Release 458-e STS (30 October 2024)

Starburst Enterprise platform (SEP) 458-e is the follow up SEP release to 454-e. It includes all improvements from the following Trino releases:

• Trino 458

• Trino 457

• Trino 455

This release is a short term support (STS) release.

Breaking changes

• Legacy file system support for all catalogs has been disabled by default. You must activate the desired file system support with fs.native-azure.enabled,fs.native-gcs.enabled, fs.native-s3.enabled, or fs.hadoop.enabled in each catalog. Use the migration guides for Azure Storage, Google Cloud Storage, and S3 to assist if you have not switched from legacy support.

• Secrets configuration provider setup has been updated to use secrets.toml files. The configuration-provider.config-files property is no longer supported. You must update your configuration to use secrets.toml files.

• The ranger-system-access-control value for access-control.name has been deprecated and renamed to legacy-ranger-system-access-control.

• The hive-based-ranger-system-access-control access control option has been renamed to hive-based-ranger.

• The CFT property S3PinToCurrentRegion is no longer supported.

• The Glue V2 REST interface is now used by default, which does not support the following configuration properties:

  • hive.metastore-cache.cache-partitions

  • hive.metastore-cache.cache-missing

  • hive.metastore-cache.cache-missing-partitions

  • hive.metastore-cache.cache-missing-stats

  To continue using these properties, the old implementation can be temporarily restored by setting the hive.metastore configuration property to glue-v1.

General

• Added support for Workload management as a public preview.

• Updated schema discovery to allow operations exceeding 1M characters.

• Fixed an issue with filtering records in the Starburst Enterprise web UI audit logs.

• Fixed issue with result caching configuration provider which caused coordinator failures in non-AWS environments.

Security

• Added support for masking DECIMAL and DOUBLE types using the MASK column mask type in Starburst Ranger.

• Added support for granting and revoking access to the user interface entity via the built-in access control REST API.

• Added support for Azure Key Vault and Google Cloud Secret Manager as Secrets configuration providers.

• Added support for the Iceberg connector when using AWS Lake Formation access control.

• Changed AWS Lake Formation security mapping to aggregate allowedIamRoles across all matching entries when a user belongs to multiple groups.

• Fixed column masking issue caused when masking DECIMAL and DOUBLE types using the Mask integers predefined column mask type in built-in access control.

ClickHouse connector

• Improved performance for queries involving conditions with varchar data.

• Improved performance for queries comparing varchar columns.

• Improved performance for queries using varchar columns for IN comparisons.

• Improved performance for queries with complex expressions involving LIKE.

• Improved performance for queries with IS NULL expressions.

Delta Lake connector

• Added support for Schema discovery.

Iceberg connector

• Added support for Schema discovery.

PostgreSQL connector

• Added support for Kerberos constrained delegation.

Snowflake connector

• Added support for dynamic connection passthrough.

SQL Server connector

• Added support for Kerberos constrained delegation.

Teradata connector

• Fixed column mapping issue with Teradata Direct connector to prevent silent correctness errors.