@pulumi/databricks 0.4.0 → 0.4.1-alpha.1654703020

package/servicePrincipalRole.d.ts

@@ -0,0 +1,92 @@
+import * as pulumi from "@pulumi/pulumi";
+/**
+ * This resource allows you to attach a role or databricks.InstanceProfile (AWS) to a databricks_service_principal.
+ *
+ * ## Example Usage
+ *
+ * Granting a service principal access to an instance profile
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as databricks from "@pulumi/databricks";
+ *
+ * const instanceProfile = new databricks.InstanceProfile("instanceProfile", {instanceProfileArn: "my_instance_profile_arn"});
+ * const _this = new databricks.ServicePrincipal("this", {displayName: "My Service Principal"});
+ * const myServicePrincipalInstanceProfile = new databricks.ServicePrincipalRole("myServicePrincipalInstanceProfile", {
+ *     servicePrincipalId: _this.id,
+ *     role: instanceProfile.id,
+ * });
+ * ```
+ * ## Related Resources
+ *
+ * The following resources are often used in the same context:
+ *
+ * * End to end workspace management guide.
+ * * databricks.UserRole to attach role or databricks.InstanceProfile (AWS) to databricks_user.
+ * * databricks.GroupInstanceProfile to attach databricks.InstanceProfile (AWS) to databricks_group.
+ * * databricksGroupMember to attach users and groups as group members.
+ * * databricks.InstanceProfile to manage AWS EC2 instance profiles that users can launch databricks.Cluster and access data, like databricks_mount.
+ *
+ * ## Import
+ *
+ * -> **Note** Importing this resource is not currently supported.
+ */
+export declare class ServicePrincipalRole extends pulumi.CustomResource {
+    /**
+     * Get an existing ServicePrincipalRole resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: ServicePrincipalRoleState, opts?: pulumi.CustomResourceOptions): ServicePrincipalRole;
+    /**
+     * Returns true if the given object is an instance of ServicePrincipalRole.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is ServicePrincipalRole;
+    /**
+     * This is the id of the role or instance profile resource.
+     */
+    readonly role: pulumi.Output<string>;
+    /**
+     * This is the id of the service principal resource.
+     */
+    readonly servicePrincipalId: pulumi.Output<string>;
+    /**
+     * Create a ServicePrincipalRole resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: ServicePrincipalRoleArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering ServicePrincipalRole resources.
+ */
+export interface ServicePrincipalRoleState {
+    /**
+     * This is the id of the role or instance profile resource.
+     */
+    role?: pulumi.Input<string>;
+    /**
+     * This is the id of the service principal resource.
+     */
+    servicePrincipalId?: pulumi.Input<string>;
+}
+/**
+ * The set of arguments for constructing a ServicePrincipalRole resource.
+ */
+export interface ServicePrincipalRoleArgs {
+    /**
+     * This is the id of the role or instance profile resource.
+     */
+    role: pulumi.Input<string>;
+    /**
+     * This is the id of the service principal resource.
+     */
+    servicePrincipalId: pulumi.Input<string>;
+}

