Skip to content

Commit d529cc3

Browse files
authored
RANGER-4898: docker setup updated to use kerberos authentication (apache#720)
1 parent 5180245 commit d529cc3

File tree

108 files changed

+1321
-419
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

108 files changed

+1321
-419
lines changed

.github/workflows/ci.yml

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -153,7 +153,7 @@ jobs:
153153
- name: Bring up containers
154154
run: |
155155
cd dev-support/ranger-docker
156-
./scripts/ozone-plugin-docker-setup.sh
156+
./scripts/ozone/ozone-plugin-docker-setup.sh
157157
export RANGER_DB_TYPE=postgres
158158
docker compose \
159159
-f docker-compose.ranger.yml \
@@ -177,7 +177,9 @@ jobs:
177177
echo "Container $container is running!";
178178
else
179179
flag=false;
180-
echo "Container $container is NOT running!";
180+
echo "Container $container is NOT running! Status: $(docker inspect -f '{{.State.Status}}' $container 2>/dev/null)";
181+
echo "docker logs $container:";
182+
docker logs $container
181183
fi
182184
done
183185

dev-support/ranger-docker/.env

Lines changed: 10 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -8,9 +8,9 @@ BUILD_OPTS=
88
# DockerHub Ranger Base Image
99
RANGER_BASE_IMAGE=apache/ranger-base
1010
# Java version used to run Ranger and dependent services is present as suffix: -8, valid values for suffix: -8, -11, -17
11-
RANGER_BASE_VERSION=20250707-1-8
11+
RANGER_BASE_VERSION=20251023-1-8
1212
# Java version used to build Apache Ranger is present as suffix: -8, valid values for suffix: -8, -11, -17
13-
RANGER_BASE_BUILD_VERSION=20250707-1-8
13+
RANGER_BASE_BUILD_VERSION=20251023-1-8
1414
RANGER_VERSION=3.0.0-SNAPSHOT
1515

1616
# Hadoop Configuration
@@ -53,6 +53,14 @@ SOLR_VERSION=8.11.2
5353
# Zookeeper Configuration
5454
ZK_VERSION=3.8.4
5555

56+
# Kerberos
57+
KERBEROS_ENABLED=true
58+
KERBEROS_REALM=EXAMPLE.COM
59+
KERBEROS_KDC_HOST=ranger-kdc.example.com
60+
KERBEROS_MASTER_PASSWORD=rangerR0cks!
61+
KERBEROS_ADMIN_PRINCIPAL=admin/admin
62+
KERBEROS_ADMIN_PASSWORD=rangerR0cks!
63+
5664
# Database Versions
5765
POSTGRES_VERSION=13.16
5866
MARIADB_VERSION=10.6

dev-support/ranger-docker/Dockerfile.ranger

Lines changed: 9 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -23,12 +23,17 @@ ARG RANGER_VERSION
2323
ARG RANGER_DB_TYPE
2424
ARG TARGETARCH
2525

26+
VOLUME /etc/keytabs
27+
2628
COPY ./dist/version /home/ranger/dist/
2729
COPY ./dist/ranger-${RANGER_VERSION}-admin.tar.gz /home/ranger/dist/
2830

29-
COPY ./scripts/ranger.sh ${RANGER_SCRIPTS}/
30-
COPY ./scripts/ranger-admin-install-${RANGER_DB_TYPE}.properties ${RANGER_SCRIPTS}/ranger-admin-install.properties
31-
COPY ./scripts/create-ranger-services.py ${RANGER_SCRIPTS}/
31+
COPY ./scripts/admin/ranger.sh ${RANGER_SCRIPTS}/
32+
COPY ./scripts/admin/ranger-admin-install-${RANGER_DB_TYPE}.properties ${RANGER_SCRIPTS}/ranger-admin-install.properties
33+
COPY ./scripts/admin/create-ranger-services.py ${RANGER_SCRIPTS}/
34+
COPY ./scripts/hadoop/core-site.xml ${RANGER_SCRIPTS}/
35+
COPY ./scripts/wait_for_keytab.sh ${RANGER_SCRIPTS}/
36+
COPY ./scripts/kdc/krb5.conf /etc/krb5.conf
3237

