Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Is it possible to manage multiple clusters using one ranger instance?

Solved Go to solution
Highlighted

Is it possible to manage multiple clusters using one ranger instance?

Is it possible to manage multiple clusters using one ranger instance?

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

Re: Is it possible to manage multiple clusters using one ranger instance?

Contributor

The primary limitation is wrt to UserSync. If there are multiple clusters, but using the same AD/LDAP, then you can use the same the Ranger instance to manage all of them.

View solution in original post

8 REPLIES 8
Highlighted

Re: Is it possible to manage multiple clusters using one ranger instance?

No I don't think it's possible.

Admin Authentication is only for one cluster. We would need to specify when we authenticate which cluster we are authenticating for.

Security Policies and configuration is on a cluster basis in the Ranger Admin database.

Highlighted

Re: Is it possible to manage multiple clusters using one ranger instance?

Highlighted

Re: Is it possible to manage multiple clusters using one ranger instance?

No, This is not supported.

Highlighted

Re: Is it possible to manage multiple clusters using one ranger instance?

Contributor

The primary limitation is wrt to UserSync. If there are multiple clusters, but using the same AD/LDAP, then you can use the same the Ranger instance to manage all of them.

View solution in original post

Highlighted

Re: Is it possible to manage multiple clusters using one ranger instance?

@bdurai What challenges do you see from the Ambari side?

Highlighted

Re: Is it possible to manage multiple clusters using one ranger instance?

Contributor

There is no native support from Ambari to do this. If you are using Ambari in all env, then the Ambari which is hosting the main Ranger instance is oblivious of the clusters Ranger is supporting. The Ambari which is hosting Ranger will automatically configure Ranger for the components within it's cluster. For the other clusters, you have to go to each component and modify Ranger properties. E.g. you will have to set ranger.plugin.hbase.policy.rest.url property and few others. You also need to add all the services/repo using Ranger Admin UI.

Highlighted

Re: Is it possible to manage multiple clusters using one ranger instance?

@bdurai Based on this, I believe it's a good idea to have one to one relationship i,e Each cluster will have it's own ranger install.

Re: Is it possible to manage multiple clusters using one ranger instance?

Contributor

I agree, just because we can do it doesn't mean we should do it. From operation point of view, it is better to have one ranger per ambari cluster. This makes management very simple. Also, when it comes to upgrade, it will cause less headache.

Don't have an account?
Coming from Hortonworks? Activate your account here