package/servicePrincipalRole.js

@@ -0,0 +1,89 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ServicePrincipalRole = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * This resource allows you to attach a role or databricks.InstanceProfile (AWS) to a databricks_service_principal.
+ *
+ * ## Example Usage
+ *
+ * Granting a service principal access to an instance profile
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as databricks from "@pulumi/databricks";
+ *
+ * const instanceProfile = new databricks.InstanceProfile("instanceProfile", {instanceProfileArn: "my_instance_profile_arn"});
+ * const _this = new databricks.ServicePrincipal("this", {displayName: "My Service Principal"});
+ * const myServicePrincipalInstanceProfile = new databricks.ServicePrincipalRole("myServicePrincipalInstanceProfile", {
+ *     servicePrincipalId: _this.id,
+ *     role: instanceProfile.id,
+ * });
+ * ```
+ * ## Related Resources
+ *
+ * The following resources are often used in the same context:
+ *
+ * * End to end workspace management guide.
+ * * databricks.UserRole to attach role or databricks.InstanceProfile (AWS) to databricks_user.
+ * * databricks.GroupInstanceProfile to attach databricks.InstanceProfile (AWS) to databricks_group.
+ * * databricksGroupMember to attach users and groups as group members.
+ * * databricks.InstanceProfile to manage AWS EC2 instance profiles that users can launch databricks.Cluster and access data, like databricks_mount.
+ *
+ * ## Import
+ *
+ * -> **Note** Importing this resource is not currently supported.
+ */
+class ServicePrincipalRole extends pulumi.CustomResource {
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["role"] = state ? state.role : undefined;
+            resourceInputs["servicePrincipalId"] = state ? state.servicePrincipalId : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.role === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'role'");
+            }
+            if ((!args || args.servicePrincipalId === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'servicePrincipalId'");
+            }
+            resourceInputs["role"] = args ? args.role : undefined;
+            resourceInputs["servicePrincipalId"] = args ? args.servicePrincipalId : undefined;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(ServicePrincipalRole.__pulumiType, name, resourceInputs, opts);
+    }
+    /**
+     * Get an existing ServicePrincipalRole resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new ServicePrincipalRole(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of ServicePrincipalRole.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === ServicePrincipalRole.__pulumiType;
+    }
+}
+exports.ServicePrincipalRole = ServicePrincipalRole;
+/** @internal */
+ServicePrincipalRole.__pulumiType = 'databricks:index/servicePrincipalRole:ServicePrincipalRole';
+//# sourceMappingURL=servicePrincipalRole.js.map

package/servicePrincipalRole.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"servicePrincipalRole.js","sourceRoot":"","sources":["../servicePrincipalRole.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AACzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,MAAa,oBAAqB,SAAQ,MAAM,CAAC,cAAc;IA6C3D,YAAY,IAAY,EAAE,WAAkE,EAAE,IAAmC;QAC7H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAoD,CAAC;YACnE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;SACvF;aAAM;YACH,MAAM,IAAI,GAAG,WAAmD,CAAC;YACjE,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,kBAAkB,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC/D,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;aACrE;YACD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,oBAAoB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS,CAAC;SACrF;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,oBAAoB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzE,CAAC;IAhED;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAiC,EAAE,IAAmC;QAC/H,OAAO,IAAI,oBAAoB,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC3E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,oBAAoB,CAAC,YAAY,CAAC;IACrE,CAAC;;AA1BL,oDAkEC;AApDG,gBAAgB;AACO,iCAAY,GAAG,4DAA4D,CAAC"}

package/sqlPermissions.d.ts

@@ -1,33 +1,6 @@
 import * as pulumi from "@pulumi/pulumi";
 import { input as inputs, output as outputs } from "./types";
 /**
- * > **Note** Please switch to databricks.Grants with Unity Catalog to manage data access, which provides better and faster way for managing data security. `databricks.Grants` resource *doesn't require a technical cluster to perform operations*. `databricks.SqlPermissions` will be removed, once Unity Catalog is Generally Available.
- *
- * This resource manages data object access control lists in Databricks workspaces for things like tables, views, databases, and [more](https://docs.databricks.com/security/access-control/table-acls/object-privileges.html). In order to enable Table Access control, you have to login to the workspace as administrator, go to `Admin Console`, pick `Access Control` tab, click on `Enable` button in `Table Access Control` section, and click `Confirm`. The security guarantees of table access control **will only be effective if cluster access control is also turned on**. Please make sure that no users can create clusters in your workspace and all databricks.Cluster have approximately the following configuration:
- *
- * ```typescript
- * import * as pulumi from "@pulumi/pulumi";
- * import * as databricks from "@pulumi/databricks";
- *
- * // ...
- * const clusterWithTableAccessControl = new databricks.Cluster("clusterWithTableAccessControl", {sparkConf: {
- *     "spark.databricks.acl.dfAclsEnabled": "true",
- *     "spark.databricks.repl.allowedLanguages": "python,sql",
- * }});
- * ```
- *
- * It could be combined with creation of High-Concurrency and Single-Node clusters - in this case it should have corresponding `customTags` and `spark.databricks.cluster.profile` in Spark configuration as described in documentation for `databricks.Cluster` resource.
- *
- * The created cluster could be referred to by providing its ID as `clusterId` property.
- *
- * ```typescript
- * import * as pulumi from "@pulumi/pulumi";
- * import * as databricks from "@pulumi/databricks";
- *
- * const fooTable = new databricks.SqlPermissions("fooTable", {clusterId: databricks_cluster.cluster_name.id});
- * //...
- * ```
- *
  * ## Example Usage
  *
  * The following resource definition will enforce access control on a table by executing the following SQL queries on a special auto-terminating cluster it would create for this operation:

