[YARN-882] Specify per user quota for private/application cache and user log files

• Type: New Feature
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Assignee: Omkar Vinit Joshi
• Reporter: Omkar Vinit Joshi
• Created: 24/Jun/13 19:34
• Updated: 01/Jul/22 09:21

Description

At present there is no limit on the number of files / size of the files localized by single user. Similarly there is no limit on the size of the log files created by user via running containers.

We need to restrict the user for this.
For LocalizedResources; this has serious concerns in case of secured environment where malicious user can start one container and localize resources whose total size >= DEFAULT_NM_LOCALIZER_CACHE_TARGET_SIZE_MB. Thereafter it will either fail (if no extra space is present on disk) or deletion service will keep removing localized files for other containers/applications.
The limit for logs/localized resources should be decided by RM and sent to NM via secured containerToken. All these configurations should per container instead of per user or per nm.

Issue Links

• relates to: YARN-2231 Provide feature to limit MRJob's stdout/stderr size