KUDU trusted subnets does not work

[#1]

After upgrade Cloudera Manager from 5.14.0 to 5.15.0 my trusted_subnets in KUDU configuration does not work. Also --trusted_subnets=0.0.0.0/0 does not work. I get an error in the impala-shell :

ERROR: TransmitData() to x.x.x.x:27000 failed: Not authorized: Client connection negotiation failed: client connection to x.x.x.x:27000: FATAL_UNAUTHORIZED: Not authorized: unencrypted connections from publicly routable IPs are prohibited. See --trusted_subnets flag for more information.: x.x.x.x:52167

My config is:

--trusted_subnets=0.0.0.0/0
--rpc-authentication=disabled
--rpc-encryption=disabled

[#2 · Accepted solution]

Hi @buddelflinktier,

Impala has started using KRPC for the TransmitData() RPC as well from 5.15. So you would need to configure the 'trusted_subnets' flag the same way in your Impala configuration as well (it doesn't pick it up from the Kudu configuration).

- Sailesh

[#3]

Thanks, it works fine!