Hello @Amr5
Thank you for reaching out to the Cloudera Community
>> Could you please confirm the exact upgrade path you followed? Was it for CDP or CM?
>> Is your Ranger KMS working fine? We might need to check the Ranger KMS logs as well
>> 403 means request reached KMS but KMS refused it due to authentication or authorization. Can you check Ranger KMS audits as well?
>> Also please verify the kerberos keytabs once as well by manually performing the kinit from latest process directory /var/run/cloudera-scm-agent/process/<Latest-Ranger-KMS> directory
>> Additionaly has anything changes with respect to TLS certificates
Also this issue might need a deep investigation so if you have Cloudera Support. license I would request you to raise a support case with Cloudera
Please help our community grow. If you found any of the suggestions/solutions provided helped you with solving your issue or answering your question, please take a moment to login and click "Accept as Solution" on one or more of them that helped.
Thank you
Kshitij Upadhyay