package/sqlPermissions.js

@@ -6,33 +6,6 @@ exports.SqlPermissions = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("./utilities");
 /**
- * > **Note** Please switch to databricks.Grants with Unity Catalog to manage data access, which provides better and faster way for managing data security. `databricks.Grants` resource *doesn't require a technical cluster to perform operations*. `databricks.SqlPermissions` will be removed, once Unity Catalog is Generally Available.
- *
- * This resource manages data object access control lists in Databricks workspaces for things like tables, views, databases, and [more](https://docs.databricks.com/security/access-control/table-acls/object-privileges.html). In order to enable Table Access control, you have to login to the workspace as administrator, go to `Admin Console`, pick `Access Control` tab, click on `Enable` button in `Table Access Control` section, and click `Confirm`. The security guarantees of table access control **will only be effective if cluster access control is also turned on**. Please make sure that no users can create clusters in your workspace and all databricks.Cluster have approximately the following configuration:
- *
- * ```typescript
- * import * as pulumi from "@pulumi/pulumi";
- * import * as databricks from "@pulumi/databricks";
- *
- * // ...
- * const clusterWithTableAccessControl = new databricks.Cluster("clusterWithTableAccessControl", {sparkConf: {
- *     "spark.databricks.acl.dfAclsEnabled": "true",
- *     "spark.databricks.repl.allowedLanguages": "python,sql",
- * }});
- * ```
- *
- * It could be combined with creation of High-Concurrency and Single-Node clusters - in this case it should have corresponding `customTags` and `spark.databricks.cluster.profile` in Spark configuration as described in documentation for `databricks.Cluster` resource.
- *
- * The created cluster could be referred to by providing its ID as `clusterId` property.
- *
- * ```typescript
- * import * as pulumi from "@pulumi/pulumi";
- * import * as databricks from "@pulumi/databricks";
- *
- * const fooTable = new databricks.SqlPermissions("fooTable", {clusterId: databricks_cluster.cluster_name.id});
- * //...
- * ```
- *
  * ## Example Usage
  *
  * The following resource definition will enforce access control on a table by executing the following SQL queries on a special auto-terminating cluster it would create for this operation:

package/sqlPermissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"sqlPermissions.js","sourceRoot":"","sources":["../sqlPermissions.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2EG;AACH,MAAa,cAAe,SAAQ,MAAM,CAAC,cAAc;IA+DrD,YAAY,IAAY,EAAE,WAAsD,EAAE,IAAmC;QACjH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA8C,CAAC;YAC7D,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;aAAM;YACH,MAAM,IAAI,GAAG,WAA6C,CAAC;YAC3D,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SACzD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;IAxFD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA2B,EAAE,IAAmC;QACzH,OAAO,IAAI,cAAc,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACrE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,cAAc,CAAC,YAAY,CAAC;IAC/D,CAAC;;AA1BL,wCA0FC;AA5EG,gBAAgB;AACO,2BAAY,GAAG,gDAAgD,CAAC"}
+{"version":3,"file":"sqlPermissions.js","sourceRoot":"","sources":["../sqlPermissions.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAEzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgDG;AACH,MAAa,cAAe,SAAQ,MAAM,CAAC,cAAc;IA+DrD,YAAY,IAAY,EAAE,WAAsD,EAAE,IAAmC;QACjH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA8C,CAAC;YAC7D,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAClF,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;aAAM;YACH,MAAM,IAAI,GAAG,WAA6C,CAAC;YAC3D,cAAc,CAAC,mBAAmB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC,CAAC,SAAS,CAAC;YAChF,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;SACzD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,cAAc,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACnE,CAAC;IAxFD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA2B,EAAE,IAAmC;QACzH,OAAO,IAAI,cAAc,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACrE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,cAAc,CAAC,YAAY,CAAC;IAC/D,CAAC;;AA1BL,wCA0FC;AA5EG,gBAAgB;AACO,2BAAY,GAAG,gDAAgD,CAAC"}

