[STORM-216] Secure Multi-tenant Storm

• Type: Umbrella
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 0.10.0
• Component/s: storm-core
• Assignee: Unassigned
• Reporter: Robert Joseph Evans
• Created: 07/Feb/14 15:58
• Updated: 29/Sep/15 02:46
• Resolved: 13/Nov/14 19:41

Description

Yahoo has working code for a secure multi-tenant storm at https://github.com/yahoo/incubator-storm/tree/security

We should break the code up into individual pieces, review it and pull it in.

This is to track all of the different parts of that work.

Issue Links

• contains: STORM-292 emit blocks the publishing bolt if disrupter queue is full
• contains: STORM-146 Unit test regression when storm is compiled with 3.4.5 zookeeper
• contains: STORM-70 use zookeeper-3.4.5

Sub-Tasks

• Thrift Authorization: Resolved
• HTTP Filters + HTTP Auth: Resolved
• DRPC HTTP Support: Resolved
• Add Simple ACL Authorizer for Nimbus: Resolved
• Nimbus Client Backoff/Retry: Resolved
• Allow out of band credentials updates within topologies: Resolved
• Safe YAML Parsing: Resolved
• Storm should use stricter ACLs within zookeeper: Resolved
• Allow for Kerberos Authentication: Resolved
• Let a storm topology run as the user that launched it: Resolved
• allow worker.gc.childopts to be configured separately: Resolved
• Multi-tenant scheduler + scheduler feedback in UI: Resolved
• Lock Down File Downloads: Resolved
• Early warning on worker crash + logging of early errors: Resolved
• ship JNI dependencies with the storm jar: Resolved
• Avoid worker killed on startup because of heavy ZK load: Resolved
• Thrift transport purpose conf: Resolved
• Registering a null metric should blow up early: Resolved