Release v2.0.2 · kubeflow/spark-operator

Bug Fixes

Fix ingress capability discovery (#2201 by @jacobsalway)
fix: imagePullPolicy was ignored (#2222 by @missedone)
fix: spark-submission failed due to lack of permission by user spark (#2223 by @missedone)
Remove cap_net_bind_service from image (#2216 by @jacobsalway)
fix: webhook panics due to logging (#2232 by @ChenYi015)

Bump github.com/aws/aws-sdk-go-v2 from 1.30.5 to 1.31.0 (#2207 by @dependabot[bot])
Bump golang.org/x/net from 0.28.0 to 0.29.0 (#2205 by @dependabot[bot])
Bump github.com/docker/docker from 27.0.3+incompatible to 27.1.1+incompatible (#2125 by @dependabot[bot])
Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.58.3 to 1.63.3 (#2206 by @dependabot[bot])
Update integration test workflow and add golangci lint check (#2197 by @ChenYi015)
Bump github.com/aws/aws-sdk-go-v2 from 1.31.0 to 1.32.0 (#2229 by @dependabot[bot])
Bump cloud.google.com/go/storage from 1.43.0 to 1.44.0 (#2228 by @dependabot[bot])
Bump manusa/actions-setup-minikube from 2.11.0 to 2.12.0 (#2226 by @dependabot[bot])
Bump golang.org/x/time from 0.6.0 to 0.7.0 (#2227 by @dependabot[bot])
Bump github.com/aws/aws-sdk-go-v2/config from 1.27.33 to 1.27.42 (#2231 by @dependabot[bot])
Bump github.com/prometheus/client_golang from 1.19.1 to 1.20.4 (#2204 by @dependabot[bot])
Add check for generating manifests and code (#2234 by @ChenYi015)

By removing setcap 'cap_net_bind_service=+ep' from the docker build, the container can run with all capabilities dropped on a non-privileged port. If you want to listen on port <1024, you could either run as root or add back the NET_BIND_SERVICE capability or build your own image with this flag on the binary.