From 0b69b04b1c5ae2d2415af6f6dac23b1a4538f195 Mon Sep 17 00:00:00 2001 From: Janis Eccarius Date: Tue, 16 Jun 2026 22:22:50 +0200 Subject: [PATCH] fix(spark): add fsGroup 185 so spark user can write to PVCs local-path PVCs are created root-owned. The apache/spark image runs as spark (UID 185). fsGroup: 185 makes K8s chown the mounted volume to that group on attach, fixing the mkdir IOException on /spark-checkpoint. Co-Authored-By: Claude Sonnet 4.6 --- spark-analytics/base/cronjobs.yaml | 8 ++++++++ spark-analytics/base/streaming.yaml | 2 ++ 2 files changed, 10 insertions(+) diff --git a/spark-analytics/base/cronjobs.yaml b/spark-analytics/base/cronjobs.yaml index ba7ea56..eaf6692 100755 --- a/spark-analytics/base/cronjobs.yaml +++ b/spark-analytics/base/cronjobs.yaml @@ -19,6 +19,8 @@ spec: spec: serviceAccountName: spark-analytics restartPolicy: OnFailure + securityContext: + fsGroup: 185 imagePullSecrets: - name: ghcr-pull-secret containers: @@ -91,6 +93,8 @@ spec: spec: serviceAccountName: spark-analytics restartPolicy: OnFailure + securityContext: + fsGroup: 185 imagePullSecrets: - name: ghcr-pull-secret containers: @@ -162,6 +166,8 @@ spec: spec: serviceAccountName: spark-analytics restartPolicy: OnFailure + securityContext: + fsGroup: 185 imagePullSecrets: - name: ghcr-pull-secret containers: @@ -234,6 +240,8 @@ spec: spec: serviceAccountName: spark-analytics restartPolicy: OnFailure + securityContext: + fsGroup: 185 imagePullSecrets: - name: ghcr-pull-secret containers: diff --git a/spark-analytics/base/streaming.yaml b/spark-analytics/base/streaming.yaml index 4182ffc..f0a20a0 100755 --- a/spark-analytics/base/streaming.yaml +++ b/spark-analytics/base/streaming.yaml @@ -18,6 +18,8 @@ spec: app.kubernetes.io/part-of: nowchess spec: serviceAccountName: spark-analytics + securityContext: + fsGroup: 185 imagePullSecrets: - name: ghcr-pull-secret containers: