You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@spark.apache.org by "\"Waterbear (개발한입)\"" <de...@gmail.com> on 2025/12/02 05:21:28 UTC
[Spark Kubernetes Operator] Is Namespace-scoped RBAC Support in Apache Spark Kubernetes Operator?
Hello, First of all, it's great news that Apache Spark now has an official Kubernetes Operator as a subproject.
I have a question regarding RBAC scope. In my environment, I need to run the Spark Operator with namespace-scoped permissions only (using Role/RoleBinding instead of ClusterRole/ClusterRoleBinding).
I previously evaluated the Kubeflow Spark Operator, but it requires ClusterRole/ClusterRoleBinding, which doesn't meet my requirements.
- Reference: https://github.com/kubeflow/spark-operator/issues/2240
On the other hand, Apache Flink Kubernetes Operator supports namespace-scoped RBAC by setting the `watchNamespaces` parameter, which creates only Role/RoleBinding for the specified namespaces.
- Reference: https://nightlies.apache.org/flink/flink-kubernetes-operator-docs-main/docs/operations/rbac/
My question is: Does the Apache Spark Kubernetes Operator support (or plan to support) namespace-scoped RBAC similar to the Flink Operator?
Looking at the options in below document, I thought it would be possible for some reason, so I'm inquiring.
- Reference : https://github.com/apache/spark-kubernetes-operator/blob/main/docs/operations.md
Thank you for your time.
Best regards,
*Suung Shin*