Spark
Spark clusters and jobs in authorized profile namespaces.
Spark permissions are baseline tenant-member capabilities. Namespace authorization and, for creator-restricted operations, workload ownership are enforced in addition to the tenant gate. Membership does not grant access to every Kubernetes namespace or another user's workloads.
Permissions
This family contains 9 permissions. “Baseline member” means every current tenant member already has the operation permission, including members with any system role. It does not bypass the resource checks described above. “Custom role” means the identifier can be selected when defining a custom role.
spark.cluster.create
Create a Spark cluster in an authorized profile namespace.
Create a Spark cluster in an authorized profile namespace.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |
| Also implies | spark.cluster.list, spark.cluster.read |
spark.cluster.delete
Delete a Spark cluster, subject to namespace and creator checks.
Delete a Spark cluster, subject to namespace and creator checks.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |
| Also implies | spark.cluster.list, spark.cluster.read |
spark.cluster.list
List Spark clusters in a namespace the caller is permitted to use.
List Spark clusters in a namespace the caller is permitted to use.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |
| Also implies | spark.cluster.read |
spark.cluster.read
Inspect a Spark cluster in an accessible namespace.
Inspect a Spark cluster in an accessible namespace.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |
spark.cluster.scale
Change a Spark cluster's worker count, subject to namespace and creator checks.
Change a Spark cluster's worker count, subject to namespace and creator checks.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |
| Also implies | spark.cluster.list, spark.cluster.read |
spark.job.create
Submit a Spark job in an authorized profile namespace.
Submit a Spark job in an authorized profile namespace.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |
| Also implies | spark.job.list, spark.job.read |
spark.job.delete
Delete a Spark job, subject to namespace and creator checks.
Delete a Spark job, subject to namespace and creator checks.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |
| Also implies | spark.job.list, spark.job.read |
spark.job.list
List Spark jobs in an accessible profile namespace.
List Spark jobs in an accessible profile namespace.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |
| Also implies | spark.job.read |
spark.job.read
Inspect a Spark job and its available execution details in an accessible namespace.
Inspect a Spark job and its available execution details in an accessible namespace.
| Property | Value |
|---|---|
| Scope | Selected tenant |
| Granted by | Baseline member |
| Custom role | Yes |