[Bug] [api] ranger plugin will never be enabled on node only has Hbase RegionServer deployed

[junhanqiao]

Search before asking

• [X] I had searched in the issues and found no similar issues.

What happened

when i enable ranger for hbase in web ui,node that only has hbase regionServer deployed never enable the ranger-hbase-plugin for node that has Hbase master deployed ,ranger-hbase-plugin enabled as expected

What you expected to happen

i want ranger-hbase-plugin get enabled for node that has only hbase regionServer deployed

How to reproduce

1.deployed hbase ,and have one node only has HBASE RegionServer role 2. deploy ranger 3. enable ranger for HBASE service 4. then check hbase-site.xml on node that only has Hbase RegionServer role deployed,it will see no ranger related config in the file

Anything else

i read the code ,find that the logic is only Master role will enable ranger plugin

Version

v1.1.0

Are you willing to submit PR?

• [ ] Yes I am willing to submit a PR!

Code of Conduct

• [X] I agree to follow this project's Code of Conduct

[datasophon]

We think that we only need to start Ranger Plugin on HBase Master

[junhanqiao]

We think that we only need to start Ranger Plugin on HBase Master

there is a FAQ said both master and regionserver need install in folling URL https://cwiki.apache.org/confluence/display/RANGER/HBase+Plugin

[datasophon]

We think that we only need to start Ranger Plugin on HBase Master

there is a FAQ said both master and regionserver need install in folling URL https://cwiki.apache.org/confluence/display/RANGER/HBase+Plugin

Although the Ranger plugin can be deployed on HBase RegionServer,but it is not necessary. You can try it by yourself.

[datasophon]

Hbase version 2.4.16 requires version 2.4.0 of the Ranger, and you need to upgrade the Ranger https://cwiki.apache.org/confluence/display/RANGER/Apache+Ranger+2.4.0+-+Release+Notes

[junhanqiao]

txs very much! before this issue, i test that authorization check funcion is ok,but when i saw FQA mentioned in ranger doc,i think this must be a problem; I will continue to check if everything funcs ok

[junhanqiao]

finaly ,i foud that ranger-hbase-plugin are still needed;if not ,operations(put,get,delete,scan ...) direct to regionserver ,will not be controlled by ranger;So ranger-hbase-plugin should enabled on both master and region server