can be merged incrementally: each sub-task carries an
independently-testable MVP and is gated behind a feature flag. The six
child issues are:
|Child issue|Scope|
|SUB-00|*Bootstrap* — module skeleton, `LlmClient` / `AuditSource` /
`PasswordDecoder` SPIs, `SuggestionWorkflowService` state machine, DDL.|
|SUB-01|*Audit Intelligence* — ES-backed anomaly detection + LLM explanation.|
|SUB-02|*Policy Recommendation* — least-privilege mining from audit
aggregations.|
|SUB-03|*Policy Governance* — redundancy / conflict / stale / risky-pattern
detection.|
|SUB-04|*NL2Policy* — natural-language authoring via LLM → JSON Schema → Ranger
`dryRun`.|
|SUB-05|*Automated Response* — Webhook / mail / ticketing adapters on
confidence-gated events.|
was:
Introduce a new, side-car Maven module — *{*}`ranger-copilot`{*}* — that turns
Apache Ranger into an assisted-governance platform. Copilot runs as an
independent Spring Boot 3.x service (no changes to `security-admin`), reads
policy metadata via Ranger REST, reads audit records through a pluggable
*{*}`AuditSource`{*}* abstraction with two implementations — direct
Elasticsearch (default, required for aggregation-based baselines) and
Ranger REST (`/service/xaudit/access_audit`) fallback for deployments
without direct ES access — and combines *{*}deterministic detectors{*}* with
an *{*}LLM reasoning layer{*}* to produce explainable, auditable, revertible
suggestions. Every AI output lands in a `PENDING` suggestion queue and is
only applied to Ranger after an administrator approves it — with a full
before/after policy snapshot and one-click rollback.
The Epic delivers *{*}six child issues{*}* — one bootstrap plus five feature
sub-tasks — and can be merged incrementally: each sub-task carries an
independently-testable MVP and is gated behind a feature flag. The six
child issues are:
|Child issue|Scope|
| | |
|SUB-00|*{*}Bootstrap{*}* — module skeleton, `LlmClient` / `AuditSource` /
`PasswordDecoder` SPIs, `SuggestionWorkflowService` state machine, DDL.|
|SUB-01|*{*}Audit Intelligence{*}* — ES-backed anomaly detection + LLM
explanation.|
|SUB-02|*{*}Policy Recommendation{*}* — least-privilege mining from audit
aggregations.|
|SUB-03|*{*}Policy Governance{*}* — redundancy / conflict / stale /
risky-pattern detection.|
|SUB-04|*{*}NL2Policy{*}* — natural-language authoring via LLM → JSON Schema →
Ranger `dryRun`.|
|SUB-05|*{*}Automated Response{*}* — Webhook / mail / ticketing adapters on
confidence-gated events.|
> Ranger Copilot — Governance-Grade AI Assistant for Apache Ranger
> ----------------------------------------------------------------
>
> Key: RANGER-5705
> URL: https://issues.apache.org/jira/browse/RANGER-5705
> Project: Ranger
> Issue Type: New Feature
> Components: Ranger
> Affects Versions: 2.6.0
> Reporter: Yunye Zhang
> Assignee: Yunye Zhang
> Priority: Major
> Original Estimate: 504h
> Remaining Estimate: 504h
>
> Introduce a new, side-car Maven module — {*}{{*}}`ranger-copilot`{{*}}{*} —
> that turns
> Apache Ranger into an assisted-governance platform. Copilot runs as an
> independent Spring Boot 3.x service (no changes to `security-admin`), reads
> policy metadata via Ranger REST, reads audit records through a pluggable
> {*}{{*}}`AuditSource`{{*}}{*} abstraction with two implementations — direct
> Elasticsearch (default, required for aggregation-based baselines) and
> Ranger REST (`/service/xaudit/access_audit`) fallback for deployments
> without direct ES access — and combines {*}{{*}}deterministic
> detectors{{*}}{*} with
> an {*}{{*}}LLM reasoning layer{{*}}{*} to produce explainable, auditable,
> revertible
> suggestions. Every AI output lands in a `PENDING` suggestion queue and is
> only applied to Ranger after an administrator approves it — with a full
> before/after policy snapshot and one-click rollback.
> The Epic delivers {*}{{*}}six child issues{{*}}{*} — one bootstrap plus five
> feature
> sub-tasks — and can be merged incrementally: each sub-task carries an
> independently-testable MVP and is gated behind a feature flag. The six
> child issues are:
> |Child issue|Scope|
> |SUB-00|*Bootstrap* — module skeleton, `LlmClient` / `AuditSource` /
> `PasswordDecoder` SPIs, `SuggestionWorkflowService` state machine, DDL.|
> |SUB-01|*Audit Intelligence* — ES-backed anomaly detection + LLM explanation.|
> |SUB-02|*Policy Recommendation* — least-privilege mining from audit
> aggregations.|
> |SUB-03|*Policy Governance* — redundancy / conflict / stale / risky-pattern
> detection.|
> |SUB-04|*NL2Policy* — natural-language authoring via LLM → JSON Schema →
> Ranger `dryRun`.|
> |SUB-05|*Automated Response* — Webhook / mail / ticketing adapters on
> confidence-gated events.|
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