3338
RUN tar xvfz /home/ranger/dist/ranger-${RANGER_VERSION}-admin.tar.gz --directory=${RANGER_HOME} \
3439
&& ln -s ${RANGER_HOME}/ranger-${RANGER_VERSION}-admin ${RANGER_HOME}/admin \
@@ -37,7 +42,7 @@ RUN tar xvfz /home/ranger/dist/ranger-${RANGER_VERSION}-admin.tar.gz --direct
3742
&& mkdir -p /var/run/ranger \
3843
&& mkdir -p /var/log/ranger \
3944
&& chown -R ranger:ranger ${RANGER_HOME}/admin/ ${RANGER_SCRIPTS}/ /var/run/ranger/ /var/log/ranger/ \
40-
&& chmod 755 ${RANGER_SCRIPTS}/ranger.sh \
45+
&& chmod 755 ${RANGER_SCRIPTS}/ranger.sh ${RANGER_SCRIPTS}/wait_for_keytab.sh \
4146
&& mkdir -p /usr/share/java/
4247

4348
FROM ranger AS ranger_postgres

dev-support/ranger-docker/Dockerfile.ranger-build

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -37,10 +37,10 @@ ENV PATH=/usr/java/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/
3737
RUN mkdir -p /home/ranger/git /home/ranger/.m2 && \
3838
chown -R ranger:ranger /home/ranger
3939

40-
COPY ./scripts/ranger-build.sh /home/ranger/scripts/
40+
COPY ./scripts/build/* ${RANGER_SCRIPTS}/
41+
RUN chmod 755 ${RANGER_SCRIPTS}/ranger-build.sh
4142

4243
VOLUME /home/ranger/.m2
43-
VOLUME /home/ranger/scripts
4444
VOLUME /home/ranger/patches
4545
VOLUME /home/ranger/dist
4646
VOLUME /home/ranger/src

dev-support/ranger-docker/Dockerfile.ranger-hadoop

Lines changed: 18 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -23,18 +23,25 @@ ARG HDFS_PLUGIN_VERSION
2323
ARG YARN_PLUGIN_VERSION
2424
ARG TEZ_VERSION
2525

26+
VOLUME /etc/keytabs
2627

2728
COPY ./dist/version /home/ranger/dist/
2829
COPY ./dist/ranger-${HDFS_PLUGIN_VERSION}-hdfs-plugin.tar.gz /home/ranger/dist/
2930
COPY ./dist/ranger-${YARN_PLUGIN_VERSION}-yarn-plugin.tar.gz /home/ranger/dist/
3031
COPY ./downloads/hadoop-${HADOOP_VERSION}.tar.gz /home/ranger/dist/
3132
COPY ./downloads/apache-tez-${TEZ_VERSION}-bin.tar.gz /home/ranger/dist/
3233

33-
COPY ./scripts/ranger-hadoop-setup.sh /home/ranger/scripts/
34-
COPY ./scripts/ranger-hadoop.sh /home/ranger/scripts/
35-
COPY ./scripts/ranger-hadoop-mkdir.sh /home/ranger/scripts/
36-
COPY ./scripts/ranger-hdfs-plugin-install.properties /home/ranger/scripts/
37-
COPY ./scripts/ranger-yarn-plugin-install.properties /home/ranger/scripts/
34+
COPY ./scripts/hadoop/ranger-hadoop-setup.sh ${RANGER_SCRIPTS}/
35+
COPY ./scripts/hadoop/ranger-hadoop.sh ${RANGER_SCRIPTS}/
36+
COPY ./scripts/hadoop/ranger-hadoop-mkdir.sh ${RANGER_SCRIPTS}/
37+
COPY ./scripts/hadoop/ranger-hadoop-healthcheck.sh ${RANGER_SCRIPTS}/
38+
COPY ./scripts/hadoop/ranger-hdfs-plugin-install.properties ${RANGER_SCRIPTS}/
39+
COPY ./scripts/hadoop/ranger-yarn-plugin-install.properties ${RANGER_SCRIPTS}/
40+
COPY ./scripts/hadoop/core-site.xml ${RANGER_SCRIPTS}/
41+
COPY ./scripts/hadoop/hdfs-site.xml ${RANGER_SCRIPTS}/
42+
COPY ./scripts/hadoop/yarn-site.xml ${RANGER_SCRIPTS}/
43+
COPY ./scripts/wait_for_keytab.sh ${RANGER_SCRIPTS}/
44+
COPY ./scripts/kdc/krb5.conf /etc/krb5.conf
3845