package/storageCredential.d.ts

@@ -1,7 +1,7 @@
 import * as pulumi from "@pulumi/pulumi";
 import { input as inputs, output as outputs } from "./types";
 /**
- * > **Private Preview** This feature is in [Private Preview](https://docs.databricks.com/release-notes/release-types.html). Contact your Databricks representative to request access.
+ * > **Public Preview** This feature is in [Public Preview](https://docs.databricks.com/release-notes/release-types.html). Contact your Databricks representative to request access.
  *
  * To work with external tables, Unity Catalog introduces two new objects to access and work with external cloud storage:
  * - `databricks.StorageCredential` represents authentication methods to access cloud storage (e.g. an IAM role for Amazon S3 or a service principal for Azure Storage). Storage credentials are access-controlled to determine which users can use the credential.
@@ -25,7 +25,7 @@ import { input as inputs, output as outputs } from "./types";
  *     storageCredential: external.id,
  *     grants: [{
  *         principal: "Data Engineers",
- *         privileges: ["CREATE TABLE"],
+ *         privileges: ["CREATE_TABLE"],
  *     }],
  * });
  * ```
@@ -48,7 +48,7 @@ import { input as inputs, output as outputs } from "./types";
  *     storageCredential: external.id,
  *     grants: [{
  *         principal: "Data Engineers",
- *         privileges: ["CREATE TABLE"],
+ *         privileges: ["CREATE_TABLE"],
  *     }],
  * });
  * ```

package/storageCredential.js

@@ -6,7 +6,7 @@ exports.StorageCredential = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("./utilities");
 /**
- * > **Private Preview** This feature is in [Private Preview](https://docs.databricks.com/release-notes/release-types.html). Contact your Databricks representative to request access.
+ * > **Public Preview** This feature is in [Public Preview](https://docs.databricks.com/release-notes/release-types.html). Contact your Databricks representative to request access.
  *
  * To work with external tables, Unity Catalog introduces two new objects to access and work with external cloud storage:
  * - `databricks.StorageCredential` represents authentication methods to access cloud storage (e.g. an IAM role for Amazon S3 or a service principal for Azure Storage). Storage credentials are access-controlled to determine which users can use the credential.
@@ -30,7 +30,7 @@ const utilities = require("./utilities");
  *     storageCredential: external.id,
  *     grants: [{
  *         principal: "Data Engineers",
- *         privileges: ["CREATE TABLE"],
+ *         privileges: ["CREATE_TABLE"],
  *     }],
  * });
  * ```
@@ -53,7 +53,7 @@ const utilities = require("./utilities");
  *     storageCredential: external.id,
  *     grants: [{
  *         principal: "Data Engineers",
- *         privileges: ["CREATE TABLE"],
+ *         privileges: ["CREATE_TABLE"],
  *     }],
  * });
  * ```

package/table.d.ts

@@ -1,7 +1,7 @@
 import * as pulumi from "@pulumi/pulumi";
 import { input as inputs, output as outputs } from "./types";
 /**
- * > **Private Preview** This feature is in [Private Preview](https://docs.databricks.com/release-notes/release-types.html). Contact your Databricks representative to request access.
+ * > **Public Preview** This feature is in [Public Preview](https://docs.databricks.com/release-notes/release-types.html). Contact your Databricks representative to request access.
  *
  * Within a metastore, Unity Catalog provides a 3-level namespace for organizing data: Catalogs, databases (also called schemas), and tables / views.
  *

