This is an automated email from the ASF dual-hosted git repository.
dongjoon pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/spark-kubernetes-operator.git
The following commit(s) were added to refs/heads/main by this push:
new 55a1905 [SPARK-53909] Fix RBAC to allow `Spark` driver to create
`StatefulSet`
55a1905 is described below
commit 55a1905034d20a975979f05c3c75c1e35883080a
Author: Dongjoon Hyun <[email protected]>
AuthorDate: Tue Oct 14 17:23:27 2025 -0700
[SPARK-53909] Fix RBAC to allow `Spark` driver to create `StatefulSet`
### What changes were proposed in this pull request?
This PR aims to fix RBAC to allow `Spark` driver to create `StatefulSet`.
### Why are the changes needed?
We need to fix this to allow Apache Spark's `StatefulSetPodsAllocator`
which was introduced at Apache Spark 3.3.0.
- https://github.com/apache/spark/pull/33508
### Does this PR introduce _any_ user-facing change?
No, this is an additional permission.
### How was this patch tested?
Manual review.
### Was this patch authored or co-authored using generative AI tooling?
No.
Closes #389 from dongjoon-hyun/SPARK-53909.
Authored-by: Dongjoon Hyun <[email protected]>
Signed-off-by: Dongjoon Hyun <[email protected]>
---
.../helm/spark-kubernetes-operator/templates/workload-rbac.yaml | 6 ++++++
1 file changed, 6 insertions(+)
diff --git
a/build-tools/helm/spark-kubernetes-operator/templates/workload-rbac.yaml
b/build-tools/helm/spark-kubernetes-operator/templates/workload-rbac.yaml
index 865ead2..479d04b 100644
--- a/build-tools/helm/spark-kubernetes-operator/templates/workload-rbac.yaml
+++ b/build-tools/helm/spark-kubernetes-operator/templates/workload-rbac.yaml
@@ -27,6 +27,12 @@ rules:
- persistentvolumeclaims
verbs:
- '*'
+ - apiGroups:
+ - "apps"
+ resources:
+ - statefulsets
+ verbs:
+ - '*'
{{- end }}
{{/*
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