3946
RUN tar xvfz /home/ranger/dist/hadoop-${HADOOP_VERSION}.tar.gz --directory=/opt/ && \
4047
ln -s /opt/hadoop-${HADOOP_VERSION} /opt/hadoop && \
@@ -45,12 +52,16 @@ RUN tar xvfz /home/ranger/dist/hadoop-${HADOOP_VERSION}.tar.gz --directory=/opt/
4552
tar xvfz /home/ranger/dist/ranger-${HDFS_PLUGIN_VERSION}-hdfs-plugin.tar.gz --directory=/opt/ranger && \
4653
ln -s /opt/ranger/ranger-${HDFS_PLUGIN_VERSION}-hdfs-plugin /opt/ranger/ranger-hdfs-plugin && \
4754
rm -f /home/ranger/dist/ranger-${HDFS_PLUGIN_VERSION}-hdfs-plugin.tar.gz && \
48-
cp -f /home/ranger/scripts/ranger-hdfs-plugin-install.properties /opt/ranger/ranger-hdfs-plugin/install.properties && \
55+
cp -f ${RANGER_SCRIPTS}/ranger-hdfs-plugin-install.properties /opt/ranger/ranger-hdfs-plugin/install.properties && \
4956
tar xvfz /home/ranger/dist/ranger-${YARN_PLUGIN_VERSION}-yarn-plugin.tar.gz --directory=/opt/ranger && \
5057
ln -s /opt/ranger/ranger-${YARN_PLUGIN_VERSION}-yarn-plugin /opt/ranger/ranger-yarn-plugin && \
5158
rm -f /home/ranger/dist/ranger-${YARN_PLUGIN_VERSION}-yarn-plugin.tar.gz && \
52-
cp -f /home/ranger/scripts/ranger-yarn-plugin-install.properties /opt/ranger/ranger-yarn-plugin/install.properties && \
59+
cp -f ${RANGER_SCRIPTS}/ranger-yarn-plugin-install.properties /opt/ranger/ranger-yarn-plugin/install.properties && \
5360
chmod 744 ${RANGER_SCRIPTS}/ranger-hadoop-setup.sh ${RANGER_SCRIPTS}/ranger-hadoop.sh ${RANGER_SCRIPTS}/ranger-hadoop-mkdir.sh && \
61+
useradd -g hadoop -ms /bin/bash healthcheck && \
62+
chmod 744 ${RANGER_SCRIPTS}/ranger-hadoop-healthcheck.sh && \
63+
chmod 755 ${RANGER_SCRIPTS}/wait_for_keytab.sh && \
64+
chown healthcheck:hadoop ${RANGER_SCRIPTS}/ranger-hadoop-healthcheck.sh && \
5465
chown hdfs:hadoop ${RANGER_SCRIPTS}/ranger-hadoop-mkdir.sh
5566

5667
RUN apt-get update && \

dev-support/ranger-docker/Dockerfile.ranger-hbase

Lines changed: 10 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -21,23 +21,28 @@ FROM ${RANGER_BASE_IMAGE}:${RANGER_BASE_VERSION}
2121
ARG HBASE_VERSION
2222
ARG HBASE_PLUGIN_VERSION
2323

24+
VOLUME /etc/keytabs
2425

2526
COPY ./dist/version /home/ranger/dist/
2627
COPY ./dist/ranger-${HBASE_PLUGIN_VERSION}-hbase-plugin.tar.gz /home/ranger/dist/
2728
COPY ./downloads/hbase-${HBASE_VERSION}-bin.tar.gz /home/ranger/dist/
2829

29-
COPY ./scripts/ranger-hbase-setup.sh /home/ranger/scripts/
30-
COPY ./scripts/ranger-hbase.sh /home/ranger/scripts/
31-
COPY ./scripts/ranger-hbase-plugin-install.properties /home/ranger/scripts/
32-
COPY ./scripts/hbase-site.xml /home/ranger/scripts/
30+
COPY ./scripts/hbase/ranger-hbase-setup.sh ${RANGER_SCRIPTS}/
31+
COPY ./scripts/hbase/ranger-hbase.sh ${RANGER_SCRIPTS}/
32+
COPY ./scripts/hbase/ranger-hbase-plugin-install.properties ${RANGER_SCRIPTS}/
33+
COPY ./scripts/hbase/hbase-site.xml ${RANGER_SCRIPTS}/
34+
COPY ./scripts/hadoop/core-site.xml ${RANGER_SCRIPTS}/
35+
COPY ./scripts/wait_for_keytab.sh ${RANGER_SCRIPTS}/
36+
COPY ./scripts/kdc/krb5.conf /etc/krb5.conf
3337