package/table.js

@@ -6,7 +6,7 @@ exports.Table = void 0;
 const pulumi = require("@pulumi/pulumi");
 const utilities = require("./utilities");
 /**
- * > **Private Preview** This feature is in [Private Preview](https://docs.databricks.com/release-notes/release-types.html). Contact your Databricks representative to request access.
+ * > **Public Preview** This feature is in [Public Preview](https://docs.databricks.com/release-notes/release-types.html). Contact your Databricks representative to request access.
  *
  * Within a metastore, Unity Catalog provides a 3-level namespace for organizing data: Catalogs, databases (also called schemas), and tables / views.
  *

package/types/input.d.ts

@@ -53,6 +53,7 @@ export interface ClusterGcpAttributes {
 export interface ClusterInitScript {
     dbfs?: pulumi.Input<inputs.ClusterInitScriptDbfs>;
     file?: pulumi.Input<inputs.ClusterInitScriptFile>;
+    gcs?: pulumi.Input<inputs.ClusterInitScriptGcs>;
     s3?: pulumi.Input<inputs.ClusterInitScriptS3>;
 }
 export interface ClusterInitScriptDbfs {
@@ -61,6 +62,9 @@ export interface ClusterInitScriptDbfs {
 export interface ClusterInitScriptFile {
     destination?: pulumi.Input<string>;
 }
+export interface ClusterInitScriptGcs {
+    destination?: pulumi.Input<string>;
+}
 export interface ClusterInitScriptS3 {
     cannedAcl?: pulumi.Input<string>;
     destination: pulumi.Input<string>;
@@ -149,6 +153,7 @@ export interface InstancePoolPreloadedDockerImageBasicAuth {
     username: pulumi.Input<string>;
 }
 export interface JobEmailNotifications {
+    alertOnLastAttempt?: pulumi.Input<boolean>;
     /**
      * (Bool) don't send alert for skipped runs
      */
@@ -167,9 +172,21 @@ export interface JobEmailNotifications {
     onSuccesses?: pulumi.Input<pulumi.Input<string>[]>;
 }
 export interface JobGitSource {
+    /**
+     * name of the Git branch to use. Conflicts with `tag` and `commit`.
+     */
     branch?: pulumi.Input<string>;
+    /**
+     * hash of Git commit to use. Conflicts with `branch` and `tag`.
+     */
     commit?: pulumi.Input<string>;
+    /**
+     * case insensitive name of the Git provider.  Following values are supported right now (could be a subject for change, consult [Repos API documentation](https://docs.databricks.com/dev-tools/api/latest/repos.html)): `gitHub`, `gitHubEnterprise`, `bitbucketCloud`, `bitbucketServer`, `azureDevOpsServices`, `gitLab`, `gitLabEnterpriseEdition`.
+     */
     provider?: pulumi.Input<string>;
+    /**
+     * name of the Git branch to use. Conflicts with `branch` and `commit`.
+     */
     tag?: pulumi.Input<string>;
     /**
      * URL of the job on the given workspace
@@ -208,7 +225,7 @@ export interface JobJobClusterNewCluster {
     initScripts?: pulumi.Input<pulumi.Input<inputs.JobJobClusterNewClusterInitScript>[]>;
     instancePoolId?: pulumi.Input<string>;
     nodeTypeId?: pulumi.Input<string>;
-    numWorkers: pulumi.Input<number>;
+    numWorkers?: pulumi.Input<number>;
     policyId?: pulumi.Input<string>;
     singleUserName?: pulumi.Input<string>;
     sparkConf?: pulumi.Input<{
@@ -276,6 +293,7 @@ export interface JobJobClusterNewClusterGcpAttributes {
 export interface JobJobClusterNewClusterInitScript {
     dbfs?: pulumi.Input<inputs.JobJobClusterNewClusterInitScriptDbfs>;
     file?: pulumi.Input<inputs.JobJobClusterNewClusterInitScriptFile>;
+    gcs?: pulumi.Input<inputs.JobJobClusterNewClusterInitScriptGcs>;
     s3?: pulumi.Input<inputs.JobJobClusterNewClusterInitScriptS3>;
 }
 export interface JobJobClusterNewClusterInitScriptDbfs {
@@ -284,6 +302,9 @@ export interface JobJobClusterNewClusterInitScriptDbfs {
