[incubator/sparkoperator] Adding securityContext parameter for sparkoperator (#17792)

* Adding securityContext parameter for sparkoperator

Signed-off-by: Keith Whitley <keith.whitley@lexisnexis.com>

* Adding securityContext parameter for sparkoperator

Signed-off-by: Keith Whitley <keith.whitley@lexisnexis.com>

incubator/sparkoperator/Chart.yaml

@@ -1,7 +1,7 @@
 apiVersion: v1
 name: sparkoperator
 description: A Helm chart for Spark on Kubernetes operator
-version: 0.4.1
+version: 0.4.2
 appVersion: v1beta2-1.0.1-2.4.4
 keywords:
   - spark

incubator/sparkoperator/README.md

@@ -44,5 +44,6 @@ The following table lists the configurable parameters of the Spark operator char
 | `enableBatchScheduler`    | Whether to enable batch scheduler for pod scheduling         | false                                  |
 | `enableResourceQuotaEnforcement`    | Whether to enable the ResourceQuota enforcement for SparkApplication resources. Requires the webhook to be enabled by setting enableWebhook to true.         | false                                  |
 | `enableLeaderElection`    | Whether to enable leader election when the operator Deployment has more than one replica, i.e., when `replicas` is greater than 1.         | false                                  |
+| `securityContext`         | Defines security context for operator container               | `{}`
 
 Specify each parameter using the `--set key=value[,key=value]` argument to `helm install`.

incubator/sparkoperator/templates/spark-operator-deployment.yaml

@@ -52,6 +52,12 @@ spec:
       - name: sparkoperator
         image: {{ .Values.operatorImageName }}:{{ .Values.operatorVersion }}
         imagePullPolicy: {{ .Values.imagePullPolicy }}
+        {{- if .Values.securityContext }}
+        securityContext: 
+          {{- range $securityPolicy, $value := .Values.securityContext }}
+            {{ $securityPolicy }}: {{ $value }}
+          {{- end }}
+        {{- end }}
         {{- if .Values.enableWebhook }}
         volumeMounts:
           - name: webhook-certs

incubator/sparkoperator/values.yaml

@@ -21,6 +21,8 @@ resyncInterval: 30
 ingressUrlFormat: ""
 logLevel: 2
 
+securityContext: {}
+
 enableWebhook: false
 webhookPort: 8080