From 8ecc275d040bc2cde48a02c05b80b0fc68ed1e30 Mon Sep 17 00:00:00 2001
From: Dongjoon Hyun <dongjoon@apache.org>
Date: Tue, 14 Oct 2025 16:37:04 -0700
Subject: [PATCH] [SPARK-53909] Fix RBAC to allow `Spark` driver to create
 `StatefulSet`

---
 .../spark-kubernetes-operator/templates/workload-rbac.yaml  | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/build-tools/helm/spark-kubernetes-operator/templates/workload-rbac.yaml b/build-tools/helm/spark-kubernetes-operator/templates/workload-rbac.yaml
index 865ead21..479d04b1 100644
--- a/build-tools/helm/spark-kubernetes-operator/templates/workload-rbac.yaml
+++ b/build-tools/helm/spark-kubernetes-operator/templates/workload-rbac.yaml
@@ -27,6 +27,12 @@ rules:
       - persistentvolumeclaims
     verbs:
       - '*'
+  - apiGroups:
+      - "apps"
+    resources:
+      - statefulsets
+    verbs:
+      - '*'
 {{- end }}
 
 {{/*