Tagsync fails to upload tags to Ranger admin if it is invoked using ranger-tagsync-upload.sh script in a secure cluster. This is a result of failure to establish kerberos identity in the described scenario.
Also, incorrect processing of ENTITY_CREATE and ENTITY_UPDATE notifications causes entities with no associated classifications to create corresponding Service Resource objects in Ranger Admin. Instead, such notifications should be dropped without further processing.
Atlas REST API to download tagged entities throttles the number of entities returned to 100 even when all entities are requested. Tagsync needs to call this API in a loop until no more entities are returned to ensure that all tagged entities are retrieved.