RANGER-5679: Document OpenSearch audit setup in docker README and per…#1057
Open
paras200 wants to merge 1 commit into
Open
RANGER-5679: Document OpenSearch audit setup in docker README and per…#1057paras200 wants to merge 1 commit into
paras200 wants to merge 1 commit into
Conversation
paras200
force-pushed
the
RANGER-5679
branch
4 times, most recently
from
July 10, 2026 10:21
3128bf5 to
aeae793
Compare
mneethiraj
reviewed
Jul 11, 2026
mneethiraj
left a comment
mneethiraj
left a comment
Contributor
There was a problem hiding this comment.
@paras200 - docker-compose.ranger.yml starts ranger-solr implicitly. With Opensearch as the audit destination, bringing up Solr is unnecessary. I suggest removing references to ranger-solr from docker-compose.ranger.yml and have Solr started explicitly similar to from docker-compose.ranger-opensearch.yml
| # export ENABLE_FILE_SYNC_SOURCE=true | ||
|
|
||
| # valid values for RANGER_DB_TYPE: mysql/postgres/oracle | ||
| # valid values for RANGER_DB_TYPE: mysql/postgres/oracle/sqlserver |
Contributor
There was a problem hiding this comment.
sqlserver is no more supported. Please revert the change in line 82.
Contributor
Author
There was a problem hiding this comment.
Thanks @mneethiraj , Done
Also, The pull request is currently in Draft mode, I still need to test everything locally again to mark it as ready for review.
paras200
force-pushed
the
RANGER-5679
branch
2 times, most recently
from
July 11, 2026 10:47
ccc2e07 to
0a27ef1
Compare
paras200
force-pushed
the
RANGER-5679
branch
2 times, most recently
from
July 21, 2026 15:31
165f5c7 to
b0a901e
Compare
…ouple Solr - Expand the docker README OpenSearch audit flow: postgres works out of the box (no install.properties edits); document bringing up the ingestor/dispatcher stack and the OpenSearch audit dispatcher one-liner - Append a commented native OpenSearch audit block (audit_store=opensearch + audit_opensearch_*) to mysql and oracle install.properties so the README's 'enable the OpenSearch block' step is actionable; Solr and Elasticsearch lines are left unchanged - Revert the sqlserver install.properties change: sqlserver is no longer a supported RANGER_DB_TYPE, so it gets no OpenSearch block and the README OpenSearch note lists only mysql/oracle - Decouple Solr from the core stack: move the ranger-solr service into its own docker-compose.ranger-solr.yml and drop it (and the ranger-admin depends_on) from docker-compose.ranger.yml, matching the OpenSearch pattern so Solr is only started when explicitly requested - Add a 'Bring up solr container' section and pass -f docker-compose.ranger-solr.yml to every Solr-dependent command (core stack, ozone, all-containers, rebuild, audit-server stack, Solr dispatcher) - Point the OpenSearch audit flow at the standalone docker-compose.ranger-audit-ingestor.yml instead of docker-compose.ranger-audit-server.yml, which bundles the Solr dispatcher; this avoids a 'depends on undefined service ranger-solr' compose error now that ranger-solr is not in ranger.yml, keeping the OpenSearch path Solr-free Docs and docker-compose only; no runtime code changes.
paras200
marked this pull request as ready for review
July 22, 2026 15:40
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What changes were proposed in this pull request?
RANGER-5679: Document the OpenSearch audit setup in the
dev-support/ranger-dockerREADME and decouple Solr from the core compose stack.Docker-compose and docs only; no runtime/product code changes.
How was this patch tested?
Manual test from a fresh clone using
dev-support/ranger-docker, anddocker compose ... configvalidation of every documented flow (core stack, hive, hbase, ozone, trino, solr, opensearch, OpenSearch audit flow, all-containers, rebuild, audit-server stack, and each individual dispatcher) — all resolve cleanly, and the OpenSearch flow no longer references an undefinedranger-solrservice.Verified:
ranger_audits/_count→ 3 documentsGET /service/assets/accessAudit?pageSize=10→ same 3 audits from OpenSearchNote: Kafka topic authz can race on first startup; restarting
ranger-audit-dispatcher-opensearchafter ~1 min may be needed (existing docker stack behavior).