3438
RUN tar xvfz /home/ranger/dist/hbase-${HBASE_VERSION}-bin.tar.gz --directory=/opt/ && \
3539
ln -s /opt/hbase-${HBASE_VERSION} /opt/hbase && \
3640
rm -f /home/ranger/dist/hbase-${HBASE_VERSION}-bin.tar.gz && \
3741
tar xvfz /home/ranger/dist/ranger-${HBASE_PLUGIN_VERSION}-hbase-plugin.tar.gz --directory=/opt/ranger && \
3842
ln -s /opt/ranger/ranger-${HBASE_PLUGIN_VERSION}-hbase-plugin /opt/ranger/ranger-hbase-plugin && \
3943
rm -f /home/ranger/dist/ranger-${HBASE_PLUGIN_VERSION}-hbase-plugin.tar.gz && \
40-
cp -f /home/ranger/scripts/ranger-hbase-plugin-install.properties /opt/ranger/ranger-hbase-plugin/install.properties && \
44+
cp -f ${RANGER_SCRIPTS}/ranger-hbase-plugin-install.properties /opt/ranger/ranger-hbase-plugin/install.properties && \
45+
chmod 755 ${RANGER_SCRIPTS}/wait_for_keytab.sh && \
4146
chmod 744 ${RANGER_SCRIPTS}/ranger-hbase-setup.sh ${RANGER_SCRIPTS}/ranger-hbase.sh
4247

4348
RUN apt-get update && \

dev-support/ranger-docker/Dockerfile.ranger-hive

Lines changed: 10 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,7 @@ ARG HIVE_PLUGIN_VERSION
2525
ARG TEZ_VERSION
2626
ARG RANGER_DB_TYPE
2727

28+
VOLUME /etc/keytabs
2829

2930
COPY ./dist/version /home/ranger/dist/
3031
COPY ./dist/ranger-${HIVE_PLUGIN_VERSION}-hive-plugin.tar.gz /home/ranger/dist/
@@ -35,10 +36,13 @@ COPY ./downloads/postgresql-42.2.16.jre7.jar /home/ranger/dist/
3536
COPY ./downloads/mysql-connector-java-8.0.28.jar /home/ranger/dist/
3637
COPY ./downloads/ojdbc8.jar /home/ranger/dist/
3738

38-
COPY ./scripts/ranger-hive-setup.sh /home/ranger/scripts/
39-
COPY ./scripts/ranger-hive.sh /home/ranger/scripts/
40-
COPY ./scripts/ranger-hive-plugin-install.properties /home/ranger/scripts/
41-
COPY ./scripts/hive-site-${RANGER_DB_TYPE}.xml /home/ranger/scripts/hive-site.xml
39+
COPY ./scripts/hive/ranger-hive-setup.sh ${RANGER_SCRIPTS}/
40+
COPY ./scripts/hive/ranger-hive.sh ${RANGER_SCRIPTS}/
41+
COPY ./scripts/hive/ranger-hive-plugin-install.properties ${RANGER_SCRIPTS}/
42+
COPY ./scripts/hive/hive-site-${RANGER_DB_TYPE}.xml ${RANGER_SCRIPTS}/hive-site.xml
43+
COPY ./scripts/hadoop/core-site.xml ${RANGER_SCRIPTS}/
44+
COPY ./scripts/wait_for_keytab.sh ${RANGER_SCRIPTS}/
45+
COPY ./scripts/kdc/krb5.conf /etc/krb5.conf
4246

4347
RUN cd /opt && tar xzf /home/ranger/dist/apache-hive-${HIVE_VERSION}-bin.tar.gz && \
4448
ln -s /opt/apache-hive-${HIVE_VERSION}-bin /opt/hive && \
@@ -55,7 +59,8 @@ RUN cd /opt && tar xzf /home/ranger/dist/apache-hive-${HIVE_VERSION}-bin.tar.gz
5559
tar xvfz /home/ranger/dist/ranger-${HIVE_PLUGIN_VERSION}-hive-plugin.tar.gz --directory=/opt/ranger && \
5660
ln -s /opt/ranger/ranger-${HIVE_PLUGIN_VERSION}-hive-plugin /opt/ranger/ranger-hive-plugin && \
5761
rm -f /home/ranger/dist/ranger-${HIVE_PLUGIN_VERSION}-hive-plugin.tar.gz && \
58-
cp -f /home/ranger/scripts/ranger-hive-plugin-install.properties /opt/ranger/ranger-hive-plugin/install.properties && \
62+
cp -f ${RANGER_SCRIPTS}/ranger-hive-plugin-install.properties /opt/ranger/ranger-hive-plugin/install.properties && \
63+
chmod 755 ${RANGER_SCRIPTS}/wait_for_keytab.sh && \
5964
chmod 744 ${RANGER_SCRIPTS}/ranger-hive-setup.sh ${RANGER_SCRIPTS}/ranger-hive.sh
6065

