> On July 26, 2016, 3:35 p.m., Robert Levas wrote: > > ambari-server/src/main/resources/stacks/HDP/2.5/services/HDFS/kerberos.json, > > line 1 > > <https://reviews.apache.org/r/50445/diff/1/?file=1452670#file1452670line1> > > > > Is this change specific to HDP 2.5 or could some other stack benefit > > from the changes. For example PHD X.Y? > > > > If so, then maybe a new common service version of HDFS should be > > created and referenced from HDP/2.5/HDFS. > > Mugdha Varadkar wrote: > Till now this is specific to HDP only. @Jayush can you please take the > decision on the same.
We can leave HDFS as is. There are plans to refactor all services after Ambari 2.4.0.0 > On July 26, 2016, 3:35 p.m., Robert Levas wrote: > > ambari-server/src/main/resources/stacks/HDP/2.5/services/KAFKA/kerberos.json, > > line 1 > > <https://reviews.apache.org/r/50445/diff/1/?file=1452674#file1452674line1> > > > > Is this change specific to HDP 2.5 or could some other stack benefit > > from the changes. For example PHD X.Y? > > > > If so, then maybe a new common service version of KAFKA should be > > created and referenced from HDP/2.5/KAFKA. > > Mugdha Varadkar wrote: > I am not sure whether we have privilege to take that decision on adding > new common version for KAFKA. @Jayush can you please let use know if we can > add common service version of KAFKA We actually need to create a common-services/KAFKA/0.10.0 and have HDP/2.5/services/KAFKA inherit from it. I also see ambari/ambari-server/src/main/resources/stacks/HDP/2.5/services/KAFKA/configuration/ranger-kafka-audit.xml which needs to be moved. Go ahead with your changes and file a separate bug for this, I will do the refactoring changes in it. FYI, KAFKA, STORM, RANGER, ZOOKEEPER services have been refactored and versioned in common-services and HDP should simply inherit from the common-services version and only override specific properties. > On July 26, 2016, 3:35 p.m., Robert Levas wrote: > > ambari-server/src/main/resources/stacks/HDP/2.5/services/KNOX/kerberos.json, > > line 1 > > <https://reviews.apache.org/r/50445/diff/1/?file=1452676#file1452676line1> > > > > Is this change specific to HDP 2.5 or could some other stack benefit > > from the changes. For example PHD X.Y? > > > > If so, then maybe a new common service version of KNOX should be > > created and referenced from HDP/2.5/KNOX. > > Mugdha Varadkar wrote: > Till now this is specific to HDP only. @Jayush can you please take the > decision on the same. This is ok for now - Jayush ----------------------------------------------------------- This is an automatically generated e-mail. To reply, visit: https://reviews.apache.org/r/50445/#review143535 ----------------------------------------------------------- On July 27, 2016, 9:06 a.m., Mugdha Varadkar wrote: > > ----------------------------------------------------------- > This is an automatically generated e-mail. To reply, visit: > https://reviews.apache.org/r/50445/ > ----------------------------------------------------------- > > (Updated July 27, 2016, 9:06 a.m.) > > > Review request for Ambari, Alejandro Fernandez, Gautam Borad, Jaimin Jetly, > Jayush Luniya, Robert Levas, Srimanth Gunturi, and Velmurugan Periasamy. > > > Bugs: AMBARI-17902 > https://issues.apache.org/jira/browse/AMBARI-17902 > > > Repository: ambari > > > Description > ------- > > Ranger Service needs to support the following two scenarios in case when > audit to solr is enabled and solrCloud is used as destination. > > External Solr > If Audit to Solr is Enabled and Solr Cloud == true and Kerberos is Enabled > If is_external_solr == true > If is_external_solr_kerberized == true > Then recommend ranger.is.solr.kerberised as true. > > > Ambari Internal Solr > If Audit to Solr is Enabled and Solr Cloud == true > If is_external_solr == false and Kerberos is Enabled > Then directly recommend ranger.is.solr.kerberised as true. > > > Diffs > ----- > > > ambari-server/src/main/resources/common-services/HDFS/2.1.0.2.0/kerberos.json > 3d6e25c > > ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/params.py > 3ec4b53 > > ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/scripts/setup_ranger_xml.py > 1670d69 > > ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/templates/ranger_solr_jaas_conf.j2 > PRE-CREATION > > ambari-server/src/main/resources/common-services/RANGER/0.4.0/package/templates/ranger_solr_jass_conf.j2 > a456688 > > ambari-server/src/main/resources/common-services/RANGER/0.6.0/configuration/ranger-admin-site.xml > eacf541 > > ambari-server/src/main/resources/common-services/RANGER/0.6.0/configuration/ranger-env.xml > 2cf3539 > ambari-server/src/main/resources/common-services/RANGER/0.6.0/kerberos.json > ffebb11 > > ambari-server/src/main/resources/common-services/RANGER/0.6.0/themes/theme_version_3.json > e65c9b2 > > ambari-server/src/main/resources/common-services/STORM/1.0.1/configuration/ranger-storm-audit.xml > 1c869ed > ambari-server/src/main/resources/common-services/STORM/1.0.1/kerberos.json > f9fa30d > ambari-server/src/main/resources/stacks/HDP/2.3/upgrades/config-upgrade.xml > c49e18e > > ambari-server/src/main/resources/stacks/HDP/2.3/upgrades/nonrolling-upgrade-2.5.xml > 133db26 > ambari-server/src/main/resources/stacks/HDP/2.3/upgrades/upgrade-2.5.xml > ff5d4d9 > ambari-server/src/main/resources/stacks/HDP/2.4/upgrades/config-upgrade.xml > 473d8a0 > > ambari-server/src/main/resources/stacks/HDP/2.4/upgrades/nonrolling-upgrade-2.5.xml > d648638 > ambari-server/src/main/resources/stacks/HDP/2.4/upgrades/upgrade-2.5.xml > e67aebb > > ambari-server/src/main/resources/stacks/HDP/2.5/services/ATLAS/configuration/ranger-atlas-audit.xml > ac22729 > > ambari-server/src/main/resources/stacks/HDP/2.5/services/HBASE/configuration/ranger-hbase-audit.xml > cc9f0d2 > > ambari-server/src/main/resources/stacks/HDP/2.5/services/HBASE/kerberos.json > ada02ad > > ambari-server/src/main/resources/stacks/HDP/2.5/services/HDFS/configuration/ranger-hdfs-audit.xml > 0a04953 > ambari-server/src/main/resources/stacks/HDP/2.5/services/HDFS/kerberos.json > PRE-CREATION > > ambari-server/src/main/resources/stacks/HDP/2.5/services/HIVE/configuration/ranger-hive-audit.xml > 671c08e > ambari-server/src/main/resources/stacks/HDP/2.5/services/HIVE/kerberos.json > f9a0caf > > ambari-server/src/main/resources/stacks/HDP/2.5/services/KAFKA/configuration/ranger-kafka-audit.xml > 6aca7e7 > > ambari-server/src/main/resources/stacks/HDP/2.5/services/KAFKA/kerberos.json > PRE-CREATION > > ambari-server/src/main/resources/stacks/HDP/2.5/services/KNOX/configuration/ranger-knox-audit.xml > bdd1994 > ambari-server/src/main/resources/stacks/HDP/2.5/services/KNOX/kerberos.json > PRE-CREATION > > ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER_KMS/configuration/ranger-kms-audit.xml > 8c8278a > > ambari-server/src/main/resources/stacks/HDP/2.5/services/RANGER_KMS/kerberos.json > bfd142a > > ambari-server/src/main/resources/stacks/HDP/2.5/services/YARN/configuration/ranger-yarn-audit.xml > da24576 > ambari-server/src/main/resources/stacks/HDP/2.5/services/YARN/kerberos.json > 38896f5 > ambari-server/src/main/resources/stacks/HDP/2.5/services/stack_advisor.py > c46a168 > ambari-server/src/test/python/stacks/2.5/RANGER/test_ranger_admin.py > 2345b8e > > Diff: https://reviews.apache.org/r/50445/diff/ > > > Testing > ------- > > 1) External solr cloud on simple env (i.e. external solr cloud) > - audit to solr ON > - solr cloud ON > - external solr cloud ON > - external solr kerberos OFF > > 2) Internal solr cloud on simple env (i.e. log search) > - audit to solr ON > - solr cloud ON > - external solr cloud OFF > - external solr kerberos OFF > > 3) Internal solr cloud on secure env (i.e. log search + kerberos) > - audit to solr ON > - solr cloud ON > - external solr cloud OFF > - external solr kerberos OFF > > 4) External solr cloud on secure env (i.e. external solr cloud +kerberos env) > - audit to solr ON > - solr cloud ON > - external Solr cloud ON > - external solr kerberos OFF > > 5) External solr cloud on secure env (i.e. external solr cloud +kerberos env) > - audit to solr ON > - solr cloud ON > - external Solr cloud ON > - external solr kerberos ON > - > > > Also verified upgrade from 2.4 to 2.5 in simple as well as kerberos > > > Thanks, > > Mugdha Varadkar > >
