aakashnand / trino-ranger-demo Goto Github PK

I spent a long time figuring out how to get the trino plugin tarball you very conveniently provide, but maybe it would be nice to write in the readme how to make one :)

The docker-compose pulls a trinodb/trino:362 image. We're currently trying to integrate the ranger compose with our current production setup on Trino 376.

The entrypoint for the trino image pulls ranger-3.0.0-SNAPSHOT-trino-plugin from your github release directory, which is already pre-built with lib jars. If we wanted to keep trino updated to the latest version, can you recommend a path to take?

How can I build ranger-admin from https://github.com/apache/ranger with trino enabled?

Everytime I build ranger with maven and run the docker-compose stack and try to add my trino instance I receive:

Trino failed to find service class org.apache.ranger.services.trino.RangerServiceTrino. Resource lookup will not be available. Please make sure plugin jar is in the correct place.

Can you help me with this?

Hello, I would like to ask you a question, what did you do when you adapted the ranger version and the trino version, recently I need to use a higher version of trino, I have made some attempts, but unfortunately, all failed, Can you share your experience? Thank you so much!

trinodb/trino#15942

can you update ranger supported trino-420

I am getting this Error, when I try to enable Trino service . Can you help me please.

hi,

have started making use if your published plugin + ranger build.

have you tested this using ldap auth in trino? anything specific we should lookout for?

currently from ranger we have the trino service up and running. policy creation also works, with auto complete of catalogs etc.

from trino, however, no policies are in the cache directory. looks like something is failing. logs do not contain any errors / exceptions.

any idea?

I have cloned this code and trying to run all the services. But Apache Ranger is not accessible on localhost. Getting below logs in docker.

Also, how can I integrate Ranger in my existing production Trino setup.
@aakashnand Please help.

Table functions were added to trino from 388 onwards and SystemAccessControl methods were updated to accommodate this change later. Therefore, to make the table function work with the Trino-Rangerplugin we need to re-implement method checkCanExecuteFunction with a new argumentFunctionKind

Relevant links

Trino Slack: https://trinodb.slack.com/archives/CGB0QHWSW/p1655456620535959
trinodb/trino#12544
trinodb/trino#12833

trino:default> drop table hive.yiutto.ts_20230805;
Query 20230803_074307_00041_4k4d2 failed: Access Denied: Cannot drop table yiutto.ts_20230805

why not drop table, but ranger -> acess - result -> allowed

I have integrated Trino v388 with Ranger v2.3 using https://github.com/aakashnand/trino-ranger-demo/releases/download/trino-ranger-demo-v1.0/ranger-2.3.0-trino-plugin.tar.gz
I am able to access-control trino tables and columns in postgresql and hive catalogs.
But Not able to do column level masking and row-level filtering
There is no error, It looks like it simply ignores the mask and row-filter policies.
access-control.properties file:

access-control.name=ranger
ranger.use_ugi=true
ranger.hadoop_config=/opt/darc/hadoop-3.3.1/core-site.xml

@aakashnand , any advice?