RANGER-4076: Fix tagsync issues for the docker

bhaveshamre · pradeepagrawal8184 · commit f731ebb569be · 2026-03-26T22:39:44.000+05:30
diff --git a/dev-support/ranger-docker/.env b/dev-support/ranger-docker/.env
@@ -5,12 +5,15 @@ BRANCH=master
 PROFILE=
 BUILD_OPTS=
 
+# Java Opts Configuration in JDK17
+JAVA_OPTS=--add-opens=java.base/java.nio=ALL-UNNAMED --add-exports=java.base/sun.net.dns=ALL-UNNAMED --add-exports=java.base/sun.net.util=ALL-UNNAMED --add-opens=java.base/java.lang=ALL-UNNAMED --add-exports=java.xml.crypto/com.sun.org.apache.xml.internal.security.utils=ALL-UNNAMED
+
 # DockerHub Ranger Base Image
 RANGER_BASE_IMAGE=apache/ranger-base
 # Java version used to run Ranger and dependent services is present as suffix: -8, valid values for suffix: -8, -11, -17
-RANGER_BASE_VERSION=20260123-2-8
+RANGER_BASE_VERSION=20260123-2-17
 # Java version used to build Apache Ranger is present as suffix: -8, valid values for suffix: -8, -11, -17
-RANGER_BASE_BUILD_VERSION=20260123-2-8
+RANGER_BASE_BUILD_VERSION=20260123-2-17
 RANGER_VERSION=3.0.0-SNAPSHOT
 
 # Hadoop Configuration
diff --git a/dev-support/ranger-docker/Dockerfile.ranger b/dev-support/ranger-docker/Dockerfile.ranger
@@ -15,7 +15,7 @@
 # limitations under the License.
 ARG RANGER_DB_TYPE=postgres
 ARG RANGER_BASE_IMAGE=apache/ranger-base
-ARG RANGER_BASE_VERSION=20260123-2-8
+ARG RANGER_BASE_VERSION=20260123-2-17
 
 FROM ${RANGER_BASE_IMAGE}:${RANGER_BASE_VERSION} AS ranger
 
diff --git a/dev-support/ranger-docker/Dockerfile.ranger-build b/dev-support/ranger-docker/Dockerfile.ranger-build
@@ -15,7 +15,7 @@
 # limitations under the License.
 
 ARG RANGER_BASE_IMAGE=apache/ranger-base
-ARG RANGER_BASE_BUILD_VERSION=20260123-2-8
+ARG RANGER_BASE_BUILD_VERSION=20260123-2-17
 FROM ${RANGER_BASE_IMAGE}:${RANGER_BASE_BUILD_VERSION}
 
 ARG TARGETARCH
diff --git a/dev-support/ranger-docker/Dockerfile.ranger-kms b/dev-support/ranger-docker/Dockerfile.ranger-kms
@@ -16,7 +16,7 @@
 
 ARG RANGER_DB_TYPE=postgres
 ARG RANGER_BASE_IMAGE=apache/ranger-base
-ARG RANGER_BASE_VERSION=20260123-2-8
+ARG RANGER_BASE_VERSION=20260123-2-17
 FROM ${RANGER_BASE_IMAGE}:${RANGER_BASE_VERSION} AS ranger-kms
 
 ARG KMS_VERSION
diff --git a/dev-support/ranger-docker/Dockerfile.ranger-tagsync b/dev-support/ranger-docker/Dockerfile.ranger-tagsync
@@ -15,7 +15,7 @@
 # limitations under the License.
 
 ARG RANGER_BASE_IMAGE=apache/ranger-base
-ARG RANGER_BASE_VERSION=20260123-2-8
+ARG RANGER_BASE_VERSION=20260123-2-17
 FROM ${RANGER_BASE_IMAGE}:${RANGER_BASE_VERSION}
 
 ARG TAGSYNC_VERSION
diff --git a/dev-support/ranger-docker/Dockerfile.ranger-usersync b/dev-support/ranger-docker/Dockerfile.ranger-usersync
@@ -15,7 +15,7 @@
 # limitations under the License.
 
 ARG RANGER_BASE_IMAGE=apache/ranger-base
-ARG RANGER_BASE_VERSION=20260123-2-8
+ARG RANGER_BASE_VERSION=20260123-2-17
 FROM ${RANGER_BASE_IMAGE}:${RANGER_BASE_VERSION}
 
 ARG USERSYNC_VERSION
diff --git a/dev-support/ranger-docker/dist/.gitignore b/dev-support/ranger-docker/dist/.gitignore
diff --git a/dev-support/ranger-docker/docker-compose.ranger-build.yml b/dev-support/ranger-docker/docker-compose.ranger-build.yml
@@ -24,6 +24,7 @@ services:
       - GIT_URL
       - RANGER_VERSION
       - SKIPTESTS
+      - JAVA_OPTS
 
 networks:
   ranger:
diff --git a/dev-support/ranger-docker/docker-compose.ranger-kms.yml b/dev-support/ranger-docker/docker-compose.ranger-kms.yml
@@ -31,6 +31,7 @@ services:
       - KMS_VERSION
       - RANGER_DB_TYPE
       - KERBEROS_ENABLED
+      - JAVA_OPTS=--add-exports=java.xml.crypto/com.sun.org.apache.xml.internal.security.utils=ALL-UNNAMED
     command:
       - /home/ranger/scripts/ranger-kms.sh
 
diff --git a/dev-support/ranger-docker/docker-compose.ranger-tagsync.yml b/dev-support/ranger-docker/docker-compose.ranger-tagsync.yml
@@ -29,6 +29,7 @@ services:
       - TAGSYNC_VERSION
       - DEBUG_TAGSYNC=${DEBUG_TAGSYNC:-false}
       - KERBEROS_ENABLED
+      - JAVA_OPTS
 
 networks:
   ranger:
diff --git a/dev-support/ranger-docker/docker-compose.ranger-usersync.yml b/dev-support/ranger-docker/docker-compose.ranger-usersync.yml
@@ -30,6 +30,7 @@ services:
       - ENABLE_FILE_SYNC_SOURCE
       - DEBUG_USERSYNC=${DEBUG_USERSYNC:-false}
       - KERBEROS_ENABLED
+      - JAVA_OPTS
 
 networks:
   ranger:
diff --git a/dev-support/ranger-docker/docker-compose.ranger.yml b/dev-support/ranger-docker/docker-compose.ranger.yml
@@ -38,6 +38,7 @@ services:
       - RANGER_DB_TYPE
       - KERBEROS_ENABLED
       - DEBUG_ADMIN=${DEBUG_ADMIN:-false}
+      - JAVA_OPTS
     command:
       - /home/ranger/scripts/ranger.sh
 
diff --git a/dev-support/ranger-docker/scripts/kms/ranger-kms-install-postgres.properties b/dev-support/ranger-docker/scripts/kms/ranger-kms-install-postgres.properties
@@ -133,7 +133,7 @@ cred_keystore_filename=
 # ------- UNIX User CONFIG  - END ----------------
 #
 
-POLICY_MGR_URL=http://ranger:6080
+POLICY_MGR_URL=http://ranger.rangernw:6080
 REPOSITORY_NAME=dev_kms
 
 # AUDIT configuration with V3 properties
diff --git a/dev-support/ranger-docker/scripts/kms/ranger-kms.sh b/dev-support/ranger-docker/scripts/kms/ranger-kms.sh
@@ -48,6 +48,11 @@ fi
 # delete PID file if exists
 rm -f /var/run/ranger_kms/rangerkms.pid
 
+if [ -n "${JAVA_OPTS}" ]; then
+  echo "export JAVA_OPTS=\"${JAVA_OPTS}\"" \
+    > ${RANGER_HOME}/kms/ews/webapp/WEB-INF/classes/conf/ranger-kms-env-javaops.sh
+fi
+
 cd ${RANGER_HOME}/kms && ./ranger-kms-services.sh start
 
 RANGER_KMS_PID=`ps -ef  | grep -v grep | grep "Dproc_rangerkms" | awk '{print $2}'`
diff --git a/dev-support/ranger-docker/scripts/tagsync/ranger-tagsync-install.properties b/dev-support/ranger-docker/scripts/tagsync/ranger-tagsync-install.properties
@@ -20,7 +20,7 @@
 #
 #
 # URL for tag destination - Ranger
-TAG_DEST_RANGER_ENDPOINT = http://ranger:6080
+TAG_DEST_RANGER_ENDPOINT = http://ranger.rangernw:6080
 
 # SSL config file name for HTTPS messages to tag destination - Ranger
 TAG_DEST_RANGER_SSL_CONFIG_FILENAME =
diff --git a/dev-support/ranger-docker/scripts/usersync/ranger-usersync-install.properties b/dev-support/ranger-docker/scripts/usersync/ranger-usersync-install.properties
@@ -22,7 +22,7 @@ ranger_base_dir = /opt/ranger/usersync
 #
 #  POLICY_MGR_URL = http://policymanager.xasecure.net:6080
 #
-POLICY_MGR_URL = http://ranger:6080
+POLICY_MGR_URL = http://ranger.rangernw:6080
 
 # sync source,  only unix and ldap are supported at present
 # defaults to unix
