Arvind > I am assuming is it possible to have a single instance of ranger executing > policies for multiple clusters .. prod/qa/dev etc. Yes a single Ranger instance can be used to manage services from multiple clusters.
>i see in HDP sandbox 2.3x config files which can help define the policy manger >url's .. Generally services are configured via Ambari or if manual, then using enable-plugin.sh scripts. They will generate the configuration files. >> is it possible to configure the multi cluster common ranger setup using >> ambari .. or has this to be setup manually by compiling the plugins and >> building ranger in a standalone box? Each Ambari instance can only manage only one cluster. So if you are going to use Ambari, then the default services are only created for the services within the Ambari cluster. If you want, you can use the same Ranger instance to manage services from other services also, but if you are using Ambari, then it is better to just use Ranger per cluster. It will be much cleaner. You can check how the services are added from the below document. If you have questions, feel free to ask this forum. https://cwiki.apache.org/confluence/display/RANGER/Apache+Ranger+0.5+-+User+Guide#ApacheRanger0.5-UserGuide-HDFS.1 Thanks Bosco From: Arvind S Reply-To: <[email protected]> Date: Sunday, November 1, 2015 at 8:33 PM To: <[email protected]> Subject: Setup/config to manager multiple clusters using ranger I am assuming is it possible to have a single instance of ranger executing policies for multiple clusters .. prod/qa/dev etc. i see in HDP sandbox 2.3x config files which can help define the policy manger url's .. e.g. for hdfs in "/etc/hadoop/conf/ranger-hdfs-security.xml" for hive in "/etc/hive/conf/ranger-hive-security.xml" etc... My questions .. > is there any documentation link indicating the steps for such a setup? > is it possible to configure the multi cluster common ranger setup using > ambari .. or has this to be setup manually by compiling the plugins and > building ranger in a standalone box? > is this case suitable when we have multiple versions of hdp running on each > of the target environment (very much the case when we are testing for version > upgrade..) ? Thanks & Cheers !! Arvind
