[ https://issues.apache.org/jira/browse/RANGER-2157?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16550346#comment-16550346 ]
Koji Kawamura edited comment on RANGER-2157 at 8/7/18 6:55 AM: --------------------------------------------------------------- Attaching the first pass of a patch for NiFi Registry service def and resource lookup. In order to test this against a real NiFi Registry instance, you can do the following: Build this branch with "mvn clean install -Pinclude-ranger" https://github.com/ijokarumawak/nifi-registry/tree/nifireg-186 The NiFi Registry distribution will be in nifi-registry-assembly/target, copy the tar.gz somewhere and extract it. Refer [NiFi Registry Ranger extension README.md|https://github.com/apache/nifi-registry/blob/29239be99a5f6275060ecbdcb16ae9a8e7abef86/nifi-registry-extensions/nifi-registry-ranger-extension/README.md] for configuration details. In order for NiFi Registry to perform authorization, it needs to be secured, this is done by configuring conf/nifi-registry.properties to use HTTPS. Also, conf/authorizers.xml should be configured to use RangerAuthorizer. Example configurations are available here: https://github.com/ijokarumawak/nifi-registry-ranger/tree/master/nifi-registry/conf To start NiFi Registry, execute 'bin/nifi-registry.sh start'. Navigate to https://localhost:18443/nifi-registry You will need a client certificate loaded in your browser to authenticate, or configure NiFi Registry to use LDAP. was (Author: ijokarumawak): Attaching the first pass of a patch for NiFi Registry service def and resource lookup. In order to test this against a real NiFi Registry instance, you can do the following: Build this branch with "mvn clean install" https://github.com/ijokarumawak/nifi-registry/tree/nifireg-186 The NiFi Registry distribution will be in nifi-registry-assembly/target, copy the tar.gz somewhere and extract it. Also, you will need to build the ranger plug-in at NiFi Registry side by: {code} mvn -f nifi-registry-ranger install mkdir -p ${NIFI_REG_HOME}/ranger/lib/ cp -rp nifi-registry-ranger/target/lib/* ${NIFI_REG_HOME}/ranger/lib/ {code} In order for NiFi Registry to perform authorization, it needs to be secured, this is done by configuring conf/nifi-registry.properties to use HTTPS. Also, conf/authorizers.xml should be configured to use RangerAuthorizer. Example configurations are available here: https://github.com/ijokarumawak/nifi-registry-ranger/tree/master/nifi-registry/conf To start NiFi Registry, execute 'bin/nifi-registry.sh start'. Navigate to https://localhost:18443/nifi-registry You will need a client certificate loaded in your browser to authenticate, or configure NiFi Registry to use LDAP. > Add NiFi Registry service definition and NiFiRegistryClient > ----------------------------------------------------------- > > Key: RANGER-2157 > URL: https://issues.apache.org/jira/browse/RANGER-2157 > Project: Ranger > Issue Type: Improvement > Components: plugins > Reporter: Koji Kawamura > Assignee: Koji Kawamura > Priority: Major > Attachments: 0001-RANGER-2157-Added-NiFi-Registry-service.patch > > > Apache NiFi Registry is a subproject of Apache NiFi. NiFi Registry can manage > versioned flow definitions so that NiFi users can version control their flows. > Ranger already has NiFi service. This JIRA adds similar integration with NiFi > Registry. > The NiFi Registry integration will be split into two parts... > The first part will be the service definition and the NiFiRegistryClient to > perform resource look ups against NiFi Registry. This work will be tracked > with this ticket. > The second part is the plugin that will run in NiFi Registry and this part > will live in the NiFi Registry codebase and is being tracked with this JIRA: > NIFIREG-186 -- This message was sent by Atlassian JIRA (v7.6.3#76005)