[jira] [Commented] (RANGER-3580) Support Ranger KMS integration with TencentKMS
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17493933#comment-17493933 ] Dhaval Shah commented on RANGER-3580: - Apache Master Commit: https://github.com/apache/ranger/commit/605de3cba8d311e983f0aee3490e67266f6668a9 Apache ranger-2.3 commit: https://github.com/apache/ranger/commit/55c04f2f47bf749ede969804b34a3837f8520937 > Support Ranger KMS integration with TencentKMS > -- > > Key: RANGER-3580 > URL: https://issues.apache.org/jira/browse/RANGER-3580 > Project: Ranger > Issue Type: New Feature > Components: kms >Affects Versions: 3.0.0 >Reporter: kirby zhou >Priority: Major > Fix For: 3.0.0 > > Attachments: 0001-add-TencentKMS-as-MasterKeyProvider-1.patch, > 0001-add-TencentKMS-as-MasterKeyProvider.patch > > > Want Ranger KMS can work with more Key Vault Provider as its backend. > Such as Tencent KMS, AliCloud KMS, AWS KMS. -- This message was sent by Atlassian Jira (v8.20.1#820001)
[jira] [Commented] (RANGER-3580) Support Ranger KMS integration with TencentKMS
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17489511#comment-17489511 ] kirby zhou commented on RANGER-3580: TencentKMS is something like Microsoft Azure KeyVault, provided by Tencent Cloud, one of china's top cloud providers. It also named as "T-Sec 密钥管理系统". We use it as masterKey provider of RangerKMS. All configurations you need is the following list. # TencentKMS deployment configuration # The following configuration is added to the install.properties # Do you use Tencent Cloud KMS? TENCENT_KMS_ENABLED=true # MasterKeyID on Tencent Cloud TENCENT_MASTERKEY_ID=b756b016-6e11-11ec-a735-525400fe0300 # Login ID TENCENT_CLIENT_ID=AKIDrXx6ybx2qNdiaBWaNs76pGQJvFJ6crpW # Login password TENCENT_CLIENT_SECRET=# Tencent Cloud area, see Tencent Cloud SDK for details. TENCENT_CLIENT_REGION=ap-beijing 1. you should have a Tencent Cloud account. Please Visit [https://intl.cloud.tencent.com/|https://intl.cloud.tencent.com/?lang=en] or [https://cloud.tencent.com|https://cloud.tencent.com/] 2. Apply a KMS [https://intl.cloud.tencent.com/products/kms] or [https://cloud.tencent.com/product/kms] 3. Create a Key in Tencent KMS at you selected region. You should create an key id here, then use it as "TENCENT_MASTERKEY_ID". region code list is here: [https://intl.cloud.tencent.com/document/product/628/33133] 4. Create you client id/secret, and assign the privilege of key to it It may be called as "SecretId" and "SecretKey" Fill TENCENT_CLIENT_ID=SecretId Fill TENCENT_CLIENT_SECRET=SecretKey Chinese doc is here [https://cloud.tencent.com/document/api/362/4208] I am sorry, I have not found the exactly doc in English. You can check it in [https://intl.cloud.tencent.com/document/product] 5. Fill the other parts of install.properties, such as you database JDBC, your Kerberos 6. run setup.sh > Support Ranger KMS integration with TencentKMS > -- > > Key: RANGER-3580 > URL: https://issues.apache.org/jira/browse/RANGER-3580 > Project: Ranger > Issue Type: New Feature > Components: kms >Affects Versions: 3.0.0 >Reporter: kirby zhou >Priority: Major > Fix For: 3.0.0 > > Attachments: 0001-add-TencentKMS-as-MasterKeyProvider-1.patch, > 0001-add-TencentKMS-as-MasterKeyProvider.patch > > > Want Ranger KMS can work with more Key Vault Provider as its backend. > Such as Tencent KMS, AliCloud KMS, AWS KMS. -- This message was sent by Atlassian Jira (v8.20.1#820001)
[jira] [Commented] (RANGER-3580) Support Ranger KMS integration with TencentKMS
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17489296#comment-17489296 ] Dhaval Shah commented on RANGER-3580: - Hi [~kirbyzhou], Can you please share the doc explaining the steps to configure Ranger KMS with TencentKMS. Thanks > Support Ranger KMS integration with TencentKMS > -- > > Key: RANGER-3580 > URL: https://issues.apache.org/jira/browse/RANGER-3580 > Project: Ranger > Issue Type: New Feature > Components: kms >Affects Versions: 3.0.0 >Reporter: kirby zhou >Priority: Major > Fix For: 3.0.0 > > Attachments: 0001-add-TencentKMS-as-MasterKeyProvider-1.patch, > 0001-add-TencentKMS-as-MasterKeyProvider.patch > > > Want Ranger KMS can work with more Key Vault Provider as its backend. > Such as Tencent KMS, AliCloud KMS, AWS KMS. -- This message was sent by Atlassian Jira (v8.20.1#820001)
