2026.1.0 extends the external system permissions of 2026.0.0 to HDFS, ZooKeeper and MySQL with agents that enforce them, and brings the console and the documentation to eleven languages. The complete list of changes is in the GitHub comparison.
Apache Hadoop HDFS
- Versioned NameNode agents for Hadoop 2.7, 2.10, 3.2, 3.3, 3.4 and 3.5, on a shared native module; see the HDFS NameNode agent.
- Kerberos on every Hadoop line, clusters spanning several realms, and sign-ins kept between lookups;
swebhdfstrusted per service. - Verified on Kerberos clusters and under automatic HA failover, from Hadoop 2.10 to 3.5.
- The agent reports its decisions through Hadoop's metrics and pins the policy snapshot it enforces.
Apache ZooKeeper
- A ZooKeeper service plugin, with TLS sessions and paged znode lookups.
- A server-side agent that decides the marker ACL with the service's policies; see the ZooKeeper agent.
MySQL
- A MySQL service plugin: database, table and column lookup, and access, masking and row filtering policies; see MySQL.
- A MySQL proxy agent that checks statements down to columns, masks values and filters rows; see the MySQL proxy agent.
Plugins and policies
- Agents evaluate masking and row filtering policies.
- Policy editors browse a service's directories to pick paths.
- A failed lookup names its reason, such as unreachable, refused sign-in or missing permission.
- Disabling a plugin first shows what it affects.
- Product plugins have their own section of the documentation.
Console
- Eleven interface languages: Simplified and Traditional Chinese, English, Japanese, Korean, Russian, German, French, Spanish, Brazilian Portuguese and Italian, chosen from a list and on the setup page.
- Two-step sign-in is set up by scanning a QR code; the sign-in form names the directories that can sign in.
- The account page is split into tabs with their own addresses; audit logs and the API catalog use the pager every list has.
- Row actions are icon buttons with tooltips; dialogs animate both ways and ignore backdrop clicks; dates use a calendar picker; the resource tree can be searched.
- Form validation marks every failed field in a tip next to it.
Documentation
- The documentation site is published in the same eleven languages, with search for Hangul and Cyrillic words.
Fixes
- MySQL: the agent's SLF4J binding stays out of the server's logger; identity maps are declared as maps.
- ZooKeeper: a Netty update that clears its advisories, and hardened TLS sessions.
- Service lookups that fail are reported as client errors; built-in plugins report the product version.
- Many console fixes to dialogs, validation tips, scrolling and data service forms.