6166
ENV HIVE_HOME=/opt/hive

dev-support/ranger-docker/Dockerfile.ranger-kafka

Lines changed: 10 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -21,25 +21,30 @@ FROM ${RANGER_BASE_IMAGE}:${RANGER_BASE_VERSION}
2121
ARG KAFKA_VERSION
2222
ARG KAFKA_PLUGIN_VERSION
2323

24+
VOLUME /etc/keytabs
2425

2526
COPY ./dist/version /home/ranger/dist/
2627
COPY ./dist/ranger-${KAFKA_PLUGIN_VERSION}-kafka-plugin.tar.gz /home/ranger/dist/
2728
COPY ./downloads/kafka_2.12-${KAFKA_VERSION}.tgz /home/ranger/dist/
2829

29-
COPY ./scripts/ranger-kafka-setup.sh /home/ranger/scripts/
30-
COPY ./scripts/ranger-kafka.sh /home/ranger/scripts/
31-
COPY ./scripts/ranger-kafka-plugin-install.properties /home/ranger/scripts/
30+
COPY ./scripts/kafka/ranger-kafka-setup.sh ${RANGER_SCRIPTS}/
31+
COPY ./scripts/kafka/ranger-kafka.sh ${RANGER_SCRIPTS}/
32+
COPY ./scripts/kafka/ranger-kafka-plugin-install.properties ${RANGER_SCRIPTS}/
33+
COPY ./scripts/kafka/kafka-server-jaas.conf ${RANGER_SCRIPTS}/
34+
COPY ./scripts/hadoop/core-site.xml ${RANGER_SCRIPTS}/
35+
COPY ./scripts/wait_for_keytab.sh ${RANGER_SCRIPTS}/
36+
COPY ./scripts/kdc/krb5.conf /etc/krb5.conf
3237

3338
RUN tar xvfz /home/ranger/dist/kafka_2.12-${KAFKA_VERSION}.tgz --directory=/opt/ && \
3439
ln -s /opt/kafka_2.12-${KAFKA_VERSION} /opt/kafka && \
3540
rm -f /home/ranger/dist/kafka_2.12-${KAFKA_VERSION}.tgz && \
3641
tar xvfz /home/ranger/dist/ranger-${KAFKA_PLUGIN_VERSION}-kafka-plugin.tar.gz --directory=/opt/ranger && \
3742
ln -s /opt/ranger/ranger-${KAFKA_PLUGIN_VERSION}-kafka-plugin /opt/ranger/ranger-kafka-plugin && \
3843
rm -f /home/ranger/dist/ranger-${KAFKA_PLUGIN_VERSION}-kafka-plugin.tar.gz && \
39-
cp -f /home/ranger/scripts/ranger-kafka-plugin-install.properties /opt/ranger/ranger-kafka-plugin/install.properties && \
44+
cp -f ${RANGER_SCRIPTS}/ranger-kafka-plugin-install.properties /opt/ranger/ranger-kafka-plugin/install.properties && \
45+
chmod 755 ${RANGER_SCRIPTS}/wait_for_keytab.sh && \
4046
chmod 744 ${RANGER_SCRIPTS}/ranger-kafka-setup.sh ${RANGER_SCRIPTS}/ranger-kafka.sh
4147

42-
4348
ENV KAFKA_HOME=/opt/kafka
4449
ENV PATH=/usr/java/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/opt/kafka/bin
4550

