Apache Ranger AuthorizationPDF version

Configuring Ranger TagSync with AtlasREST

Learn how to configure Ranger TagSync with AtlasREST source.

To configure Ranger TagSync, select Ranger TagSync on the configuration properties page, and then specify a TagSync source. You can use Atlas, AtlasREST, or a file as the TagSync source. This topic describes how to add AtlasREST as the source.

  1. Login to Cloudera Manager.
  2. Go to Ranger > Configuration.
  3. Add the following properties in Ranger Tagsync Advanced Configuration Snippet (Safety Valve) for conf/ranger-tagsync-site.xml:
    ranger.tagsync.source.atlasrest=true
    ranger.tagsync.source.atlasrest.username=<atlas_admin_username>
    ranger.tagsync.source.atlasrest.password=<atlas_admin_password>
    ranger.tagsync.source.atlasrest.endpoint=https://<atlas_host>:31443
    ranger.tagsync.source.atlasrest.ssl.config.filename={{CMF_CONF_DIR}}/conf/ranger-tagsync-policymgr-ssl.xml
    ranger.tagsync.source.atlasrest.keystore.filename={{CMF_CONF_DIR}}/cm-auto-host_keystore.jks
  4. Also, add the following properties in Ranger Tagsync Advanced Configuration Snippet (Safety Valve) for conf/atlas-application.properties:
    atlas.enableTLS=true
    truststore.file=/var/lib/cloudera-scm-agent/agent-cert/cm-auto-global_truststore.jks
    keystore.file={{CMF_CONF_DIR}}/cm-auto-host_keystore.jks
  5. Restart Ranger.