[jira] [Commented] (RANGER-3580) Support Ranger KMS integration with TencentKMS
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17482214#comment-17482214 ] kirby zhou commented on RANGER-3580: Hi [~dhavalshah9131] , any idea? > Support Ranger KMS integration with TencentKMS > -- > > Key: RANGER-3580 > URL: https://issues.apache.org/jira/browse/RANGER-3580 > Project: Ranger > Issue Type: New Feature > Components: kms >Affects Versions: 3.0.0 >Reporter: kirby zhou >Priority: Major > Fix For: 3.0.0 > > Attachments: 0001-add-TencentKMS-as-MasterKeyProvider-1.patch, > 0001-add-TencentKMS-as-MasterKeyProvider.patch > > > Want Ranger KMS can work with more Key Vault Provider as its backend. > Such as Tencent KMS, AliCloud KMS, AWS KMS. -- This message was sent by Atlassian Jira (v8.20.1#820001)
[jira] [Commented] (RANGER-3580) Support Ranger KMS integration with TencentKMS
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17478703#comment-17478703 ] Dhaval Shah commented on RANGER-3580: - Hi [~kirbyzhou], Thanks for creating the review request. I will soon review your patch and provide the inputs. Thanks cc: [~spolavarapu] / [~vel] / [~bpatel] > Support Ranger KMS integration with TencentKMS > -- > > Key: RANGER-3580 > URL: https://issues.apache.org/jira/browse/RANGER-3580 > Project: Ranger > Issue Type: New Feature > Components: kms >Affects Versions: 3.0.0 >Reporter: kirby zhou >Priority: Major > Fix For: 3.0.0 > > Attachments: 0001-add-TencentKMS-as-MasterKeyProvider-1.patch, > 0001-add-TencentKMS-as-MasterKeyProvider.patch > > > Want Ranger KMS can work with more Key Vault Provider as its backend. > Such as Tencent KMS, AliCloud KMS, AWS KMS. -- This message was sent by Atlassian Jira (v8.20.1#820001)
[jira] [Commented] (RANGER-3580) Support Ranger KMS integration with TencentKMS
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17478317#comment-17478317 ] kirby zhou commented on RANGER-3580: review request: [https://reviews.apache.org/r/73807/] > Support Ranger KMS integration with TencentKMS > -- > > Key: RANGER-3580 > URL: https://issues.apache.org/jira/browse/RANGER-3580 > Project: Ranger > Issue Type: New Feature > Components: kms >Affects Versions: 3.0.0 >Reporter: kirby zhou >Priority: Major > Fix For: 3.0.0 > > Attachments: 0001-add-TencentKMS-as-MasterKeyProvider.patch, > 0009-add-TencentKMS-as-MasterKeyProvider.patch > > > Want Ranger KMS can work with more Key Vault Provider as its backend. > Such as Tencent KMS, AliCloud KMS, AWS KMS. -- This message was sent by Atlassian Jira (v8.20.1#820001)
[jira] [Commented] (RANGER-3580) Support Ranger KMS integration with TencentKMS
[ https://issues.apache.org/jira/browse/RANGER-3580?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel=17477794#comment-17477794 ] Dhaval Shah commented on RANGER-3580: - Hi [~kirbyzhou], Thanks for contributing towards Ranger KMS. Please add yourself as contributor by sending an email to the dev list with your apache id. We have in place review process as mentioned below 1.) Creating review request at https://reviews.apache.org/ and uploading the patch on it for review. 2.) Enter the required details. E.G. https://reviews.apache.org/r/73783/ 3.) Share the review request link on this ticket. 4.) Once you get *_ship it_* on your review request the person whith committer rights will be merging your patch in master branch. 5.) After your patch is merged in master branch you need to close your review request and Apache Jira. Meanwhile I am analysing your patch. Thanks. cc: [~vel] / [~spolavarapu] > Support Ranger KMS integration with TencentKMS > -- > > Key: RANGER-3580 > URL: https://issues.apache.org/jira/browse/RANGER-3580 > Project: Ranger > Issue Type: New Feature > Components: kms >Affects Versions: 3.0.0 >Reporter: kirby zhou >Priority: Major > Fix For: 3.0.0 > > Attachments: 0009-add-TencentKMS-as-MasterKeyProvider.patch > > > Want Ranger KMS can work with more Key Vault Provider as its backend. > Such as Tencent KMS, AliCloud KMS, AWS KMS. -- This message was sent by Atlassian Jira (v8.20.1#820001)