 export interface JobJobClusterNewClusterInitScriptFile {
     destination?: pulumi.Input<string>;
 }
+export interface JobJobClusterNewClusterInitScriptGcs {
+    destination?: pulumi.Input<string>;
+}
 export interface JobJobClusterNewClusterInitScriptS3 {
     cannedAcl?: pulumi.Input<string>;
     destination: pulumi.Input<string>;
@@ -404,6 +425,7 @@ export interface JobNewClusterGcpAttributes {
 export interface JobNewClusterInitScript {
     dbfs?: pulumi.Input<inputs.JobNewClusterInitScriptDbfs>;
     file?: pulumi.Input<inputs.JobNewClusterInitScriptFile>;
+    gcs?: pulumi.Input<inputs.JobNewClusterInitScriptGcs>;
     s3?: pulumi.Input<inputs.JobNewClusterInitScriptS3>;
 }
 export interface JobNewClusterInitScriptDbfs {
@@ -412,6 +434,9 @@ export interface JobNewClusterInitScriptDbfs {
 export interface JobNewClusterInitScriptFile {
     destination?: pulumi.Input<string>;
 }
+export interface JobNewClusterInitScriptGcs {
+    destination?: pulumi.Input<string>;
+}
 export interface JobNewClusterInitScriptS3 {
     cannedAcl?: pulumi.Input<string>;
     destination: pulumi.Input<string>;
@@ -551,6 +576,7 @@ export interface JobTaskDependsOn {
     taskKey?: pulumi.Input<string>;
 }
 export interface JobTaskEmailNotifications {
+    alertOnLastAttempt?: pulumi.Input<boolean>;
     /**
      * (Bool) don't send alert for skipped runs
      */
@@ -679,6 +705,7 @@ export interface JobTaskNewClusterGcpAttributes {
 export interface JobTaskNewClusterInitScript {
     dbfs?: pulumi.Input<inputs.JobTaskNewClusterInitScriptDbfs>;
     file?: pulumi.Input<inputs.JobTaskNewClusterInitScriptFile>;
+    gcs?: pulumi.Input<inputs.JobTaskNewClusterInitScriptGcs>;
     s3?: pulumi.Input<inputs.JobTaskNewClusterInitScriptS3>;
 }
 export interface JobTaskNewClusterInitScriptDbfs {
@@ -687,6 +714,9 @@ export interface JobTaskNewClusterInitScriptDbfs {
 export interface JobTaskNewClusterInitScriptFile {
     destination?: pulumi.Input<string>;
 }
+export interface JobTaskNewClusterInitScriptGcs {
+    destination?: pulumi.Input<string>;
+}
 export interface JobTaskNewClusterInitScriptS3 {
     cannedAcl?: pulumi.Input<string>;
     destination: pulumi.Input<string>;
@@ -977,6 +1007,7 @@ export interface PipelineClusterClusterLogConfS3 {
 export interface PipelineClusterInitScript {
     dbfs?: pulumi.Input<inputs.PipelineClusterInitScriptDbfs>;
     file?: pulumi.Input<inputs.PipelineClusterInitScriptFile>;
+    gcs?: pulumi.Input<inputs.PipelineClusterInitScriptGcs>;
     s3?: pulumi.Input<inputs.PipelineClusterInitScriptS3>;
 }
 export interface PipelineClusterInitScriptDbfs {
@@ -985,6 +1016,9 @@ export interface PipelineClusterInitScriptDbfs {
 export interface PipelineClusterInitScriptFile {
     destination?: pulumi.Input<string>;
 }
+export interface PipelineClusterInitScriptGcs {
+    destination?: pulumi.Input<string>;
+}
 export interface PipelineClusterInitScriptS3 {
     cannedAcl?: pulumi.Input<string>;
     destination: pulumi.Input<string>;
@@ -1038,7 +1072,7 @@ export interface SqlEndpointTagsCustomTag {
 }
 export interface SqlPermissionsPrivilegeAssignment {
     /**
-     * `displayName` of databricks.Group or databricks_user.
+     * `displayName` for a databricks.Group or databricks_user, `applicationId` for a databricks_service_principal.
      */
     principal: pulumi.Input<string>;
     /**
@@ -1136,8 +1170,8 @@ export interface SqlWidgetParameter {
 }
 export interface SqlWidgetPosition {
     autoHeight?: pulumi.Input<boolean>;
-    posX: pulumi.Input<number>;
-    posY: pulumi.Input<number>;
+    posX?: pulumi.Input<number>;
+    posY?: pulumi.Input<number>;
     sizeX: pulumi.Input<number>;
     sizeY: pulumi.Input<number>;
 }

