Known Issues

Summarizes known issues for this release.

Special characters in Keystore/Truststore passwords
If there are special characters in the passwords of the truststores/keystores, the normal operation of NiFi and its integration with Cloudera Manager (command and control, monitoring, etc) is affected.
Update the passwords using only [A-Z a-z 0-9] characters or upgrade to CFM 2.1.5. You can also file a support case to get a hotfix from Cloudera Support.
Framework NAR missing with Windows MSI
If you are installing NiFi using the Windows MSI, you may see the following error when starting NiFi:
No framework NAR found
Download the framework NAR file and add it to the lib directory in your NiFi deployment.
NiFi UI Performance considerations

A known issue in Chrome 92.x causes significant slowness in the NiFi UI and may lead to high CPU consumption.

For more information, see the Chrome Known Issues documentation at 1235045.

Use another version of Chrome or a different browser.
NiFi Registry Null Pointer Exeception
The /buckets/{bucketId}/bundles/nifi-nar API in NiFi Registry may throw a NullPointerException.
If you are using this API, contact Cloudera for a Hotfix.
JDK limitation
JDK 8u271, JDK 8u281, and JDK 8u291 may cause socket leak issues in NiFi due to JDK-8245417 and JDK-8256818. Pay attention to the build version of your JDK because some later builds are fixed as described in JDK-8256818.
Consider using a more recent version of the JDK like 8u282, or builds of the JDK where the issue is fixed.
UI render bulletins for referencing components from new data model

As part of another issue, the referencing components data model will include bulletins. Currently, for each referencing component, a REST call is made to get the bulletins (there is some batching here, but not important). Once the data model provides the bulletins those requests will no longer be needed.

For more information, see NIFI-8387.

There is no workaround for this issue.
When fetching Parameter Context, Variable Registry or Controller Services, referencing components should include bulletins

When a request is made to fetch a Parameter Context, a Variable Registry, or a Controller Service, we send back a list of referencing entities. This includes things like validation errors but not bulletins. The UI is then forced to query the bulletin board to get bulletins for each of the affected components.

For more information, see NIFI-8386.

There is no workaround for this issue.
KafkaRecordSink puts multiple records in one message

All the records are sent as a single Kafka message containing an array of records.

For more information, see NIFI-8326.

There is no workaround for this issue.
Site to Site may fail if data exchange takes more than 30 seconds
For more information, see NIFI-7912.
There is no workaround for this issue.

Technical Service Bulletins

TSB 2022-580: NiFi Processors cannot write to content repository
If the content repository disk is filled more than 50% (or any other value that is set in nifi.properties for nifi.content.repository.archive.max.usage.percentage), and if there is no data in the content repository archive, the following warning message can be found in the logs: "Unable to write flowfile content to content repository container default due to archive file size constraints; waiting for archive cleanup". This would block the processors and no more data is processed.

This appears to only happen if there is already data in the content repository on startup that needs to be archived, or if the following message is logged: “Found unknown file XYZ in the File System Repository; archiving file”.

Upstream JIRA
Knowledge article
For the latest update on this issue see the corresponding Knowledge article: TSB 2022-580: NiFi Processors cannot write to content repository
TSB 2022-589: CVE-2022-33140 Apache NiFi ShellUserGroupProvider Vulnerability
The optional ShellUserGroupProvider in Apache NiFi 1.10.0 to 1.16.2 and Apache NiFi Registry 0.6.0 to 1.16.2 does not neutralize arguments for group resolution commands, allowing injection of operating system commands on Linux and macOS platforms. The ShellUserGroupProvider is not included in the default configuration. Command injection requires ShellUserGroupProvider to be one of the enabled User Group Providers (UGP) in the Authorizers configuration. Command injection also requires an authenticated user with elevated privileges. Apache NiFi requires an authenticated user with authorization to modify access policies in order to execute the command. Apache NiFi Registry requires an authenticated user with authorization to read user groups in order to execute the command. The resolution removes command formatting based on user-provided arguments.
Knowledge article
For the latest update on this issue see the corresponding Knowledge article: TSB 2022-589: CVE-2022-33140 Apache NiFi ShellUserGroupProvider Vulnerability