Major Description
It is recommended for applications to use the AmIpFilter to properly secure any WebUI that is specific to that application. The packaging of the AmIpFilter is in org.apache.hadoop.yarn.server.webproxy.amfilter, which requires a application to pull in yarn-server as a dependency which isn't very user friendly for applications wanting to pick up the bare minimum.
We should improve the packaging of that so it can be pulled in independently. We do need to be careful to keep it backwards compatible atleast in the 2.x release line also.