Known issues in Cloudera Data Warehouse on premises 1.5.5 SP3

Known issues in Cloudera Data Warehouse on premises

DWX-23406: Switching templates in Impala Virtual Warehouse does not update the values

After changing the resource template on an Impala Virtual Warehouse, the new template values are not applied automatically. The CPU, memory, XMS, and XMX pods continue to reflect the values from the previously assigned resource template.

After switching the resource template, you must manually refresh the Impala Virtual Warehouse for the new values to take effect.

DWX-22858: Ranger RAZ CA certificate manual addition on Cloudera Management Console

When using a Cloudera Data Warehouse deployment configured with Ranger RAZ enabled, running INSERT queries through a Cloudera Data Warehouse Virtual Warehouse against external tables stored at S3 fails.

During provisioning, the Virtual Warehouse fetches trusted certificate configurations from the Cloudera Management Console to construct its Java truststore. Because the Ranger RAZ CA certificate is not bundled by default, the Virtual Warehouse pods lack the necessary trust definition to securely communicate with the Ranger RAZ service.

To resolve this issue, you must manually fetch the Ranger RAZ CA certificate and register it inside the Cloudera Management Console as a miscellaneous certificate.

1. Run the following general openssl command from a terminal that has network access to the Ranger RAZ host to extract its certificate:

   echo | openssl s_client -showcerts -connect <RAZ_HOST>:<RAZ_PORT> 2>/dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > <PATH_TO_SAVED_CA_CERT>

   For example:

   echo | openssl s_client -showcerts -connect kg-rzmtr-1.kg-rzmtr.root.hwx.site:6082 2>/dev/null | sed -ne '/-BEGIN CERTIFICATE-/,/-END CERTIFICATE-/p' > /tmp/ranger_raz_ca.crt

2. Add the certificate to the Cloudera Management Console.
   1. In the Cloudera Management Console, go to Administration > CA Certificates.
   2. Click Add/Import.
   3. Select the CA Certificate Type as Miscellaneous.
   4. Click Choose file to upload the fetched certificate.
   5. Click Add certificate.

Known issues in Cloudera Data Explorer (Hue) on Cloudera Data Warehouse on premises

There are no new known issues in this release.

Known issues in Hive on Cloudera Data Warehouse on premises

CDPD-103071: Hive query failures when using GROUP BY and LIMIT without ORDER BY

A query that contains both a GROUP BY clause and a LIMIT clause, but lacks an ORDER BY clause, fails with a NoSuchElementException error.

None

Known issues in Iceberg on Cloudera Data Warehouse on premises

CDPD-101742: Hive Iceberg snapshot expiration fails for ORC LZ4/LZO tables

Hive fails to run queries on Iceberg tables stored in ORC format with LZ4 or LZO compression when LLAP cache is enabled. The failure results in an OWN_TASK_FAILURE status and vertex failures due to an UnsupportedOperationException during ORC decompression. The snapshot expiration functionality itself works as expected and is not impacted.

For Iceberg tables, disable vectorization by setting hive.vectorized.execution.enabled=false.

CDPD-101308: Compactions persist in 'initiated' state for SMART_OPTIMIZE

Compaction scheduling initiated using the SMART_OPTIMIZE type fails to progress beyond the initiated state, and concurrent compactions can also remain in this state.

This issue occurs because the SMART_OPTIMIZE compaction type is not supported by the underlying Hive Metastore (HMS) version.

Avoid using the SMART_OPTIMIZE type for compaction scheduling.

CDPD-101398, CDPD-85719: Query compilation failure in Hive Iceberg with ClassCastException

Queries run on Hive Iceberg tables with MV rewrite feature fail during the compilation phase with a ClassCastException error.

This issue occurs due to a bug in the code and is triggered when the main query contains a condition that always results to false and MV rewrite is applied.

Disable the MV rewrite feature.

Known issues in Impala on Cloudera Data Warehouse on premises

CDPD-103653: LDAP authentication accepting trailing characters in passwords

on premises 1.5.5 SP3

Connecting to an Impala virtual warehouse running in Cloudera Data Warehouse on premises 1.5.5 SP3 by using LDAP username and password authentication accepts specific invalid passwords. If you append additional characters to the end of a valid, non-empty password, the system grants access instead of rejecting the login attempt. An empty password or a shortened password fragment is correctly rejected.

None

Known issues in Trino on Cloudera Data Warehouse on premises

There are no new known issues in this release.