RANGER-5680: Make Solr optional in docker so Ranger can run without it - #1058
Open
paras200 wants to merge 1 commit into
Open
RANGER-5680: Make Solr optional in docker so Ranger can run without it#1058paras200 wants to merge 1 commit into
paras200 wants to merge 1 commit into
Conversation
Contributor
|
@paras200 |
Contributor
Author
|
Thanks @ramackri this is a draft PR, will review once I am marking it ready. |
paras200
force-pushed
the
RANGER-5680
branch
4 times, most recently
from
August 5, 2026 13:06
1229d50 to
3393f80
Compare
paras200
marked this pull request as ready for review
August 5, 2026 13:11
paras200
force-pushed
the
RANGER-5680
branch
2 times, most recently
from
August 6, 2026 11:32
987a176 to
ccc8ffb
Compare
Contributor
|
LGTM |
Contributor
|
Thanks @paras200 for the patch. Few questions:
Thanks CC: @mneethiraj |
paras200
force-pushed
the
RANGER-5680
branch
2 times, most recently
from
August 7, 2026 09:13
b83ac53 to
c7e3364
Compare
…e default
Mirrors the RANGER_DB_TYPE pattern so the audit store can be selected
without hand-editing install.properties:
export RANGER_AUDIT_STORE=solr # default is now opensearch
Changes:
- .env: add RANGER_AUDIT_STORE=opensearch (default)
- docker-compose.ranger.yml: pass RANGER_AUDIT_STORE into the ranger container env
- scripts/admin/ranger.sh: rewrite install.properties audit block before setup.sh
runs — acts on RANGER_AUDIT_STORE=solr (opensearch is the no-op default, matching
the properties file default)
- ranger-admin-install-*.properties (postgres/mysql/oracle/sqlserver): flip default
active audit block from Solr to OpenSearch; comment out dangling active
elasticsearch param lines for consistency
- docker-compose.ranger-pdp.yml: remove hard depends_on: ranger-solr
- docker-compose.ranger-ozone.yml: remove hard depends_on: ranger-solr (om service)
- Default bring-up now starts OpenSearch instead of Solr so the core stack matches
the default audit store; Solr becomes opt-in (RANGER_AUDIT_STORE=solr + the solr
compose file). Audits use the direct OpenSearchAuditDestination (like the old
Solr path); the Kafka audit-server pipeline remains an optional advanced flow.
- README.md: default core/all-containers/rebuild/ozone commands use
docker-compose.ranger-opensearch.yml; document RANGER_AUDIT_STORE alongside
RANGER_DB_TYPE; Solr sections kept as opt-in
- .github/workflows/ci.yml: docker jobs download+build+start ranger-opensearch
and assert it is running (replacing ranger-solr in the default path)
Contributor
Author
|
Thanks @kumaab for the review! |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What changes were proposed in this pull request?
RANGER-5680 introduces a RANGER_AUDIT_STORE environment variable that selects the audit backend without requiring manual edits to install.properties, mirroring the existing RANGER_DB_TYPE pattern for database selection.
Audit store selection
export RANGER_AUDIT_STORE=opensearch # default — no change needed
export RANGER_AUDIT_STORE=solr # opt-in to Solr
ranger.sh rewrites the active audit block in install.properties at container startup based on RANGER_AUDIT_STORE, so setup.sh picks up the correct configuration. OpenSearch is now the default; Solr remains fully supported via the env-var.
Changes
How was this patch tested?