Lines changed: 45 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,45 @@
1+
# Licensed to the Apache Software Foundation (ASF) under one
2+
# or more contributor license agreements. See the NOTICE file
3+
# distributed with this work for additional information
4+
# regarding copyright ownership. The ASF licenses this file
5+
# to you under the Apache License, Version 2.0 (the
6+
# "License"); you may not use this file except in compliance
7+
# with the License. You may obtain a copy of the License at
8+
#
9+
# http://www.apache.org/licenses/LICENSE-2.0
10+
#
11+
# Unless required by applicable law or agreed to in writing, software
12+
# distributed under the License is distributed on an "AS IS" BASIS,
13+
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
14+
# See the License for the specific language governing permissions and
15+
# limitations under the License.
16+
17+
ARG RANGER_BASE_JAVA_VERSION=8
18+
19+
FROM eclipse-temurin:${RANGER_BASE_JAVA_VERSION}-jdk-jammy
20+
21+
ENV DEBIAN_FRONTEND=noninteractive
22+
ENV REALM=EXAMPLE.COM
23+
ENV KDC_HOST=kdc.example.com
24+
ENV ADMIN_PRINCIPAL=admin/admin
25+
ENV ADMIN_PASSWORD=rangerR0cks!
26+
ENV MASTER_PASSWORD=rangerR0cks!
27+
28+
# Install Kerberos components
29+
RUN apt-get update && \
30+
apt-get install -y krb5-kdc krb5-admin-server krb5-user && \
31+
rm -rf /var/lib/apt/lists/*
32+
33+
# Copy configuration files
34+
COPY ./scripts/kdc/krb5.conf /etc/krb5.conf
35+
COPY ./scripts/kdc/kdc.conf /etc/krb5kdc/kdc.conf
36+
COPY ./scripts/kdc/kadm5.acl /etc/krb5kdc/kadm5.acl
37+
COPY ./scripts/kdc/entrypoint.sh /entrypoint.sh
38+
39+
RUN chmod +x /entrypoint.sh
40+
41+
VOLUME /etc/keytabs
42+
43+
EXPOSE 88/tcp 88/udp 749/tcp
44+
45+
ENTRYPOINT ["/entrypoint.sh"]

dev-support/ranger-docker/Dockerfile.ranger-kms

Lines changed: 8 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -22,11 +22,16 @@ FROM ${RANGER_BASE_IMAGE}:${RANGER_BASE_VERSION} AS ranger-kms
2222
ARG KMS_VERSION
2323
ARG RANGER_DB_TYPE
2424

25+
VOLUME /etc/keytabs
26+
2527
COPY ./dist/version /home/ranger/dist/
2628
COPY ./dist/ranger-${KMS_VERSION}-kms.tar.gz /home/ranger/dist/
2729

28-
COPY ./scripts/ranger-kms.sh ${RANGER_SCRIPTS}/
29-
COPY ./scripts/ranger-kms-install-${RANGER_DB_TYPE}.properties ${RANGER_SCRIPTS}/ranger-kms-install.properties
30+
COPY ./scripts/kms/ranger-kms.sh ${RANGER_SCRIPTS}/
31+
COPY ./scripts/kms/ranger-kms-install-${RANGER_DB_TYPE}.properties ${RANGER_SCRIPTS}/ranger-kms-install.properties
32+
COPY ./scripts/hadoop/core-site.xml ${RANGER_SCRIPTS}/
33+
COPY ./scripts/wait_for_keytab.sh ${RANGER_SCRIPTS}/
34+
COPY ./scripts/kdc/krb5.conf /etc/krb5.conf
3035

3136
RUN tar xvfz /home/ranger/dist/ranger-${KMS_VERSION}-kms.tar.gz --directory=${RANGER_HOME} && \
3237
ln -s ${RANGER_HOME}/ranger-${KMS_VERSION}-kms ${RANGER_HOME}/kms && \
@@ -40,6 +45,7 @@ RUN tar xvfz /home/ranger/dist/ranger-${KMS_VERSION}-kms.tar.gz --directory=${RA
4045
ln -s /etc/init.d/ranger-kms /etc/rc3.d/K90ranger-kms && \
4146
ln -s ${RANGER_HOME}/kms/ranger-kms-services.sh /usr/bin/ranger-kms-services.sh && \
4247
chown -R rangerkms:ranger ${RANGER_HOME}/kms/ ${RANGER_SCRIPTS}/ /var/run/ranger_kms/ /var/log/ranger/ /etc/ranger && \
48+
chmod 755 ${RANGER_SCRIPTS}/wait_for_keytab.sh && \
4349
chmod 744 ${RANGER_SCRIPTS}/ranger-kms.sh
4450

4551
FROM ranger-kms AS ranger_postgres

0 commit comments

Comments
 (0)