Uploaded image for project: 'Ranger'
  1. Ranger
  2. RANGER-2494

Ranger Custom PolicyCondition for TagsNotPresent and AnyTagPresent

    XMLWordPrintableJSON

Details

    • Improvement
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • master, 2.0.0
    • 2.0.0
    • Ranger
    • None

    Description

      Ranger Custom PolicyCondition for TagsNotPresent and AnyTagPresent.

      • Two new Custom Policy Conditions are to be created.
        1) RangerAnyOfExpectedTagsPresentConditionEvaluator - This condition evaluates to "true" when "Any of the Policy condition Tag" defined is present in the tags associated to the Resource.
      • When any tag in the resourceTags matches policyConditionTags it should return TRUE
      • When no Tag Matches between resourceTags and PolicyConditionTags it should return FALSE
      • When policyConditionTags and resourceTags contains empty set it should return TRUE as empty set matches.
      • When policyConditionTags is not empty and resourceTags empty it should return FALSE as there is no any match.
      • When policyConditionTags is empty and resourceTags not empty it should return FALSE as there is no any match.
      • When policyConditionTags is NULL by any changes condition evaluator will return TRUE

      2) RangerNoneOfExpectedTagsPresentConditionEvaluator - This condition evaluates to "true" when "None of the Policy condition Tag" defined is present in the tags associated to the resource.

      • When no Tag Matches between resourceTags and PolicyConditionTags it should return TRUE
      • When any Tag Matches between resourceTags and PolicyConditionTags it should return FALSE
      • When policyConditionTags and resourceTags both are empty is should return FALSE as both matches.
      • When policyConditionTags is not empty and resourceTags empty it should return TRUE as there is no tag match between these two sets.
      • When policyConditionTags is empty and resourceTags in not empty it should return TRUE as there is no tag match between these two sets.
      • When policyConditionTags is NULL by any changes condition evaluator will return TRUE

      These new custom policy conditions are in addition to the one created in https://issues.apache.org/jira/browse/RANGER-2465

      Attachments

        Activity

          People

            rmani Ramesh Mani
            rmani Ramesh Mani
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: