Hello,

Thank you for this module.

I sucessfully test a Hive Poliy creation but I have a problem on policy update. Here the error :

fatal: [master-2]: FAILED! => {
"changed": false,
"invocation": {
"module_args": {
"admin_password": "*",
"admin_url": "http://localhost:6080",
"admin_username": "admin",
"ca_bundle_file": "None",
"log_level": "None",
"policies": [
{
"audit": true,
"columns": [
""
],
"databases": [
""
],
"enabled": true,
"name": "Perceval_hive",
"permissions": [
{
"accesses": [
"all"
],
"delegate_admin": true,
"groups": [],
"users": [
"admin",
"ambari-qa",
"hive"
]
}
],
"tables": [
""
]
}
],
"service_name": null,
"state": "present",
"validate_certs": true
}
},
"logs": [],
"msg": "Invalid returned http code '400' when calling POST on 'http://localhost:6080/service/public/v2/api/policy': {"statusCode":1,"msgDesc":"(0) Validation failure: error code[3010], reason[Another policy already exists for matching resource: policy-name=[all - database, table, column], service=[Perceval_hive]], field[resources], subfield[null], type[semantically incorrect] "}"
}

Maybe I missed something, can you help me?

Thanks for your help.

Matthieu

Hello,

i'm facing an issue with deleteing policy from hdfs ranger

Here is my code for deleting...

• name: Apply ranger Hdfs policy
  ranger_hdfs_policies:
  state: absent.
  admin_url: https://{{ groups['ranger'][0] }}:6182
  admin_username: "admin"
  admin_password: "{{ RANGER_ADMIN_PASSWORD }}"
  validate_certs: no
  policies:
  • name: " User {{ User_Ftid }} Home access "
    paths:
    • "/user/{{ User_Ftid }}"
      permissions:
    • users:
      • "{{ User_Ftid }}"
        accesses:
      • Write
      • read
      • execute
        tags:
  • ranger_policies
    when : User_Ftid[0] is defined

always i receive this error :
ERROR! couldn't resolve module/action 'ranger_hdfs_policies'. This often indicates a misspelling, missing collection, or incorrect module path.

The error appears to be in '/var/www/html/JENKINS/workspace/Delete_user_NA/roles/Delete_user_NA/tasks/main.yml': line 2, column 3, but may
be elsewhere in the file depending on the exact syntax problem.

The offending line appears to be:

HDFS ranger rule

• name: Apply ranger Hdfs policy
  ^ here
  Build step '

The existing ranger modules work great for us 👍
It would be great if we can extend the support for other recent modules (I'm willing to contribute)

• atlas
• knox
• nifi
• solr

I'm not sure if possible because I was looking at Ranger API documentation, but it would be possible to add support for Row Level Filter policies type?