cloudera.services.ranger_service module – Manage services in Apache Ranger

Note

This module is part of the cloudera.services collection (version 1.0.0).

It is not included in ansible-core. To check whether it is installed, run ansible-galaxy collection list.

To install it, use: ansible-galaxy collection install git+https://github.com/cloudera-labs/cloudera.services.git.

To use it in a playbook, specify: cloudera.services.ranger_service.

New in cloudera.services 1.1.0

Synopsis

  • Create, update, or delete services in Apache Ranger.

Parameters

Parameter

Comments

client_cert

path

The path to a client certificate for authenticating to the API endpoint.

client_key

path

The path to a client key for authenticating to the API endpoint.

configs

dictionary

A dictionary of configuration properties specific to the service type.

Configuration property names are sent to Ranger verbatim.

debug

aliases: debug_endpoints

boolean

A flag to enable debug logging of the module’s execution.

Choices:

  • false ← (default)

  • true

description

string

Description of the service.

display_name

string

Display name for the Ranger service.

force

boolean

A flag to force a refresh of the API request, ignoring any cached results.

Choices:

  • false ← (default)

  • true

force_basic_auth

boolean

A flag to force basic authentication for API requests.

Choices:

  • false ← (default)

  • true

http_agent

aliases: user_agent

string

The User-Agent string to send with API requests.

Default: "cloudera-services-module"

is_enabled

aliases: enabled

boolean

Whether the service is enabled.

Choices:

  • false

  • true ← (default)

name

string / required

Name of the Ranger service.

page_size

aliases: default_page_size

integer

The number of items to return per page in a paginated API response.

Default: 100

state

string

Whether the service should be present or absent.

Choices:

  • "present" ← (default)

  • "absent"

tag_service

string

The name of the tag service associated with this service.

timeout

aliases: timeout_seconds

integer

The timeout in seconds for any API requests.

Default: 60

type

string

Type of the Ranger service (e.g., hdfs, hive).

url

aliases: endpoint, endpoint_url

string / required

The base URL of the API endpoint, including the port if necessary.

url_password

string

The password for authenticating to the API endpoint.

url_username

string

The username for authenticating to the API endpoint.

use_gssapi

boolean

A flag to enable or disable GSSAPI authentication for API requests.

Choices:

  • false ← (default)

  • true

use_proxy

boolean

A flag to enable or disable the use of a proxy for API requests.

Choices:

  • false

  • true ← (default)

validate_certs

boolean

A flag to enable or disable SSL certificate validation for API requests.

Choices:

  • false

  • true ← (default)

Attributes

Attribute

Support

Description

check_mode

Support: full

This module supports check mode.

diff_mode

Support: full

This module supports diff mode.

Examples

# NOTE: Examples do not include connection and authentication fields

- name: Create a Ranger service
  cloudera.services.ranger_service:
    name: "test02"
    type: "hdfs"
    configs:
      username: "hdfs"
      password: "hdfs"
      fs.default.name: "hdfs://namenode:8020"
      hadoop.security.authentication: "simple"
      hadoop.security.authorization: "true"

- name: Delete a Ranger service
  cloudera.services.ranger_service:
    name: "test02"
    state: "absent"

Return Values

Common return values are documented here, the following are the fields unique to this module:

Key

Description

service

dictionary

A dictionary containing details about the service.

Returned: always

configs

dictionary

Dictionary of service configuration properties.

Returned: always

create_time

integer

Timestamp of when the service was created (epoch millis).

Returned: always

created_by

string

Username of the creator of the service.

Returned: always

description

string

Description of the service.

Returned: always

display_name

string

Display name of the service.

Returned: always

guid

string

Globally unique identifier of the service.

Returned: always

id

integer

Unique numeric ID of the service.

Returned: always

is_enabled

boolean

Whether the service is enabled.

Returned: always

name

string

Internal name of the service.

Returned: always

policy_update_time

integer

Timestamp of the last policy update (epoch millis).

Returned: always

policy_version

integer

Version number of the policy associated with this service.

Returned: always

tag_service

string

Name of the tag-based service used for classification.

Returned: sometimes

tag_update_time

integer

Timestamp of the last tag policy update (epoch millis).

Returned: sometimes

tag_version

integer

Version number of the tag policy for the service.

Returned: sometimes

type

string

Service type (e.g., hdfs, hive, kafka).

Returned: always

update_time

integer

Timestamp of the last update (epoch millis).

Returned: always

updated_by

string

Username of the last user who updated the service.

Returned: always

version

integer

Version number of the service definition.

Returned: always

Authors

  • Ronald Suplina (@rsuplina)