Storm Multi Tenancy - Best practices

[#1]

I've got a customer who is going to have multiple storm topology running ( different business area ) on top of a single cluster. What's the best way to guarantee multi-tenancy? ( they are not using Slider )

Thanks,

Olivier

[#2]

@olivier

This may help to go into the right direction.

Also, found this on slideshare

Hope this helps.

[#3 · Accepted solution]

Storm multi tenancy can be enabled when using security only. In non-secure mode all worker jvms will be running as user "storm" as a single user. Where as in storm secure mode (using kerberos) you can set supervisor.worker.run.as.user to true. This makes worker jvm to run as user who submitted the topology. This will give worker isolation between topologies.

More details

https://github.com/apache/storm/blob/master/SECURITY.md#run-worker-processes-as-user-who-submitted-t...