Apache Ranger 1.x and older releases¶
Apache Ranger entered the Apache Incubator in 2014 and shipped its first release, 0.4.0, in November of that year. Between 0.4.0 and 1.2.0 the project grew from an HDFS, Hive, HBase, Knox and Storm authorizer into the pluggable "Ranger Stacks" framework with tag-based policies, row filtering and column masking, Ranger KMS and support for a dozen more components. This page summarizes those releases; the full lists of resolved issues are on the cwiki pages linked from each section.
None of these releases are maintained today. If you run one of them, plan an upgrade to the current 2.x release (see Releases).
Summary¶
| Version | Release date | Release notes | Download |
|---|---|---|---|
| 1.2.0 | 2018-10-04 | cwiki 1.2.0 | archive |
| 1.1.0 | 2018-07-09 | cwiki 1.1.0 | archive |
| 1.0.0 | 2018-03-20 | cwiki 1.0.0 | archive |
| 0.7.1 | 2017-06-07 | cwiki 0.7.1 | archive |
| 0.7.0 | 2017-02-27 | cwiki 0.7.0 | archive |
| 0.6.3 | 2017-01-30 | cwiki 0.6.3 | archive |
| 0.6.2 | 2016-11-08 | cwiki 0.6.2 | archive |
| 0.6.1 | 2016-08-20 | cwiki 0.6.1 | archive |
| 0.6.0 | 2016-07-18 | cwiki 0.6.0 | archive |
| 0.5.3 | 2016-05-31 | cwiki 0.5.3 | archive |
| 0.5.2 | 2016-02-29 | cwiki 0.5.2 | archive |
| 0.5.1 | 2016-01-26 | cwiki 0.5.1 | archive |
| 0.5.0 | 2015-06-10 | cwiki 0.5.0 | archive |
| 0.4.0 | 2014-11-17 | cwiki 0.4.0 | archive |
Release dates are the fixVersion release dates recorded in JIRA. Releases up to 0.6.2 were incubating
releases; the artifact name for those is apache-ranger-incubating-<version>.tar.gz
(ranger-<version>-incubating.tar.gz for 0.4.0 and 0.5.0).
1.2.0¶
Released October 4, 2018. A maintenance release that also prepared the ground for 2.0.0.
- Policy history can be reverted to an earlier version (RANGER-2153).
- NiFi Registry service definition and
NiFiRegistryClient(RANGER-2157). - Service admin users can be set through the service configuration (RANGER-2168); a unique index on service and policy name (RANGER-2169).
- Faster resource trie construction and policy lookup (RANGER-2173); service-definition updates may no longer rename resources, access types, conditions or data masks (RANGER-2218).
1.1.0¶
Released July 9, 2018.
- Apache Kylin plugin (RANGER-1672).
- Policy effective dates for time-bound and temporary authorization (RANGER-2000) and support for time-based classifications and business terms from Apache Atlas (RANGER-2002).
- Auditing of UserSync operations (RANGER-1985) and read-only Ranger Admin users (RANGER-1948).
- Spring 4 (RANGER-2018), SSL-enabled PostgreSQL (RANGER-2058), consolidated database schema script for fresh installs (RANGER-2032).
1.0.0¶
Released March 20, 2018, the first 1.x release.
- Tag-based masking policies (RANGER-1492, RANGER-1493, RANGER-1494) and tag attributes in policy conditions (RANGER-1647).
- Policy labels to group, filter and search policies (RANGER-1972); the Hive query is shown in access audits (RANGER-1963).
- Apache Sqoop2 plugin (RANGER-1810), YARN Fair Scheduler support (RANGER-1203), Kafka 1.0.0 (RANGER-1967).
- Nested group memberships in Ranger Admin (RANGER-1735), HDFS HA configuration when creating an HDFS service (RANGER-1844), internationalized Admin UI (RANGER-1508).
0.7.1¶
Released June 7, 2017. A bug-fix release for 0.7.0.
- MySQL 5.7
only_full_group_bycompatibility (RANGER-1378) and a consolidated schema script for SQL Server (RANGER-1401). - Ranger KMS startup failure when more than one master key exists (RANGER-1453).
- Separate files can be specified for UNIX-based UserSync (RANGER-1435); audit spool files are created even when the plugin cannot log in to Solr (RANGER-1406).
0.7.0¶
Released February 27, 2017.
{OWNER}and{USER}-style variables in policies (RANGER-1200, RANGER-698).- Incremental sync of AD/LDAP users and groups (RANGER-1211).
- Audit records can be spooled to local disk before they are sent to the destinations (RANGER-1310); HDFS audit roll-over at an absolute time (RANGER-1105).
- Policy versions in use by each plugin are visible in the Admin UI (RANGER-1230); TagSync handles Atlas notifications for HDFS paths, HBase and Kafka entities (RANGER-1177, RANGER-1233); SSL-enabled MySQL (RANGER-1288).
0.6.x¶
0.6.0 was released July 18, 2016, followed by 0.6.1 (August 20, 2016), 0.6.2 (November 8, 2016) and 0.6.3 (January 30, 2017).
- Tag-based policies with tags synchronized from Apache Atlas by the new TagSync process (RANGER-595, RANGER-660).
- Deny policy items and allow/deny exceptions in policies (RANGER-646, RANGER-874, RANGER-877).
- HDFS plugin falls back to Hadoop ACLs only when no Ranger policy applies (RANGER-612); Solr set-up files and a script to migrate audits from the RDBMS to Solr (RANGER-270, RANGER-271).
- 0.6.2 and 0.6.3 brought policy-engine optimizations such as prefix and suffix matching and dynamic reordering (RANGER-1145, RANGER-1146, RANGER-1161), an "audit all accesses" setting (RANGER-1129) and consistent path matching (RANGER-1261).
0.5.x¶
0.5.0 was released June 10, 2015, followed by 0.5.1 (January 26, 2016), 0.5.2 (February 29, 2016) and 0.5.3 (May 31, 2016). The cwiki page Release Themes describes the goals of the 0.5 line.
- "Ranger Stacks": a pluggable framework in which a JSON service definition describes a new component (RANGER-203), plus context enrichers for dynamic conditions (RANGER-256) and validation of policies, services and service definitions (RANGER-278).
- New plugins for Apache Solr (RANGER-178), Apache Kafka (RANGER-246) and YARN (RANGER-248); HBase namespace-level authorization (RANGER-202).
- Ranger KMS, a scalable key management service for HDFS transparent encryption (RANGER-247).
- PostgreSQL and SQL Server as policy databases (RANGER-281, RANGER-282), a permission model for the Admin UI (RANGER-250), reliable streaming of audits to configurable destinations (RANGER-397).
- 0.5.3 added deletion of users and groups from the Admin UI (RANGER-888), a policy-engine API that lists the users and groups with access to a resource (RANGER-889) and wildcard, multiple-CN and SAN support when validating plugin SSL certificates (RANGER-746).
0.4.0¶
Released November 17, 2014, the first Apache release after the initial code import (RANGER-1) of the project formerly known as Argus.
- Authorization for HDFS, Hive (RANGER-3), HBase, Knox (RANGER-4) and Storm (RANGER-9).
- Audit logs written to HDFS (RANGER-5).
- Oracle as the policy and audit database (RANGER-69); user and group import from LDAP/AD with case normalization (RANGER-6).
- The project web site (RANGER-135).
Further reading¶
- Releases — all versions with dates and download links.
- Download and verify — how to fetch and verify archived artifacts.
- Release folders on the cwiki.