Fixed Issues in Iceberg REST Catalog

Cloudera Runtime 7.3.1.600 SP3 CHF1

CDPD-82812: The High Availability feature is not working for REST Catalog

After the update, the Knox topology file cdp-share-access.xml created during Cloudera Data Sharing setup can handle multiple Hive Metastore nodes. In case of a node failure, the healthy nodes cannot take over the workload.

CDPD-84118: Investigate HMS service health during longevity runs

The update introduces the use of a UserGroupInformation (UGI) cache to optimize the handling of proxy users in the Hive Metastore. The update improves performance and resource management in the Hive Metastore by reducing redundant UGI creation and ensuring proper cleanup of resources to avoid API response timeouts from memory leaks.

CDPD-85416: [Port] CDPD-85416 to 7.3.1.x

HiveAuthorizer needs the authorization context enriched to have the client_type for the auditing purposes. Currently when calls are made into Ranger HiveAuthorizer from REST Catalog, Ranger is not able to differentiate the plugins between HMS / REST catalog and hence the audit is not correctly done for the calls made from REST Catalog service. With this change, requests from the Rest catalog will appear in the Ranger audit list with the client type set to restCatalog. Without it, all such requests would show up as HiveMetaStore.

CDPD-92586: Memory leak in HMS REST Catalog

Optimizing the REST Catalog instances in Hive Metastore prevents a potential memory leak. Instead of creating new instances, existing REST catalog instances are reused. This solves CDPD-91447.

Cloudera Runtime 7.3.1.500 SP3

CDPD-85253: Rest Catalog service should only use HMS RangerHiveAuthorizer for its command authorization

The update changes the appType for the REST_CATALOG case to use HIVE_METASTORE_APP_ID instead of REST_CATALOG_APP_ID. This aligns the authorization logic for Rest Catalog with Hive Metastore. In Ranger, now you are able to filter for audit events with application ID restCatalog.

Cloudera Runtime 7.3.1.400 SP2

There are no fixed issues in this release.