https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/327603#M230100 <P>Do you have any reference on how to enable ranger for kafka sitting in a separate cluster in CDP?</P> Wed, 13 Oct 2021 23:17:35 GMT SudheerV 2021-10-13T23:17:35Z https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/99745#M62785 <P>Is it possible to manage multiple clusters using one ranger instance?</P> Thu, 17 Dec 2015 06:56:23 GMT https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/99745#M62785 nsabharwal 2015-12-17T06:56:23Z https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/99746#M62786 <P>No I don't think it's possible. </P><P>Admin Authentication is only for one cluster. We would need to specify when we authenticate which cluster we are authenticating for.</P><P>Security Policies and configuration is on a cluster basis in the Ranger Admin database.</P> Thu, 17 Dec 2015 07:03:41 GMT https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/99746#M62786 amcbarnett 2015-12-17T07:03:41Z https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/99747#M62787 <P><A rel="user" href="https://community.cloudera.com/users/306/bganesan.html" nodeid="306">@bganesan</A> <A rel="user" href="https://community.cloudera.com/users/229/bdurai.html" nodeid="229">@bdurai</A></P> Thu, 17 Dec 2015 07:04:09 GMT https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/99747#M62787 nsabharwal 2015-12-17T07:04:09Z https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/99748#M62788 <P>No, This is not supported.</P> Thu, 17 Dec 2015 07:13:01 GMT https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/99748#M62788 pardeep_kumar 2015-12-17T07:13:01Z https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/99749#M62789 <P>The primary limitation is wrt to UserSync. If there are multiple clusters, but using the same AD/LDAP, then you can use the same the Ranger instance to manage all of them.</P> Thu, 17 Dec 2015 07:13:42 GMT https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/99749#M62789 bdurai 2015-12-17T07:13:42Z https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/99750#M62790 <P><A rel="user" href="https://community.cloudera.com/users/229/bdurai.html" nodeid="229">@bdurai</A> What challenges do you see from the Ambari side?</P> Thu, 17 Dec 2015 08:07:03 GMT https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/99750#M62790 nsabharwal 2015-12-17T08:07:03Z https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/99751#M62791 <P>There is no native support from Ambari to do this. If you are using Ambari in all env, then the Ambari which is hosting the main Ranger instance is oblivious of the clusters Ranger is supporting. The Ambari which is hosting Ranger will automatically configure Ranger for the components within it's cluster. For the other clusters, you have to go to each component and modify Ranger properties. E.g. you will have to set ranger.plugin.hbase.policy.rest.url property and few others. You also need to add all the services/repo using Ranger Admin UI.</P> Thu, 17 Dec 2015 11:11:31 GMT https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/99751#M62791 bdurai 2015-12-17T11:11:31Z https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/99752#M62792 <P><A rel="user" href="https://community.cloudera.com/users/229/bdurai.html" nodeid="229">@bdurai</A> Based on this, I believe it's a good idea to have one to one relationship i,e Each cluster will have it's own ranger install. </P> Thu, 17 Dec 2015 11:15:57 GMT https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/99752#M62792 nsabharwal 2015-12-17T11:15:57Z https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/99753#M62793 <P>I agree, just because we can do it doesn't mean we should do it. From operation point of view, it is better to have one ranger per ambari cluster. This makes management very simple. Also, when it comes to upgrade, it will cause less headache.</P> Thu, 17 Dec 2015 11:19:13 GMT https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/99753#M62793 bdurai 2015-12-17T11:19:13Z https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/327603#M230100 <P>Do you have any reference on how to enable ranger for kafka sitting in a separate cluster in CDP?</P> Wed, 13 Oct 2021 23:17:35 GMT https://community.cloudera.com/t5/Support-Questions/Is-it-possible-to-manage-multiple-clusters-using-one-ranger/m-p/327603#M230100 SudheerV 2021-10-13T23:17:35Z