Ranger Kafka plugin

Prerequisites

Prerequisites for authorization in Kafka using Ranger:

  1. ADS cluster is installed with configured authentication using MIT Kerberos or MS Active Directory protocols.

  2. ADPS cluster is installed.

  3. ADS cluster integration is enabled on ADPS cluster.

Activate the Ranger Kafka plugin

To activate the Ranger Kafka plugin, do the following:

  1. Initiate activation of the Ranger Kafka plugin. To do this, apply the Manage Ranger plugin action by clicking on the actions default dark actions default light in the Actions column of the Kafka service.

    Activation of the Ranger Kafka plugin
    Activation of the Ranger Kafka plugin

    In the Run an action:Manage Ranger plugin window that opens, mark the required state of the Desired plugin state parameter and click Run.

    If you select the enable state, then the default policy for the Ranger Kafka plugin will be applied to Ranger.

    Enabling the Ranger Kafka plugin
    Enabling the Ranger Kafka plugin
  2. Verify the action in the opened window.

    Action confirmation
    Verify the action
  3. Wait until the activation process of the Ranger Kafka plugin is completed and the default policy is created on the Ranger side. Analyze and correct errors if they occur.

    Ranger Kafka Plugin installation process
    Ranger Kafka Plugin installation process

Check the activated Ranger Kafka Plugin

After successful activation, the authorization policy service for the Kafka service of the selected ADS cluster will appear in the Service manager interface.

To view the created policies for the cluster, click on the name of the service.

Go to the created policy service
Go to the created policy service
Go to the created policy service
Go to the created policy service

This makes available the policies automatically created for the cluster servers.

To view, edit or delete policies, use the buttons in the Action column.

Created policies for the ADS cluster
Created policies for the ADS cluster
Created policies for the ADS cluster
Created policies for the ADS cluster
Found a mistake? Seleсt text and press Ctrl+Enter to report it