package/types/output.d.ts

@@ -52,6 +52,7 @@ export interface ClusterGcpAttributes {
 export interface ClusterInitScript {
     dbfs?: outputs.ClusterInitScriptDbfs;
     file?: outputs.ClusterInitScriptFile;
+    gcs?: outputs.ClusterInitScriptGcs;
     s3?: outputs.ClusterInitScriptS3;
 }
 export interface ClusterInitScriptDbfs {
@@ -60,6 +61,9 @@ export interface ClusterInitScriptDbfs {
 export interface ClusterInitScriptFile {
     destination?: string;
 }
+export interface ClusterInitScriptGcs {
+    destination?: string;
+}
 export interface ClusterInitScriptS3 {
     cannedAcl?: string;
     destination: string;
@@ -162,6 +166,7 @@ export interface InstancePoolPreloadedDockerImageBasicAuth {
     username: string;
 }
 export interface JobEmailNotifications {
+    alertOnLastAttempt?: boolean;
     /**
      * (Bool) don't send alert for skipped runs
      */
@@ -180,9 +185,21 @@ export interface JobEmailNotifications {
     onSuccesses?: string[];
 }
 export interface JobGitSource {
+    /**
+     * name of the Git branch to use. Conflicts with `tag` and `commit`.
+     */
     branch?: string;
+    /**
+     * hash of Git commit to use. Conflicts with `branch` and `tag`.
+     */
     commit?: string;
+    /**
+     * case insensitive name of the Git provider.  Following values are supported right now (could be a subject for change, consult [Repos API documentation](https://docs.databricks.com/dev-tools/api/latest/repos.html)): `gitHub`, `gitHubEnterprise`, `bitbucketCloud`, `bitbucketServer`, `azureDevOpsServices`, `gitLab`, `gitLabEnterpriseEdition`.
+     */
     provider?: string;
+    /**
+     * name of the Git branch to use. Conflicts with `branch` and `commit`.
+     */
     tag?: string;
     /**
      * URL of the job on the given workspace
@@ -221,7 +238,7 @@ export interface JobJobClusterNewCluster {
     initScripts?: outputs.JobJobClusterNewClusterInitScript[];
     instancePoolId?: string;
     nodeTypeId: string;
-    numWorkers: number;
+    numWorkers?: number;
     policyId?: string;
     singleUserName?: string;
     sparkConf?: {
@@ -289,6 +306,7 @@ export interface JobJobClusterNewClusterGcpAttributes {
 export interface JobJobClusterNewClusterInitScript {
     dbfs?: outputs.JobJobClusterNewClusterInitScriptDbfs;
     file?: outputs.JobJobClusterNewClusterInitScriptFile;
+    gcs?: outputs.JobJobClusterNewClusterInitScriptGcs;
     s3?: outputs.JobJobClusterNewClusterInitScriptS3;
 }
 export interface JobJobClusterNewClusterInitScriptDbfs {
@@ -297,6 +315,9 @@ export interface JobJobClusterNewClusterInitScriptDbfs {
 export interface JobJobClusterNewClusterInitScriptFile {
     destination?: string;
 }
+export interface JobJobClusterNewClusterInitScriptGcs {
+    destination?: string;
+}
 export interface JobJobClusterNewClusterInitScriptS3 {
     cannedAcl?: string;
     destination: string;
@@ -417,6 +438,7 @@ export interface JobNewClusterGcpAttributes {
 export interface JobNewClusterInitScript {
     dbfs?: outputs.JobNewClusterInitScriptDbfs;
     file?: outputs.JobNewClusterInitScriptFile;
+    gcs?: outputs.JobNewClusterInitScriptGcs;
     s3?: outputs.JobNewClusterInitScriptS3;
 }
 export interface JobNewClusterInitScriptDbfs {
@@ -425,6 +447,9 @@ export interface JobNewClusterInitScriptDbfs {
 export interface JobNewClusterInitScriptFile {
     destination?: string;
 }
+export interface JobNewClusterInitScriptGcs {
+    destination?: string;
+}
 export interface JobNewClusterInitScriptS3 {
     cannedAcl?: string;
