@pulumi/databricks 1.57.0-alpha.1735914673 → 1.57.0

package/credential.d.ts

@@ -0,0 +1,275 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "./types/input";
+import * as outputs from "./types/output";
+/**
+ * > This resource can only be used with a workspace-level provider.
+ *
+ * > This feature is in [Public Preview](https://docs.databricks.com/release-notes/release-types.html).
+ *
+ * A credential represents an authentication and authorization mechanism for accessing services on your cloud tenant. Each credential is subject to Unity Catalog access-control policies that control which users and groups can access the credential.
+ *
+ * The type of credential to be created is determined by the `purpose` field, which should be either `SERVICE` or `STORAGE`.
+ * The caller must be a metastore admin or have the metastore privilege `CREATE_STORAGE_CREDENTIAL` for storage credentials, or `CREATE_SERVICE_CREDENTIAL` for service credentials. The user who creates the credential can delegate ownership to another user or group to manage permissions on it
+ *
+ * On AWS, the IAM role for a credential requires a trust policy. See [documentation](https://docs.databricks.com/en/connect/unity-catalog/cloud-services/service-credentials.html#step-1-create-an-iam-role) for more details. The data source databricks.getAwsUnityCatalogAssumeRolePolicy can be used to create the necessary AWS Unity Catalog assume role policy.
+ *
+ * ## Example Usage
+ *
+ * For AWS
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as databricks from "@pulumi/databricks";
+ *
+ * const external = new databricks.Credential("external", {
+ *     name: externalDataAccess.name,
+ *     awsIamRole: {
+ *         roleArn: externalDataAccess.arn,
+ *     },
+ *     purpose: "SERVICE",
+ *     comment: "Managed by TF",
+ * });
+ * const externalCreds = new databricks.Grants("external_creds", {
+ *     credential: external.id,
+ *     grants: [{
+ *         principal: "Data Engineers",
+ *         privileges: ["ACCESS"],
+ *     }],
+ * });
+ * ```
+ *
+ * For Azure
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as databricks from "@pulumi/databricks";
+ *
+ * const externalMi = new databricks.Credential("external_mi", {
+ *     name: "mi_credential",
+ *     azureManagedIdentity: {
+ *         accessConnectorId: example.id,
+ *     },
+ *     purpose: "SERVICE",
+ *     comment: "Managed identity credential managed by TF",
+ * });
+ * const externalCreds = new databricks.Grants("external_creds", {
+ *     credential: externalMi.id,
+ *     grants: [{
+ *         principal: "Data Engineers",
+ *         privileges: ["ACCESS"],
+ *     }],
+ * });
+ * ```
+ *
+ * For GCP (only applicable when purpose is `STORAGE`)
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as databricks from "@pulumi/databricks";
+ *
+ * const externalGcpSa = new databricks.Credential("external_gcp_sa", {
+ *     name: "gcp_sa_credential",
+ *     databricksGcpServiceAccount: {},
+ *     purpose: "STORAGE",
+ *     comment: "GCP SA credential managed by TF",
+ * });
+ * const externalCreds = new databricks.Grants("external_creds", {
+ *     credential: externalGcpSa.id,
+ *     grants: [{
+ *         principal: "Data Engineers",
+ *         privileges: ["ACCESS"],
+ *     }],
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * This resource can be imported by name:
+ *
+ * bash
+ *
+ * ```sh
+ * $ pulumi import databricks:index/credential:Credential this <name>
+ * ```
+ */
+export declare class Credential extends pulumi.CustomResource {
+    /**
+     * Get an existing Credential resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: CredentialState, opts?: pulumi.CustomResourceOptions): Credential;
+    /**
+     * Returns true if the given object is an instance of Credential.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is Credential;
+    readonly awsIamRole: pulumi.Output<outputs.CredentialAwsIamRole | undefined>;
+    readonly azureManagedIdentity: pulumi.Output<outputs.CredentialAzureManagedIdentity | undefined>;
+    readonly azureServicePrincipal: pulumi.Output<outputs.CredentialAzureServicePrincipal | undefined>;
+    readonly comment: pulumi.Output<string | undefined>;
+    readonly createdAt: pulumi.Output<number>;
+    readonly createdBy: pulumi.Output<string>;
+    /**
+     * Unique ID of the credential.
