Spark base image used by Spark Operator has security issue

[JTBS]

Hi, Although we use Spark Applications with latest Spark docker image from Bitnami that has all security fixes, our deployment still needs "Spark Operator" itself - which is installed through helm chart.

Currently there is no easy way to override specific Spark Image inside this Spark Operator Install? Is there a reason why we need to ship Spark Operator Docker Image with Base Spark version?

Either removing Spark Base version OR allowing some way to use Spark version of our choice might help?

Only option I have is otherwise: To rebuild Spark-Operator with whatever base image of Spark we use - to avoid getting security alerts.

Any thoughts?