podSecurityContext

The pod security context for the Spark-on-K8S deployment. The defaults meet Pod Security
"restricted" for the API image's non-root user; set a key to null to remove it.

Type: object

Path: podSecurityContext

---

runAsNonRoot

Refuse to start the API as root

Default: true

Type: boolean

Path: podSecurityContext.runAsNonRoot

---

runAsUser

The API image's numeric user

Default: 10001

Type: number

Path: podSecurityContext.runAsUser

---

runAsGroup

The API image's numeric group

Default: 10001

Type: number

Path: podSecurityContext.runAsGroup

---

fsGroup

Group given access to mounted volumes, including an existing run-history claim

Default: 10001

Type: number

Path: podSecurityContext.fsGroup

---

fsGroupChangePolicy

Change volume ownership only when the volume root does not already match fsGroup

Default: OnRootMismatch

Type: string

Path: podSecurityContext.fsGroupChangePolicy

---

seccompProfile

The container runtime's default seccomp profile

Type: object

Path: podSecurityContext.seccompProfile

---

type

Default: RuntimeDefault

Type: string

Path: podSecurityContext.seccompProfile.type

---