Cloudera Docs

Configure Ranger Admin High Availability

How to configure Ranger Admin High Availability (HA) by adding additional Ranger Admin role instances.

  1. In Cloudera Manager, select Ranger > Actions > Add Role Instances .
  2. On Add Role Instances, click Select hosts.
  3. On Hosts Selected, the primary Ranger Admin host is selected by default. Select a backup Ranger host. A Ranger Admin (RA) icon appears in Added Roles for the selected backup host. Click OK to continue.
  4. Add Role Instances refreshes, displaying the new backup host. Click Continue.
  5. Review the settings on Review Changes, then click Continue.
  6. Restart the stale Ranger configuration, then click Finish.

After restart you will see two URLs for the Ranger Admin Web UI.

  • Requests are distributed to the multiple Ranger Admin instances in a round-robin fashion.
  • If a connection is refused (indicating a failure), requests automatically reroute to the alternate Ranger Admin instance. However, you must manually switch to the alternate Ranger Admin Web UI.
  • For all services that have the Ranger plugin enabled, the value of the ranger.plugin.<service>.policy.rest.url property changes to http://<RANGER-ADMIN-1>:6080,http://<RANGER-ADMIN-2>:6080.