What's New in Apache Ranger

This topic lists new features for Apache Ranger in this release of Cloudera Runtime.

Reduced latency for Ranger policy enforcement🔗

Apache Ranger now performs incremental sync of Atlas tags and incremental policy downloads into Ranger plugins, which reduces latency of Ranger policy enforcement as compared to the previous "flush and fill" model.

API support for Sentry policy migration to Ranger🔗

New Ranger bulk import/creation APIs for Ranger policies facilitate migration of Sentry authorization policies into Ranger.

Enhancements to support replication of wildcard and tag-based policies: DLM/BDR use cases 🔗

Semantics for wildcard and tag-based policies are preserved when authorization policies and associated data are copied between source and target clusters. This enhancement supports DLM (Data Lifecycle Management) and BDR (Backup and Data Recovery) use cases.

Solr plugin enhancements to support document-level authorization (Sentry Feature Parity)🔗

To support Sentry feature parity, the Ranger Solr plugin now supports document-level authorization.

Enhancements in Ranger plugins to support Ranger HA without load-balancer🔗

You can now deploy Ranger in HA mode in CDP without requiring additional external load balancer hardware or software.

Java 11 support for Ranger🔗

Apache Ranger now supports Java 11.

Ranger support for CM monitoring and metrics🔗

Ranger monitoring and metrics are now accessible via Cloudera Manager.

Ranger authorization for Ozone (Tech Preview)🔗

Ranger authorization policies can now be used with Ozone storage. Ozone support is a technical preview feature.