question Re: Is there a Ranger KMS REST API? in Archives of Support Questions (Read Only)

Is there a Ranger KMS REST API?

andrewg — Tue, 06 Oct 2015 09:26:38 GMT

Hi, the reference Hadoop KMS implementation has a REST API https://hadoop.apache.org/docs/current/hadoop-kms/index.html Is there anything like that for Ranger KMS? Given that Ranger itself has a complete REST API, I would expect the same for KMS, but I don't see any mention in here http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.0/bk_Ranger_KMS_Admin_Guide/content/ch_ranger_kms_overview.html

Re: Is there a Ranger KMS REST API?

bdurai — Thu, 08 Oct 2015 05:38:50 GMT

All the APIs from Hadoop KMS should work with RangerKMS also. We could a make a note of it in the documentation.

Re: Is there a Ranger KMS REST API?

andrewg — Thu, 08 Oct 2015 20:00:27 GMT

Thanks, Bosco. Definitely, worth mentioning it in the docs. Even simple stuff, e.g. if port and path are the same or different, etc. Ping me offline so we can track this update, please.

Re: Is there a Ranger KMS REST API?

sachinsga_com — Tue, 25 Jul 2017 19:11:27 GMT

So @Andrew Grande so did it work ? all the rest apis given for hadoop KMS worked for rangerr KMS ?

If yes please give a sample url for creating an encryption key.

Re: Is there a Ranger KMS REST API?

sachinsga_com — Thu, 27 Jul 2017 00:48:45 GMT

@Don Bosco Durai Can you give an example for creating a encryption key in ranger KMS using rest api ?

Re: Is there a Ranger KMS REST API?

pbhardwaj — Thu, 10 Aug 2017 15:52:12 GMT

e.g

Create a file with the JSON data to create the key with

tee -a ./body.json << EOF
{ "name" : "test_key_curl", "length" : 128, "material" : "lksvIq3yy9Xxk4EZTfLv6g", "description" : "test_key_curl" }

EOF

Then run the curl command, in my case, my KMS host is hannibal-1.openstacklocal and post is 9292

curl -i --negotiate -u : -H "Content-Type: application/json" -X POST -d @body.json http://hannibal-1.openstacklocal:9292/kms/v1/keys

NOTE: You would need ticket for keyadmin before you can run the curl command

Thanks,

Pulkit