ECS cluster environments

This topic describes the Embedded Container Service (ECS) cluster environment known issues for Cloudera Data Warehouse on premises.

Known issues identified in 1.5.5

DWX-21037: Invalid trust store provided by Cloudera Data Warehouse when certification manager is enabled

When the Certification Manager is enabled, the trust store file provided by the Cloudera Data Warehouse becomes invalid for connecting to Beeline.

You can fetch a trust store file from the Cloudera Data Warehouse UI to configure TLS and connect to Beeline. For instructions on downloading the trust store file, see Downloading root certificates from Cloudera Data Warehouse web UI.

However, when the certification manager is enabled, Cloudera Data Warehouse continues to provide the same trust store file, even though the Hive cluster uses a different certificate. The issue arises because Cloudera Data Warehouse cannot provide a trust store compatible with the configured certificate issuer.

To resolve this issue, use your own certificate authority and set up a trust store on your system. You can do this by fetching the public key of the root CA (in .pem or .crt format), and then creating a new trust store using the following command:

keytool -importcert -trustcacerts -file rootca.pem -alias rootca -keystore truststore.jks -storepass changeit

Known issues identified in 1.5.4

No new known issues identified in 1.5.4.

Known issues identified before 1.4.1

BLESC-6074: Impala executor pods not running and queries from Hue fail: You may see the following error after submitting a query from Hue: Latest admission queue reason: Waiting for executors to start. Only DDL queries and queries scheduled only on the coordinator (either NUM_NODES set to 1 or when small query optimization is triggered) can currently run. You may also notice that the Impala executors are not running.; Make sure that the /etc/resolv.conf file on the ECS hosts contain a maximum of 2 search domains.