You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@spark.apache.org by pt...@apache.org on 2025/09/05 09:37:45 UTC

(spark-kubernetes-operator) branch main updated: [SPARK-53495] Remove unused 'persistentVolume' access from operator rbac

This is an automated email from the ASF dual-hosted git repository.

ptoth pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/spark-kubernetes-operator.git


The following commit(s) were added to refs/heads/main by this push:
     new 3a427e9  [SPARK-53495] Remove unused 'persistentVolume' access from operator rbac
3a427e9 is described below

commit 3a427e9862fe285b2eb7503e9e880951a6941b9c
Author: Zhou JIANG <ji...@umich.edu>
AuthorDate: Fri Sep 5 11:37:36 2025 +0200

    [SPARK-53495] Remove unused 'persistentVolume' access from operator rbac
    
    ### What changes were proposed in this pull request?
    
    This PR removes 'persistentVolume' access from operator in Helm chart
    
    ### Why are the changes needed?
    
    Operator and Spark workload manages persistentVolumeClaims but not persistenVolumes - this removes the unnecessary access according to the principle of least priviledge
    
    ### Does this PR introduce _any_ user-facing change?
    
    No
    
    ### How was this patch tested?
    
    Helm lint and CIs
    
    ### Was this patch authored or co-authored using generative AI tooling?
    
    No
    
    Closes #309 from jiangzho/rbac.
    
    Authored-by: Zhou JIANG <ji...@umich.edu>
    Signed-off-by: Peter Toth <pe...@gmail.com>
---
 build-tools/helm/spark-kubernetes-operator/templates/operator-rbac.yaml | 1 -
 1 file changed, 1 deletion(-)

diff --git a/build-tools/helm/spark-kubernetes-operator/templates/operator-rbac.yaml b/build-tools/helm/spark-kubernetes-operator/templates/operator-rbac.yaml
index 7890357..1768159 100644
--- a/build-tools/helm/spark-kubernetes-operator/templates/operator-rbac.yaml
+++ b/build-tools/helm/spark-kubernetes-operator/templates/operator-rbac.yaml
@@ -25,7 +25,6 @@ rules:
       - services
       - configmaps
       - persistentvolumeclaims
-      - persistentvolumes
       - events
     verbs:
       - '*'


---------------------------------------------------------------------
To unsubscribe, e-mail: commits-unsubscribe@spark.apache.org
For additional commands, e-mail: commits-help@spark.apache.org