Skip to content

Base Configuration for Syncing Tags to Apache Ranger from Discovery

Note

This configuration is applicable only to Data Plane deployment.

To synchronize tags with Apache Ranger, configure the Discovery service using the user credentials for the Apache Ranger service.

Prerequisites

Prerequisite Description
Ranger TagSync Username Ranger TagSync username
Ranger TagSync Password Ranger TagSync password

Setup

  1. Create a file named vars.discovery.agent.yml in the config/custom-vars directory.

    Bash
    1
2
    cd ~/privacera/privacera-manager
vi config/custom-vars/vars.discovery.agent.yml

  2. Add the following variables:

    Replace the following placeholders

    DISCOVERY_RANGER_TAGSYNC_USERNAME: Ranger TagSync username

    RANGER_TAGSYNC_PASSWORD: Ranger TagSync password

    The Ranger TagSync username and password are used to push the tags to Ranger. These are the credentials of the ranger admin user created as per Create Ranger Service user for Discovery Compliance policies The same steps have to be followed in the Self Managed deployment using Privacera Portal in the VPC and for PrivaceraCloud Data Plane deployment using the PrivaceraCloud Portal.

    Bash
    1
2
3
    DISCOVERY_RANGER_TAGSYNC_USERNAME: "<PLEASE_CHANGE>"
RANGER_TAGSYNC_PASSWORD: "<PLEASE_CHANGE>"
DISCOVERY_RANGER_REST_ENABLED: "true"

Restart Privacera Services

Bash
1
2
3
cd ~/privacera/privacera-manager
./privacera-manager.sh setup
./pm_with_helm.sh upgrade