Kafka

Integrate Kafka with Ranger

1. Enable Kafka in Ranger.
   1. Log on to the Alibaba Cloud E-MapReduce console.
   2. In the top navigation bar, select the region where your cluster resides. Select the resource group as required. By default, all resources of the account appear.
   3. Click the Cluster Management tab.
   4. On the Cluster Management page that appears, find the target cluster and click Details in the Actions column.
   5. Select EnabledKafka from the Actions drop-down list in the upper-right corner.
      
   6. In the Cluster Activities dialog box that appears, set related parameters and click OK.
      Click History in the upper-right corner to view the task progress.
2. Add the Kafka service on the web UI of Ranger.
   1. Log on to Ranger. For more information, see Overview.
   2. Add the Kafka service.
      
   3. Configure the Kafka service.
      

      Parameter	Description
      Service Name	Set the value to emr-kafka.
      Username	Set the value to kafka.
      Password	Enter a custom value.
      Zookeeper Connect String	Enter a value in the format of emr-header-1:2181/kafka-x.xx. Note Set kafka-x.xx based on the actual Kafka version.

   4. Click Add.
3. Restart the Kafka broker.
   1. In the left-side navigation pane, click Cluster Service and then Kafka.
   2. Select Restart Kafka Broker from the Actions drop-down list in the upper-right corner.
   3. In the Cluster Activities dialog box that appears, set related parameters and click OK.
      Click History in the upper-right corner to view the task progress.

Permission configuration example

Take user test as an example. To grant the Publish permission to user test, follow these steps:

1. Click emr-kafka.
   
2. Click Add New Policy in the upper-right corner.
3. Configure required parameters.
   

   Parameter	Description
   Policy Name	The name of the policy. You can customize a name.
   topic	The topic on which permissions are configured. You can specify multiple topics. Press Enter after you specify each topic.
   Select Group	The user group to which you want to add this policy.
   Select User	The user to whom you want to add this policy.
   Permissions	The permissions to be granted. Click and select Publish.

   Click below Select Group to authorize multiple groups.

4. Click Add.
   After the policy is created, authorization is completed. User test can write data to the test topic.

   Note After you add, remove, or modify a policy, it can take up to one minute for the configuration to take effect.