agents-common/src/main/resources/service-defs/ranger-servicedef-hdfs.json

{
	"id":1,
	"name": "hdfs",
	"displayName": "hdfs",
	"implClass": "org.apache.ranger.services.hdfs.RangerServiceHdfs",
	"label": "HDFS Repository",
	"description": "HDFS Repository",
	"guid": "0d047247-bafe-4cf8-8e9b-d5d377284b2d",
	"resources": 
	[
		{
			"itemId": 1,
			"name": "path",
			"type": "path",
			"level": 10,
			"parent": "",
			"mandatory": true,
			"lookupSupported": true,
			"recursiveSupported": true,
			"excludesSupported": false,
			"matcher": "org.apache.ranger.plugin.resourcematcher.RangerPathResourceMatcher",
			"matcherOptions": { "wildCard":true, "ignoreCase":false },
			"validationRegEx":"",
			"validationMessage": "",
			"uiHint":"",
			"label": "Resource Path",
			"description": "HDFS file or directory path"
		}
	],

	"accessTypes": 
	[
		{
			"itemId": 1,
			"name": "read",
			"label": "Read",
			"category": "READ"
		},

		{
			"itemId": 2,
			"name": "write",
			"label": "Write",
			"category": "UPDATE"
		},

		{
			"itemId": 3,
			"name": "execute",
			"label": "Execute",
			"category": "READ"
		}
	],

	"configs": 
	[
		{
			"itemId": 1,
			"name": "username",
			"type": "string",
			"subType": "",
			"mandatory": true,
			"validationRegEx":"",
			"validationMessage": "",
			"uiHint":"",
			"label": "Username"
		},

		{
			"itemId": 2,
			"name": "password",
			"type": "password",
			"subType": "",
			"mandatory": true,
			"validationRegEx":"",
			"validationMessage": "",
			"uiHint":"",
			"label": "Password"
		},

		{
			"itemId": 3,
			"name": "fs.default.name",
			"type": "string",
			"subType": "",
			"mandatory": true,
			"validationRegEx":"",
			"validationMessage": "",
			"uiHint":"{\"TextFieldWithIcon\":true, \"info\": \"1.For one Namenode Url, eg.<br>hdfs://&lt;host&gt;:&lt;port&gt;<br>2.For HA Namenode Urls(use , delimiter), eg.<br>hdfs://&lt;host&gt;:&lt;port&gt;,hdfs://&lt;host2&gt;:&lt;port2&gt;<br>\"}",
			"label": "Namenode URL"
		},

		{
			"itemId": 4,
			"name": "hadoop.security.authorization",
			"type": "bool",
			"subType": "YesTrue:NoFalse",
			"mandatory": true,
			"validationRegEx":"",
			"validationMessage": "",
			"uiHint":"",
			"label": "Authorization Enabled",
			"defaultValue": "false"
		},

		{
			"itemId": 5,
			"name": "hadoop.security.authentication",
			"type": "enum",
			"subType": "authnType",
			"mandatory": true,
			"validationRegEx":"",
			"validationMessage": "",
			"uiHint":"",
			"label": "Authentication Type",
			"defaultValue": "simple"
		},

		{
			"itemId": 6,
			"name": "hadoop.security.auth_to_local",
			"type": "string",
			"subType": "",
			"mandatory": false,
			"validationRegEx":"",
			"validationMessage": "",
			"uiHint":""
		},

		{
			"itemId": 7,
			"name": "dfs.datanode.kerberos.principal",
			"type": "string",
			"subType": "",
			"mandatory": false,
			"validationRegEx":"",
			"validationMessage": "",
			"uiHint":""
		},

		{
			"itemId": 8,
			"name": "dfs.namenode.kerberos.principal",
			"type": "string",
			"subType": "",
			"mandatory": false,
			"validationRegEx":"",
			"validationMessage": "",
			"uiHint":""
		},

		{
			"itemId": 9,
			"name": "dfs.secondary.namenode.kerberos.principal",
			"type": "string",
			"subType": "",
			"mandatory": false,
			"validationRegEx":"",
			"validationMessage": "",
			"uiHint":""
		},

		{
			"itemId": 10,
			"name": "hadoop.rpc.protection",
			"type": "enum",
			"subType": "rpcProtection",
			"mandatory": false,
			"label": "RPC Protection Type",
			"validationRegEx":"",
			"validationMessage": "",
			"uiHint":"",
			"defaultValue": "authentication"
		},

		{
			"itemId": 11,
			"name": "commonNameForCertificate",
			"type": "string",
			"subType": "",
			"mandatory": false,
			"validationRegEx":"",
			"validationMessage": "",
			"uiHint":"",
			"label": "Common Name for Certificate"
		},

		{
			"itemId": 12,
			"name": "ranger.plugin.audit.filters",
			"type": "string",
			"subType": "",
			"mandatory": false,
			"validationRegEx":"",
			"validationMessage": "",
			"uiHint":"",
			"label": "Ranger Default Audit Filters",
			"defaultValue": "[{'accessResult': 'DENIED', 'isAudited': true}, {'actions':['delete','rename'],'isAudited':true}, {'users':['hdfs'], 'actions': ['listStatus', 'getfileinfo', 'listCachePools', 'listCacheDirectives', 'listCorruptFileBlocks', 'monitorHealth', 'rollEditLog', 'open'], 'isAudited': false}, {'users': ['oozie'],'resources': {'path': {'values': ['/user/oozie/share/lib'],'isRecursive': true}},'isAudited': false},{'users': ['spark'],'resources': {'path': {'values': ['/user/spark/applicationHistory'],'isRecursive': true}},'isAudited': false},{'users': ['hue'],'resources': {'path': {'values': ['/user/hue'],'isRecursive': true}},'isAudited': false},{'users': ['hbase'],'resources': {'path': {'values': ['/hbase'],'isRecursive': true}},'isAudited': false},{'users': ['mapred'],'resources': {'path': {'values': ['/user/history'],'isRecursive': true}},'isAudited': false}, {'actions': ['getfileinfo'], 'isAudited':false} ]"
		}
	],

	"enums": 
	[
		{
			"itemId": 1,
			"name": "authnType",
			"elements": 
			[
				{
					"itemId": 1,
					"name": "simple",
					"label": "Simple"
				},

				{
					"itemId": 2,
					"name": "kerberos",
					"label": "Kerberos"
				}
			],

			"defaultIndex": 0
		},

		{
			"itemId": 2,
			"name": "rpcProtection",
			"elements": 
			[
				{
					"itemId": 1,
					"name": "authentication",
					"label": "Authentication"
				},

				{
					"itemId": 2,
					"name": "integrity",
					"label": "Integrity"
				},

				{
					"itemId": 3,
					"name": "privacy",
					"label": "Privacy"
				}
			],

			"defaultIndex": 0
		}
	],

	"contextEnrichers": 
	[
		
	],

	"policyConditions": 
	[
		
	]
}