Managed Application Services | Backup and Recovery | Dashboard (UI | File System | Frames | Hadoop | High Availability (HA) | Jupyter | MLRun | Logging and Monitoring Services | Nuclio | Security and User Management | Spark| User Management | Web APIs |Upgrade|
Managed Application Services
| ID |
Description |
Workaround |
Opened in |
| IG-14150 |
A user whose username was previously in use in the platform cannot run application services.
|
NA |
v2.5.0 |
| IG-21024 |
GET mlrun/api/runs... fail with "RemoteDisconnected('Remote end closed connection without response') |
NA, dependent on NGINX upgrade. |
v3.5.0 |
Jupyter Notebook
| ID |
Description |
Workaround |
Opened in |
| IG-11174 |
Running Scala code from a Jupyter notebook isn't supported in the current release.
|
Run Scala code by using spark-submit, or use Python. |
v2.0.0 |
| NA |
Jupyter error "Server Connection Error: A connection to the Jupyter server could not be established...." Root cause: The Iguazio session expired. |
Supply the iguazio session credentials. |
NA |
V3IO Frames
| ID |
Description |
Workaround |
Opened in |
| 21993 |
When starting to ingest to a new stream in a “round-robin” mode, the first message starts from zero. |
NA |
v3.5.3 |
Frames NoSQL Backend ("nosql"/"kv")
| ID |
Description |
Workaround |
Opened in |
| IG-16167 |
The write client method's "overwriteTable" save mode isn't supported for partitioned tables. [Tech Preview]
|
NA |
v2.0.0 |
MLRun
| ID |
Description |
Workaround |
Opened in |
| ML-211 |
The default-project directory (default) is shared for read-only and execution.
|
NA |
v1.3.0 |
| IG-16531 |
Beginning with platform version 3.0.0 / MLRun version 0.6.0, project-name restrictions are enforced for MLRun projects both from the dashboard (UI) and the MLRun API. Project names must conform to the RFC 1123 DNS label-name requirements (DNS-1123 label): 1–63 characters, contain only lowercase alphanumeric characters (a–z, 0–9) or hyphens (-), and begin and end with a lowercase alphanumeric character. Older MLRun projects whose names don't conform to these restrictions will be in a degraded mode and won't have Nuclio functionality (no serverless functions or API gateways).
|
Replace the old projects (you cannot simply rename them). For assistance in upgrading old projects, contact Iguazio's support team. |
v3.0.0 |
| IG-23143 |
In rare cases, after deleting a project, you cannot create another project with the same name. |
Use a different name. |
v3.6.1 |
Nuclio Serverless Functions
| ID |
Description |
Workaround |
Opened in |
| IG-13134 |
Function deployment for the Ruby, Node.js, and .NET Core runtimes isn't supported for platform installations without an internet connection (offline installations).
|
NA |
v2.0.0 |
Spark
Spark Operator
| ID |
Description |
Workaround |
Opened in |
| IG-24180 |
spark-operator job fails to start after upgrade from 3.6.2 with >tls: failed to verify certificate: x509. |
Run kubectl -n default-tenant delete secret spark-operator-webhook-certs and restart the spark-operator service (or just the spark-operator-webhook pod). |
v3.7.0 |
Spark UI
| ID |
Description |
Workaround |
Opened in |
| IG-12143 |
The Spark UI might display broken links after killing a running application from the UI.
|
Close the current Spark UI browser tab and reopen the UI in a new tab. |
v2.3.0 |
Spark Streaming
| ID |
Description |
Workaround |
Opened in |
| IG-6471 |
Spark streaming app doesn't consume from 'new' shards when increasing shards amount.
|
Restart the Spark Streaming consumer application. |
v1.5.0 |
Web APIs
Simple-Object Web API
| ID |
Description |
Workaround |
Opened in |
| IG-3453 |
GET Object and HEAD Object don't return correct ETag and Content-Type metadata.
|
NA |
v1.0.0 |
| IG-13449 |
A range request with an out-of-bounds range returns HTTP status code 200 instead of 400.
