Behavioral Changes in Cloudera Streaming Analytics

Review the list of Cloudera Streaming Analytics behavioral changes in Cloudera Data Flow for Cloudera Data Hub 7.3.2.

TLS 1.3 for network endpoints

services now consume the central TLS cipher and protocol configuration from . Streaming Analytics network endpoints are configured by default to allow TLS 1.3 connections only. Clients that attempt to connect with TLS versions earlier than 1.3 are rejected.

Review the global TLS cipher suite settings in before upgrading production clusters. For TLS protocol and cipher configuration, see Transport Layer Security Support and Custom Protocol Configuration. For Flink Dashboard and Gateway TLS, see Enabling security for Apache Flink. For external REST endpoint TLS on running jobs, see Securing Flink external REST endpoints with TLS.

project-permissions REST API

The project-permissions REST API now restricts data requests to the user's own user ID or their assigned projects, and the endpoint now returns BasicUserView.

CSA-6280 - Git import review when the remote project does not exist

When you import from Git and the remote project path does not yet exist in the repository, the source control diff API returns all local assets as added. The import review UI uses this result to show what an initial push would contain instead of returning an error.

CSA-5986 - Connector JAR Type validation

When you upload a custom SQL connector JAR, validates that the Type value matches a factory identifier declared in the archive. If the Type is incorrect, reports the error and lists the factory identifiers available in the JAR. If the JAR does not contain an org.apache.flink.table.factories.Factory implementation, reports that the file is not a valid SQL connector archive.

java.io.tmpdir for and Flink

and Flink processes now use /var/tmp as the value for java.io.tmpdir for internal file operations. On some operating systems, /tmp is mounted with the noexec flag, which prevents JVM processes from executing temporary files there.