A Docker-based test execution framework that validates Apache Ranger service integrations through pytest. Spins up the required containers, runs the test suites, and tears down — all from a single script. New service modules can be added as pytest folders without changing the script.

functional-tests/
├── multiple modules containing test cases
├── ...
│
├── ranger_test_utils/utils.py   # Shared logging, HTTP asserts, Public API v2 helpers
├── pytest.ini                   # Registers custom pytest markers
├── run-tests.sh                 # Script to automate setup and test execution
├── requirements.txt             # Python dependencies
└── readme.md                    # This documentation

Note: A Python virtual environment folder named myenv is created automatically on the first run and reused on all subsequent runs — no reinstallation overhead.

1. Docker & Docker Compose installed and running
2. Python 3.10 or higher
3. Change the working directory to functional-tests/

cd functional-tests/

4. Make the shell script executable

chmod +x run-tests.sh

The run-tests.sh script manages Docker container setup, dependency installation, and test execution. It supports both interactive and argument-based modes.

Run the script without arguments to be prompted for each input:

./run-tests.sh

You will be asked four questions in sequence:

Available DB types: postgres, mysql, oracle
Enter DB type (press Enter to default to postgres): postgres

Available audit stores: opensearch, solr, none
Enter audit store (press Enter to default to opensearch): opensearch

Available test suites: rolerest xuserrest servicerest tagrest hdfs kms api hive
Enter test suites space-separated (press Enter to run ALL): hdfs kms

Available containers : hadoop hive hbase knox trino ozone kafka
  (base always starts: ranger, kdc, db, zk, kms, pdp, usersync, tagsync + audit pipeline)
Enter containers space-separated (press Enter or 'all' for ALL): hadoop

Press Enter at any prompt to accept the default. Type all at the containers prompt to bring up every optional container.

Pass db-type and test-suites as arguments to skip those prompts. Use env vars for the remaining options:

./run-tests.sh [db-type] [test-suites...]

• db-type — First positional argument. Valid values: postgres, mysql, oracle.
• test-suites — Remaining arguments, space-separated.

The containers prompt always appears unless SELECTED_CONTAINERS is exported.

Examples:

# Run hdfs and kms tests — postgres db, no audit pipeline, hadoop container only
export AUDIT_INDEX_STORE=none
export SELECTED_CONTAINERS=hadoop
./run-tests.sh postgres hdfs kms

# Run all test suites — mysql db, opensearch audit, all optional containers
export SELECTED_CONTAINERS=all
./run-tests.sh mysql

# Full clean rebuild — all suites, all containers
export CLEAN_CONTAINERS=1 
export SELECTED_CONTAINERS=all 
./run-tests.sh postgres

All variables have sensible defaults and can be exported before running or passed inline.

By default containers persist between runs for fast re-execution. Set to 1 only when you need a completely clean rebuild — e.g. after a Maven source change or to reset all data. On all subsequent re-runs, leave it unset to reuse existing containers.

Set to 0 to bring up the full infrastructure without executing any tests. Useful when containers are still initializing or you want to inspect the environment first before running tests.

Controls whether the audit pipeline (Kafka + ingestor + OpenSearch/Solr) is started. Defaults to opensearch. Set to none to skip the entire audit pipeline — no Kafka download, no audit containers.

Pre-select which optional containers to bring up without being prompted interactively. Accepts a space-separated list of container names (e.g. "hadoop hive") or all to bring up every optional container. When not set, the script prompts at runtime.

Regardless of which test suites or containers you choose, these always start. This matches the ranger-core command in dev-support/ranger-docker/README.md.

Brought up based on what you enter at the containers prompt (or SELECTED_CONTAINERS env var):

• Service repo name in Docker is dev_hive (not QE cm_hive).
• Tests currently assert beeline authorization output only. Hive access audits helpers live in ranger_test_utils/access_audit_utils.py for a follow-up once auditing works.
• Example: ./run-tests.sh postgres hive

After execution, an HTML report is automatically generated for each suite in the functional-tests/ directory: