Fixed issues for Ranger are addressed in Cloudera Runtime 7.3.3.
Cloudera Runtime 7.3.3
- CDPD-122535: Kafka broker OutOfMemoryError during Streams Replication
Manager startup
- 7.3.3
- Previously, when a user or service principal, such as the Streams
Replication Manager (SRM) user, had a very large number of Ranger roles
assigned, the Kafka broker could run into an
OutOfMemoryError during authorization when SRM started.
This happened because the Ranger Kafka plugin copied the user's full role
set into every access request in a batch authorization call, rather than
sharing the resolved roles across the batch.This issue is now resolved.
All access requests in a single Kafka authorization call now share one
resolved role set, which greatly reduces the broker's heap memory
use.
