Madhan Neethiraj created RANGER-5869:
----------------------------------------
Summary: Ranger PDP and audit ingestor services to dynamically
obtain authorized users
Key: RANGER-5869
URL: https://issues.apache.org/jira/browse/RANGER-5869
Project: Ranger
Issue Type: Improvement
Components: audit-server, pdp
Reporter: Madhan Neethiraj
Ranger PDP server allows only users configured in
"{{{}ranger.pdp.service.<service-name>.delegation.users"{}}} to call its APIs
to authorize access to resources in a service.
When a new service is added in Ranger, Ranger PDP server configuration needs to
be updated with the new configuration, to authorize its service account to call
PDP APIs.
To avoid such a manual configuration updates, it is preferrable for Ranger PDP
server to dynamically obtain users from service's configuration
{{service.account.users}} (see RANGER-5863).
Similarly, Ranger audit ingestor allows only users configured in
"{{{}ranger.audit.ingestor.service.<service-name>.allowed.users{}}}". This
should be updated to dynamically obtain users from service's configuration
{{service.account.users}} .
Service account users obtained dynamically from Ranger admin should be used in
addition to users configured in PDP and audit ingestor configurations.
--
This message was sent by Atlassian Jira
(v10.3.26#10030026)
