[
https://issues.apache.org/jira/browse/RANGER-5869?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Akash Gupta updated RANGER-5869:
--------------------------------
Fix Version/s: 3.0.0
> Ranger PDP and audit ingestor services to dynamically obtain authorized
> callers
> -------------------------------------------------------------------------------
>
> Key: RANGER-5869
> URL: https://issues.apache.org/jira/browse/RANGER-5869
> Project: Ranger
> Issue Type: Improvement
> Components: audit-server, pdp
> Reporter: Madhan Neethiraj
> Assignee: Akash Gupta
> Priority: Major
> Fix For: 3.0.0
>
>
> Ranger PDP server allows only users configured in
> "{{{}ranger.pdp.service.<service-name>.delegation.users"{}}} to call its APIs
> to authorize access to resources in a service.
> When a new service is added in Ranger, Ranger PDP server configuration needs
> to be updated with the new configuration, to authorize its service account to
> call PDP APIs.
> To avoid such a manual configuration updates, it is preferrable for Ranger
> PDP server to dynamically obtain users from service's configuration
> {{service.account.users}} (see RANGER-5863).
>
> Similarly, Ranger audit ingestor allows only users configured in
> "{{{}ranger.audit.ingestor.service.<service-name>.allowed.users{}}}". This
> should be updated to dynamically obtain users from service's configuration
> {{service.account.users}} .
> Service account users obtained dynamically from Ranger admin should be used
> in addition to users configured in PDP and audit ingestor configurations.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
