ramackri opened a new pull request, #1228: URL: https://github.com/apache/ranger/pull/1228
## Summary Cherry-pick backport from master to `ranger-2.10` for the 2.10 release scope: - **Ranger Audit Server** — ingestor, dispatchers (Solr/HDFS/OpenSearch), plugin destination, docker compose (RANGER-5482 through 5720, 5680, 5679, packaging commits) - **SPIFFE / header-based authentication** — extends RANGER-5499 already on 2.10 (5700, 5766, 5767, 5723) - **SQL / admin fixes** — MariaDB grant (5736), JWT logging (5693), KMS audit field fix (5716) Explicitly excluded: GDS, JDK 17 migration, full RANGER-4076 Jersey 2 migration, TLS 1.3 (5611). Backport-specific fixes on this branch: - Restore 2.10 Jersey 1.x for plugin REST clients; port SPIFFE outbound headers only - GDS cleanup from conflict resolution (`--theirs` on shared admin/agents-common files) - `2.10.0-SNAPSHOT` pom alignment, docker `.env` JDK8/2.10 settings - `StopEmbeddedServer` shutdown port fix (match master field names) ## Test plan - [x] `mvn install -pl audit-server/audit-common,audit-server/audit-ingestor,audit-server/audit-dispatcher,agents-audit/dest-auditserver,agents-audit/dest-os,common-utils -am -DskipTests -Drat.skip=true` - [x] `mvn compile -pl security-admin -am -DskipTests -Drat.skip=true` - [ ] Docker smoke: admin + plugins + audit-server + OpenSearch index store - [ ] Apply DB patch 078 on test DB - [ ] SPIFFE/header auth provisioning smoke in docker/K8s-style setup Made with [Cursor](https://cursor.com) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
