Fixed Issues in Hue

Review the list of Hue issues that are resolved in Cloudera Runtime 7.3.1, its service packs and cumulative hotfixes.

Cloudera Runtime 7.3.1.500 SP3:

CDPD-57725: Security Enhancement: CSP Nonces Enforced in Hue: Hue now enforces Content Security Policy (CSP) nonces, eliminating unsafe-inline JavaScript to improve security and mitigate InfoSec scan issues related to wildcard domains and other directives.; Update the following in the hue.ini configuration:
[desktop] csp_nonce=true
note
The Workflow Editor will not be available in this mode. This update enhances security by reducing the risk of cross-site scripting (XSS) attacks.
CDPD-81753: Added a configurable flag to optionally reenable data preview on database views in Hue: Previously, data preview for database views was disabled by default due to resource strains caused by complex or long-running views, impacting data validation and analysis.
This issue has now been improved by adding the new allow_sample_data_from_views flag, with the default value set to false. Setting this flag to true enables Hue to fetch sample data for database views and thus restore the data preview functionality in the SQL assist panel. You can enable the flag by performing the following steps:

Navigate to Cloudera Manager > Clusters > Hue service > Configuration.

In the Hue Service Advanced Configuration Snippet (Safety Valve) for hue_safety_valve.ini field, specify the following parameter:
[metastore] allow_sample_data_from_views=true

Click Save Changes.

Cloudera Runtime 7.3.1.400 SP2:

There are no fixed issues identified in this release.

Cloudera Runtime 7.3.1.300 SP1 CHF 1

CDPD-80268: Hide logout button when configured with Knox: 7.3.1.300; In environments where Hue is configured with Knox, the Hue interface displays the logout button, although logout must be handled by Knox. The logout button is now hidden in the Hue interface when Knox authentication is enabled.
CDPD-77746: Metrics Collection Failure with "DPI-1010: not connected" on Oracle DB backend: 7.3.1.300; Metrics collection fails with the error "DPI-1010: not connected" when using an Oracle database as the backend.; This issue is now fixed.
CDPD-76594: Impala Iceberg Table Creation Fails in Hue: 7.3.1.300; Previously, creating Iceberg tables in Impala using the Hue importer failed. This issue has now been resolved, allowing seamless table creation.

Cloudera Runtime 7.3.1.200 SP1

There are no fixed issues in this release.

Cloudera Runtime 7.3.1.100 CHF 1

CDPD-72754: Enhanced AI Integration in Hue SQL AI Assistant: 7.3.1.100; The Hue SQL AI Assistant now supports Cloudera AI Workbench, Cloudera AI Inference service, and vLLM. These integrations enhance the Hue SQL AI Assistant by enabling the use of private models hosted within Cloudera-managed infrastructure. This ensures enhanced security and privacy while leveraging GenAI for the Hue SQL-related tasks.

Cloudera AI Workbench: This enables you to securely deploy and run your own models within a virtual private cloud. This configuration enhances control and privacy within your environment. For more information, see Configure SQL AI Assistant using Cloudera AI Workbench.

Cloudera AI Inference service: Helps in a production-grade serving environment for hosting predictive and generative AI models. This service simplifies model deployment and maintenance. For more information, see Configure SQL AI Assistant using Cloudera AI Inference service.

vLLM: Provides a customizable environment for running your own language model server. It ensures security and privacy control within your infrastructure. For more information, see Configure SQL AI Assistant using vLLM.
CDPD-72496: File extension restrictions for Hue file uploads: 7.3.1.100; Earlier, Hue permitted uploading all file types to the configured filesystems, including unsupported extensions, which posed a security risk.; To enhance security, Hue now allows restricting specific file extensions across all configured filesystems. For example, you can allow .csv file uploads while blocking .exe files. By default, no file extensions are restricted during file uploads.; For more information, see Managing file extensions for Hue uploads.
CDPD-72032: Searching with the application ID and DAG ID is not working in Hive Queries: 7.3.1.100; This fix addresses the issue by ensuring that searching using the application ID and DAG ID in the Hive Queries tab of the Job Browser using the Hue Query Processor retrieves the results.
CDPD-71994: Including search within the document as we used to have in CDH: 7.3.1.100; In Cloudera, there was a unified search at the top, and the results were not displayed in a tabular format. And these resultant workflows could be copied. This issue is now resolved, and the search is now similar to CDH, where the search result is displayed in a tabular format, and by selecting the results, the workflows can be copied.
CDPD-72777: It's not possible to search a Hue document with the intention to copy it: 7.3.1.100; The copy action was not provided in the top search or the left assist filter. This issue is now resolved.
CDPD-71074, CDPD-69265: Hue startup failure resolved on the FIPS-enabled clusters: In the FIPS-enabled clusters, Hue startup failure occurred due to the use of the psycopg2-binary package, which includes an OpenSSL version incompatible with FIPS requirements. The issue now can be resolved by removing the psycopg2-binary package and installing psycopg2 along with its necessary dependencies.
CDPD-67341: Refactor and improve IDBroker support in Hue: 7.3.1.100; Refactored the IDBroker support, and more preference is now given to Ranger Authorization Service (RAZ) when both are configured in Hue. Improved the IDBroker HA code section to switch over to a healthy instance correctly and not depend only on the first one for every scenario. This fix also improves Hue page loading performance.
CDPD-66706: HDFS file compression in Hue is failing: 7.3.1.100; Hue HDFS file compression feature did not work and failed with an error message in the OOZIE application logs. This issue is now resolved.
CDPD-73657: Fix configuration issues in HiveServer2 Zookeeper discovery to handle failover: 7.3.1.100; Used the correct port number based on the transport mode.

Updated the port number and Kerberos principal in the new active endpoint.

Sorted HiveServer2 endpoints by Zookeeper sequence number to ensure the active endpoint is selected.
CDPD-64979: CORS is too permissive for the public APIs: 7.3.1.100; This issue is resolved by adding the following three properties to control Cross-Origin Resource Sharing (CORS) under the [desktop] section in the Hue configuration file:

cors_enabled: Used to enable or disable CORS. The default value is True.

cors_allow_credentials: Used to determines whether the server allows cookies in the cross-site HTTP requests. The default value is True.

cors_allowed_origins: A comma-separated list of origins allowed for CORS. For example:
[desktop] cors_allowed_origins=[***ORIGIN-1***],[***ORIGIN-2***],[***ORIGIN-3***]
If no values are set, then all origins are allowed.

To change the values of these properties, go to Cloudera Manager > Clusters > Hue > Configuration > Hue Service Advanced Configuration Snippet (Safety Valve) for hue_safety_valve.ini, and specify the configuration in the [desktop] section with the required value. For example, to disable CORS, specify the following:
[desktop] cors_enabled=false
note
You must enable CORS for using public APIs and authentcating using SAML.
CDPD-64286: Hue - Metrics cannot restore database connections on failure: 7.3.1.100; This fix resolves an issue where Hue could not establish a new database connection following a backend database restart, ensuring that all metrics are computed consistently after such events.
CDPD-72775: Copies of shared documents are not visible to the user: 7.3.1.100; Fixed an issue where copies of shared documents were not visible to the users.
CDPD-62397: Improved default editor selection in Hue configuration: 7.3.1.100; Previously, when you tried to log in and access Hue, the first available editor was used by default if multiple editors were configured. This issue is now resolved, allowing you to specify a default editor in the Hue configuration file for all users.
CDPD-57994: Hue import not creating External tables: 7.3.1.100; Previously, there was a restriction to create only managed tables with Parquet and Optimized Row Columnar (ORC) formats. This issue is now resolved, and external tables can now be created.
CDPD-71063: Hue - Upgrade eventlet to 0.35.2 and dnspython to 2.6.1 due to CVE-2023-29483: 7.3.1.100; Addressed the security fix for CVE-2023-29483 in Hue by ensuring the DNS resolver waits for a valid packet within the full expected time window, thereby providing protection against this type of attack.

Cloudera Runtime 7.3.1

CDPD-65034: Receiving Error " TypeError: 'NoneType' object is not callable" in TCLIService.py when custom headers are being set: 7.3.1; When XSRF (Cross-Site Request Forgery) or CSRF (Cross-Site Request Forgery) is enabled in Hive or Impala, you might encounter the error "Error " TypeError: 'NoneType' object is not callable” in TCLIService.py. You can resolve this issue by upgrading to 7.1.9 SP1 CHF 3 or 7.3.1 versions.