Release 3.3.3
Release 3.3.3 of Cloudera Flow Management Operator for Kubernetes introduces automatic, zero downtime certificate reload, and delivers various fixes.
New features
- Automatic, zero downtime certificate reload
- Cloudera Flow Management Operator for Kubernetes now configures NiFi to auto reload its default
keystore and truststore. A new subshell process in the
nificontainer watches the node certificates created by Cloudera Flow Management Operator for Kubernetes and recompiles the keystore and truststore for NiFi to consume, without a restart of the NiFi runtime.
Fixed issues
- CFMOP-31: Block changes to NiFi instance target for Users
-
A new validation guardrail was added to prevent the unsupported action of changing the instance target of a
Usercustom resource. - CFMOP-268: Proxy certificate missing common name
-
The proxy certificate created by Cloudera Flow Management Operator for Kubernetes now contains its common name, preventing potential issues with cert-manager DNS name length validation.
- CFMOP-269: Pod Security Context customization missing in v1 spec
-
The v1 NiFi CRD specification now contains the Pod Security Context configuration fields.