     destination: string;
@@ -564,6 +589,7 @@ export interface JobTaskDependsOn {
     taskKey?: string;
 }
 export interface JobTaskEmailNotifications {
+    alertOnLastAttempt?: boolean;
     /**
      * (Bool) don't send alert for skipped runs
      */
@@ -692,6 +718,7 @@ export interface JobTaskNewClusterGcpAttributes {
 export interface JobTaskNewClusterInitScript {
     dbfs?: outputs.JobTaskNewClusterInitScriptDbfs;
     file?: outputs.JobTaskNewClusterInitScriptFile;
+    gcs?: outputs.JobTaskNewClusterInitScriptGcs;
     s3?: outputs.JobTaskNewClusterInitScriptS3;
 }
 export interface JobTaskNewClusterInitScriptDbfs {
@@ -700,6 +727,9 @@ export interface JobTaskNewClusterInitScriptDbfs {
 export interface JobTaskNewClusterInitScriptFile {
     destination?: string;
 }
+export interface JobTaskNewClusterInitScriptGcs {
+    destination?: string;
+}
 export interface JobTaskNewClusterInitScriptS3 {
     cannedAcl?: string;
     destination: string;
@@ -990,6 +1020,7 @@ export interface PipelineClusterClusterLogConfS3 {
 export interface PipelineClusterInitScript {
     dbfs?: outputs.PipelineClusterInitScriptDbfs;
     file?: outputs.PipelineClusterInitScriptFile;
+    gcs?: outputs.PipelineClusterInitScriptGcs;
     s3?: outputs.PipelineClusterInitScriptS3;
 }
 export interface PipelineClusterInitScriptDbfs {
@@ -998,6 +1029,9 @@ export interface PipelineClusterInitScriptDbfs {
 export interface PipelineClusterInitScriptFile {
     destination?: string;
 }
+export interface PipelineClusterInitScriptGcs {
+    destination?: string;
+}
 export interface PipelineClusterInitScriptS3 {
     cannedAcl?: string;
     destination: string;
@@ -1051,7 +1085,7 @@ export interface SqlEndpointTagsCustomTag {
 }
 export interface SqlPermissionsPrivilegeAssignment {
     /**
-     * `displayName` of databricks.Group or databricks_user.
+     * `displayName` for a databricks.Group or databricks_user, `applicationId` for a databricks_service_principal.
      */
     principal: string;
     /**
@@ -1149,8 +1183,8 @@ export interface SqlWidgetParameter {
 }
 export interface SqlWidgetPosition {
     autoHeight?: boolean;
-    posX: number;
-    posY: number;
+    posX?: number;
+    posY?: number;
     sizeX: number;
     sizeY: number;
 }

package/user.d.ts

@@ -1,6 +1,8 @@
 import * as pulumi from "@pulumi/pulumi";
 /**
- * This resource is used to [manage users](https://docs.databricks.com/administration-guide/users-groups/users.html), that could be added to databricks.Group within the workspace. Upon user creation the user will receive a password reset email. You can also get information about caller identity using databricks.getCurrentUser data source.
+ * This resource allows you to manage [users in Databricks Workspace](https://docs.databricks.com/administration-guide/users-groups/users.html), [Databricks Account Console](https://accounts.cloud.databricks.com/) or [Azure Databricks Account Console](https://accounts.azuredatabricks.net). You can also associate Databricks users to databricks_group. Upon user creation the user will receive a password reset email. You can also get information about caller identity using databricks.getCurrentUser data source.
+ *
+ * To create users in the Databricks account, the provider must be configured with `host = "https://accounts.cloud.databricks.com"` on AWS deployments or `host = "https://accounts.azuredatabricks.net"` and authenticate using AAD tokens on Azure deployments
  *
  * ## Related Resources
  *