RBAC Setup for Spark Driver (#39)

## Description

- Adds a new ClusterRole to the Helm Chart that is used by spark-submit and the driver pod to manage pods & services.
- Adds code that generates a `ServiceAccount` and `RoleBinding` to the role for every `SparkApplication`. The account is deleted once the application is deleted.

fixes #29 



Co-authored-by: Razvan-Daniel Mihai <[email protected]>
Co-authored-by: Andrew Kenworthy <[email protected]>

Author: 3 people

CHANGELOG.md

@@ -6,7 +6,7 @@ All notable changes to this project will be documented in this file.
 
 ### Added
 
+- ServiceAccount, ClusterRole and RoleBinding for Spark driver ([#39])
 - Initial commit
 
-### Changed
-
+[#39]: https://github.com/stackabletech/spark-k8s-operator/pull/39

deploy/helm/spark-operator/templates/roles.yaml renamed to deploy/helm/spark-k8s-operator/templates/roles.yaml

@@ -11,6 +11,12 @@ rules:
     verbs:
       - list
       - watch
+  - apiGroups:
+      - ""
+    resources:
+      - persistentvolumeclaims
+    verbs:
+      - list
   - apiGroups:
       - ""
     resources:
@@ -75,17 +81,17 @@ rules:
     verbs:
       - create
   - apiGroups:
-      - {{ include "operator.name" . }}.stackable.tech
+      - spark.stackable.tech
     resources:
-      - {{ include "operator.name" . }}clusters
+      - sparkapplications
     verbs:
       - get
       - list
       - patch
       - watch
   - apiGroups:
-      - {{ include "operator.name" . }}.stackable.tech
+      - spark.stackable.tech
     resources:
-      - {{ include "operator.name" . }}clusters/status
+      - sparkapplications/status
     verbs:
       - patch

deploy/helm/spark-k8s-operator/templates/spark-clusterrole.yaml

@@ -0,0 +1,15 @@
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: ClusterRole
+metadata:
+  name: spark-driver-edit-role
+rules:
+  - apiGroups: [""]
+    resources: ["pods", "services", "configmaps"]
+    verbs: ["get", "list", "watch", "create", "delete"]
+  - apiGroups:
+      - ""
+    resources:
+      - persistentvolumeclaims
+    verbs:
+      - list