paras200 commented on code in PR #986:
URL: https://github.com/apache/ranger/pull/986#discussion_r3448306478
##########
dev-support/ranger-docker/docker-compose.ranger.yml:
##########
@@ -81,6 +81,9 @@ services:
image: ranger-zk
container_name: ranger-zk
hostname: ranger-zk.rangernw
+ depends_on:
Review Comment:
Sure, when KERBEROS_ENABLED=true, ranger-zk boots via
zookeeper-with-kerberos.sh, which needs its keytab provisioned by the KDC
before startup — without the depends_on: ranger-kdc: service_healthy gate, ZK
races the KDC and fails to authenticate. It's a depends_on (ordering only), so
in non-Kerberos runs it just waits for the KDC container to be healthy with no
functional coupling.
This can be moved to the Kerberos-specific overlay if we want to keep it
out of the base compose.
##########
dev-support/ranger-docker/README.md:
##########
@@ -106,6 +106,72 @@ docker compose -f docker-compose.ranger.yml -f
docker-compose.ranger-trino.yml u
~~~
docker compose -f docker-compose.ranger.yml -f
docker-compose.ranger-opensearch.yml up -d
~~~
+
+#### OpenSearch audit flow (replace Solr for access audits)
+
+OpenSearch can replace Solr for **audit storage and UI queries**. Ranger Admin
reads audits via
+`audit_store=opensearch` using a native low-level REST client (compatible with
any OpenSearch version).
+
+**Write path:** access audits flow through audit-server ingestor, Kafka, and
the Java
+`ranger-audit-dispatcher-opensearch` service into the OpenSearch
`ranger_audits` index.
+Ranger Admin policy/admin transaction audits remain DB-backed; this is the
same boundary
+used by the Solr audit path.
+
+##### Quick start
+
+~~~
+# Prerequisites: build the audit-dispatcher tarball and download archives
+mvn clean package -DskipTests -pl distro -am
+cp target/ranger-*-audit-dispatcher.tar.gz dev-support/ranger-docker/dist/
+cd dev-support/ranger-docker
+./download-archives.sh kafka opensearch hadoop
+
+# Run the E2E test (starts stack, tests, tears down automatically)
Review Comment:
Removed - This is a leftover after deleting the script. Confirmed zero
remaining references to the script repo-wide.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