|
NA |
v2.5.0 |
NoSQL Web API
| ID |
Description |
Workaround |
Opened in |
| IG-17963 |
Range-scan requests following recreation of a data container or a container directory might return a 513 error.
|
Reissue the request. |
v3.0.0 |
Streaming Web API
| ID |
Description |
Workaround |
Opened in |
| IG-4310 |
PutRecords with a stream path that points to an existing non-stream directory returns error ResourceNotFoundException instead of ResourceIsnotStream.
|
NA |
v1.0.0 |
| IG-4310 |
UpdateStream with an invalid request-body JSON format may not return the expected InvalidArgumentException error.
|
NA |
v1.0.0 |
Logging, Monitoring, and Grafana Services
| ID |
Description |
Workaround |
Opened in |
| IG-9029 |
Data-cluster statistics are not available when the platform is in offline mode.
|
NA |
v3.0.0 |
| IG-22898 |
The network graphs that show on the pods dashboard (and perhaps others) show only the received network and do not show the transmitted one. |
NA |
v3.4.0 |
| IG-22952 |
The cluster's application Grafana is accessible to users only if the Tenanat Admin permissions were assigned to the user, and not to a group that the user is a member of. |
Assign the user Tenant Admin. |
v3.6.1 |
Hadoop
| ID |
Description |
Workaround |
Opened in |
| NA |
The following Hadoop (hdfs) commands aren't supported: createSnapshot, deleteSnapshot, getfattr, setfattr, setfacl, and setrep.
|
NA |
v1.0.0 |
Deployment
| ID |
Description |
Workaround |
Opened in |
| IG-23078 |
EKS cannot access node ports using default-tenant.app.xxx URL when the system is deployed with ELB. |
NA |
v3.6.0 |
File System
| ID |
Description |
Workaround |
Opened in |
| IG-3605 |
File-system operations are not supported for stream shards.
|
NA |
v1.5.0 |
Security and User Management
| ID |
Description |
Workaround |
Opened in |
| IG-17295 |
Changing the token-expiration period for the authenticator service (id_tokens_expiration configuration) doesn't affect existing tokens.
|
Contact Iguazio's support team. |
v3.0.0 |
| IG-21856 |
Attempting to synchronize users who are members of a large number of OUs without specifying a group filter may cause the IDP service to crash, causing the synchronization job to hang. |
Use a group filter. |
v3.4.2 |
Backup, Recovery, and High Availability (HA)
| ID |
Description |
Workaround |
Opened in |
| IG-6475 |
The GetItems NoSQL Web API operation might fail during failover.
|
NA |
v1.5.3 |
| IG-22779 |
The TTL of users that logged in without SSO is 24 hours. User that log in with SSO have TTL of 12 hours. |
NA |
v3.6.0 |
| IG-13840 |
In Azure cloud environments, in case of failure in the main master application node of a Kubernetes application cluster, the platform's access to the application nodes is lost and it can no longer manage the cluster's application services. Previously run application services will continue to run but cannot be stopped, and new services cannot be created.
|
NA |
v2.1.0 |
| IG-22881 |
Failback fails if data-node SSH password has special chars that need escaping. |
Change data cluster passwords to be non-escapable (without: ' " ! & ). |
v3.6.0 |
Dashboard (UI)
Note
See the
MLRun and
Nuclio known issues for dashboard issues related specifically to these frameworks.
| ID |
Description |
Workaround |
Opened in |
| IG-22403 |
Possible errors on SSO login: |
|
|
|
Account Already Exists: Your Security Admin may have changed the provider, and a stale instance of your user record still exists. |
Contact your Security Admin to remove your user from Keycloak (only) and log in again. |
v3.5.5 |
|
500 Internal server error: This occurs when the Oauth2 application refused to acknowledge your current cookie session. |
Clear your browser cookies (_oauth2_cookie) and try again. |
v3.5.5 |
Upgrade
| ID |
Description |
Workaround |
Opened in |
| IG-22940 |
The user Authentication method SSO flag does not migrate when upgrading from 3.5.5 to 3.6.1 |
Reconfigure SSO for the user. |
v3.5.5 |
Notes