remote

Remote job submission. Enabling it also requires the operator bearer token on every API
route except /health and /ready. The token is one shared operator credential, not tenant
isolation; submissions also need write RBAC (readOnly: false or external grants).

Type: object

Path: remote

---

enabled

Set SPARK_ON_K8S_SUBMISSION_* and mount the token and policy files read-only

Default: false

Type: boolean

Path: remote.enabled

---

existingSecret

Existing Secret in the release namespace with both keys; the chart never creates it

Default: ""

Type: string

Path: remote.existingSecret

---

tokenKey

Secret key holding the bearer token (32-4096 printable ASCII characters, no spaces)

Default: token

Type: string

Path: remote.tokenKey

---

policyKey

Secret key holding the submission policy JSON document

Default: policy.json

Type: string

Path: remote.policyKey

---

mountPath

Directory where the token and policy files are mounted

Default: /etc/spark-on-k8s/remote

Type: string

Path: remote.mountPath

---