Major Description
Ranger Custom PolicyCondition for TagsNotPresent and AnyTagPresent.
- Two new Custom Policy Conditions are to be created.
1) RangerAnyOfExpectedTagsPresentConditionEvaluator - This condition evaluates to "true" when "Any of the Policy condition Tag" defined is present in the tags associated to the Resource.
- When any tag in the resourceTags matches policyConditionTags it should return TRUE
- When no Tag Matches between resourceTags and PolicyConditionTags it should return FALSE
- When policyConditionTags and resourceTags contains empty set it should return TRUE as empty set matches.
- When policyConditionTags is not empty and resourceTags empty it should return FALSE as there is no any match.
- When policyConditionTags is empty and resourceTags not empty it should return FALSE as there is no any match.
- When policyConditionTags is NULL by any changes condition evaluator will return TRUE
2) RangerNoneOfExpectedTagsPresentConditionEvaluator - This condition evaluates to "true" when "None of the Policy condition Tag" defined is present in the tags associated to the resource.
- When no Tag Matches between resourceTags and PolicyConditionTags it should return TRUE
- When any Tag Matches between resourceTags and PolicyConditionTags it should return FALSE
- When policyConditionTags and resourceTags both are empty is should return FALSE as both matches.
- When policyConditionTags is not empty and resourceTags empty it should return TRUE as there is no tag match between these two sets.
- When policyConditionTags is empty and resourceTags in not empty it should return TRUE as there is no tag match between these two sets.
- When policyConditionTags is NULL by any changes condition evaluator will return TRUE
These new custom policy conditions are in addition to the one created in https://issues.apache.org/jira/browse/RANGER-2465