(spark-kubernetes-operator) branch main updated: [SPARK-59537] Honor `operatorRbac.configManagement.create` in Helm chart

[do...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

dongjoon-hyun pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/spark-kubernetes-operator.git


The following commit(s) were added to refs/heads/main by this push:
     new 76761c2d [SPARK-59537] Honor `operatorRbac.configManagement.create` in Helm chart
76761c2d is described below

commit 76761c2d9056d5ee2707df40c36d93deb020c361
Author: Dongjoon Hyun <do...@apache.org>
AuthorDate: Thu Sep 17 02:56:48 2026 -0700

    [SPARK-59537] Honor `operatorRbac.configManagement.create` in Helm chart
    
    ### What changes were proposed in this pull request?
    
    This PR aims to honor `operatorRbac.configManagement.create` in the Helm chart.
    
    ### Why are the changes needed?
    
    Previously, this value was ignored, so setting it to `false` did not prevent the config-monitor `Role` and `RoleBinding` from being created.
    
    ### Does this PR introduce _any_ user-facing change?
    
    Yes, `operatorRbac.configManagement.create=false` now takes effect. The default is `true`, so the default behavior is unchanged.
    
    ### How was this patch tested?
    
    Pass the CIs and manual `helm template` checks.
    
    ### Was this patch authored or co-authored using generative AI tooling?
    
    Generated-by: Claude Opus 5
    
    Closes #838 from dongjoon-hyun/SPARK-59537.
    
    Authored-by: Dongjoon Hyun <do...@apache.org>
    Signed-off-by: Dongjoon Hyun <do...@apache.org>
---
 build-tools/helm/spark-kubernetes-operator/templates/operator-rbac.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build-tools/helm/spark-kubernetes-operator/templates/operator-rbac.yaml b/build-tools/helm/spark-kubernetes-operator/templates/operator-rbac.yaml
index d0b09893..4ffc9d43 100644
--- a/build-tools/helm/spark-kubernetes-operator/templates/operator-rbac.yaml
+++ b/build-tools/helm/spark-kubernetes-operator/templates/operator-rbac.yaml
@@ -235,7 +235,7 @@ metadata:
 {{- template "spark-operator.operatorClusterRbacRules" $ }}
 ---
 {{- end }}
-{{- if and (eq (include "spark-operator.dynamicConfig.enabled" .) "true") (eq .Values.operatorConfiguration.dynamicConfig.source "configMap") }}
+{{- if and .Values.operatorRbac.configManagement.create (eq (include "spark-operator.dynamicConfig.enabled" .) "true") (eq .Values.operatorConfiguration.dynamicConfig.source "configMap") }}
 apiVersion: rbac.authorization.k8s.io/v1
 kind: Role
 metadata:


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@spark.apache.org
For additional commands, e-mail: commits-help@spark.apache.org