question Re: Storm Multi Tenancy - Best practices in Archives of Support Questions (Read Only)

Storm Multi Tenancy - Best practices

orenault — Tue, 20 Oct 2015 18:10:20 GMT

I've got a customer who is going to have multiple storm topology running ( different business area ) on top of a single cluster. What's the best way to guarantee multi-tenancy? ( they are not using Slider )

Thanks,

Olivier

Re: Storm Multi Tenancy - Best practices

nsabharwal — Tue, 20 Oct 2015 18:23:37 GMT

@olivier

This may help to go into the right direction.

Also, found this on slideshare

Hope this helps.

Re: Storm Multi Tenancy - Best practices

schintalapani — Mon, 26 Oct 2015 22:59:58 GMT

Storm multi tenancy can be enabled when using security only. In non-secure mode all worker jvms will be running as user "storm" as a single user. Where as in storm secure mode (using kerberos) you can set supervisor.worker.run.as.user to true. This makes worker jvm to run as user who submitted the topology. This will give worker isolation between topologies.

More details

https://github.com/apache/storm/blob/master/SECURITY.md#run-worker-processes-as-user-who-submitted-the-topology