Command Line Installation
Also available as:
PDF
loading table of contents...

Install and Enable Ranger Kafka Plug-in

  1. Extract your build at the appropriate place.

    Copy ranger-<version>-SNAPSHOT-kafka-plugin.tar.gz to Active_Resourcemanager host in directory /usr/hdp/<hdp-version>/.

  2. Change directory to /usr/hdp/<hdp-version>.

  3. Untar ranger-<version>-SNAPSHOT-SNAPSHOT-kafka-plugin.tar.gz.

  4. Change directories to ranger-<version>-SNAPSHOT-kafka-plugin.

  5. Edit the install.properties file.

    Enter the appropriate values for each of the following properties:

    Table 6.20. install.properties Property Values

    PropertyValues
    COMPONENT_INSTALL_DIR_NAME/usr/hdp/<hdp-version>/kafka
    POLICY_MGR_URLhttp://<FQDN_of_ranger_admin_host>:6080
    REPOSITORY_NAMEkafkadev

    Additionally, for the Audit info, Solr/HDFS options are available.

  6. Enable the Kafka plug-in:

    export JAVA_HOME=/usr/lib/jvm/java-1.7.0-openjdk.x86_64
    ./enable-kafka-plugin.sh
    
    [Note]Note

    In the HA environment, the Knox plug-in must be enabled on all Knox instances.

  7. Stop and start the Kafka gateway:

    su kafka -c "/usr/hdp/current/kafka-broker/bin/kafka stop"
    su kafka -c "/usr/hdp/current/kafka-broker/bin/kafka start"
    
  8. Create the default repo for Kafka with proper configuration.

    In the custom repo configuration, add the component user kafka for each of the following properties:

    • policy.grantrevoke.auth.users or policy.download.auth.users

    • tag.download.auth.users

  9. Use the Audit->plugins tab to verify that the Kafka plug-in is communicating with Ranger admin.

    [Note]Note

    If the Kafka plugin is unable to communicate with Ranger admin, check that the authorizer.class.name property in file /usr/hdp/<hdp-version>/kafka/config/server.properties, is set to org.apache.ranger.authorization.kafka.authorizer.RangerKafkaAuthorizer .