Fixed issues and improvements

Resolved defects in this release of Cloudera Streaming Analytics Operator for Kubernetes include Iceberg catalog S3 access, transient FlinkDeployment errors in Cloudera SQL Stream Builder, and Iceberg catalog configuration.

Fixed issues

CSADS-365: Iceberg catalog s3a ClassNotFoundException: Using an Iceberg catalog with S3 storage no longer fails with a ClassNotFoundException for the s3a filesystem when the alternative Flink image with Hadoop connectors is enabled.
CSADS-47: Cloudera SQL Stream Builder intermittently picked up transient FlinkDeployment errors: Previously, intermittent errors from the FlinkDeployment resource could be surfaced by Cloudera SQL Stream Builder, which could lead to application failure. This issue is fixed.
CSA-5960: Missing Iceberg catalog in default catalogs for Cloudera SQL Stream Builder: Cloudera SQL Stream Builder supports Iceberg as a first-class catalog type under Data Sources and Catalogs, including Hive-backed Iceberg catalog configuration. Iceberg tables are no longer presented under Hive catalogs, preventing access errors through the Hive connector.

Improvements

This release improves hardened PostgreSQL and JDK images, Helm chart PostgreSQL mirroring, optional Flink RBAC when the Flink Operator subchart is disabled, and Fernet key Secret handling for Cloudera Streaming Analytics Operator for Kubernetes.

CSADS-292: Chainguard FIPS-enabled JDK base images: Java component images now use the managed cloudera-openjdk:jdk-17-fips base image instead of a manually downloaded JDK. This improves FIPS readiness and removes the pinned Temurin JDK workaround from container builds.
Hardened default PostgreSQL image (18.4): The bundled PostgreSQL image tag changes from 18.1 to a hardened 18.4 build. New installs use the updated image automatically. Upgrades reuse the existing PersistentVolumeClaim; review image pull settings in air-gapped environments.
CSADS-304: Public PostgreSQL image in release Helm charts: Release Helm charts reference the public hardened PostgreSQL image repository, which simplifies air-gapped mirroring for the bundled database image.
CSADS-169: Optional Flink RBAC when the Flink Operator subchart is disabled: When you install Cloudera SQL Stream Builder without the Flink Kubernetes Operator subchart, you can enable ssb.flinkRbac.create so Flink job pods still receive the required Role and RoleBinding in the Cloudera SQL Stream Builder namespace.
CSADS-247: Fernet key management: The Helm chart creates a Fernet key Secret only when ssb.fernetKey is set to a non-empty value. Clear the placeholder value so Cloudera SQL Stream Builder generates a unique key on first startup. For upgrade planning, see Behavioral changes.