+     */
+    readonly credentialId: pulumi.Output<string>;
+    readonly databricksGcpServiceAccount: pulumi.Output<outputs.CredentialDatabricksGcpServiceAccount>;
+    /**
+     * Delete credential regardless of its dependencies.
+     */
+    readonly forceDestroy: pulumi.Output<boolean | undefined>;
+    /**
+     * Update credential regardless of its dependents.
+     */
+    readonly forceUpdate: pulumi.Output<boolean | undefined>;
+    readonly fullName: pulumi.Output<string>;
+    /**
+     * Whether the credential is accessible from all workspaces or a specific set of workspaces. Can be `ISOLATION_MODE_ISOLATED` or `ISOLATION_MODE_OPEN`. Setting the credential to `ISOLATION_MODE_ISOLATED` will automatically restrict access to only from the current workspace.
+     *
+     * `awsIamRole` optional configuration block for credential details for AWS:
+     */
+    readonly isolationMode: pulumi.Output<string>;
+    readonly metastoreId: pulumi.Output<string>;
+    /**
+     * Name of Credentials, which must be unique within the databricks_metastore. Change forces creation of a new resource.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * Username/groupname/sp applicationId of the credential owner.
+     */
+    readonly owner: pulumi.Output<string>;
+    /**
+     * Indicates the purpose of the credential. Can be `SERVICE` or `STORAGE`.
+     */
+    readonly purpose: pulumi.Output<string>;
+    /**
+     * Indicates whether the credential is only usable for read operations. Only applicable when purpose is `STORAGE`.
+     */
+    readonly readOnly: pulumi.Output<boolean | undefined>;
+    /**
+     * Suppress validation errors if any & force save the credential.
+     */
+    readonly skipValidation: pulumi.Output<boolean | undefined>;
+    readonly updatedAt: pulumi.Output<number>;
+    readonly updatedBy: pulumi.Output<string>;
+    readonly usedForManagedStorage: pulumi.Output<boolean>;
+    /**
+     * Create a Credential resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: CredentialArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering Credential resources.
+ */
+export interface CredentialState {
+    awsIamRole?: pulumi.Input<inputs.CredentialAwsIamRole>;
+    azureManagedIdentity?: pulumi.Input<inputs.CredentialAzureManagedIdentity>;
+    azureServicePrincipal?: pulumi.Input<inputs.CredentialAzureServicePrincipal>;
+    comment?: pulumi.Input<string>;
+    createdAt?: pulumi.Input<number>;
+    createdBy?: pulumi.Input<string>;
+    /**
+     * Unique ID of the credential.
+     */
+    credentialId?: pulumi.Input<string>;
+    databricksGcpServiceAccount?: pulumi.Input<inputs.CredentialDatabricksGcpServiceAccount>;
+    /**
+     * Delete credential regardless of its dependencies.
+     */
+    forceDestroy?: pulumi.Input<boolean>;
+    /**
+     * Update credential regardless of its dependents.
+     */
+    forceUpdate?: pulumi.Input<boolean>;
+    fullName?: pulumi.Input<string>;
+    /**
+     * Whether the credential is accessible from all workspaces or a specific set of workspaces. Can be `ISOLATION_MODE_ISOLATED` or `ISOLATION_MODE_OPEN`. Setting the credential to `ISOLATION_MODE_ISOLATED` will automatically restrict access to only from the current workspace.
+     *
+     * `awsIamRole` optional configuration block for credential details for AWS:
+     */
+    isolationMode?: pulumi.Input<string>;
+    metastoreId?: pulumi.Input<string>;
+    /**
+     * Name of Credentials, which must be unique within the databricks_metastore. Change forces creation of a new resource.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Username/groupname/sp applicationId of the credential owner.
+     */
+    owner?: pulumi.Input<string>;
+    /**
+     * Indicates the purpose of the credential. Can be `SERVICE` or `STORAGE`.
+     */
+    purpose?: pulumi.Input<string>;
+    /**
+     * Indicates whether the credential is only usable for read operations. Only applicable when purpose is `STORAGE`.
+     */
+    readOnly?: pulumi.Input<boolean>;
+    /**
+     * Suppress validation errors if any & force save the credential.
+     */
+    skipValidation?: pulumi.Input<boolean>;
+    updatedAt?: pulumi.Input<number>;
+    updatedBy?: pulumi.Input<string>;
+    usedForManagedStorage?: pulumi.Input<boolean>;
+}
+/**
+ * The set of arguments for constructing a Credential resource.
+ */
+export interface CredentialArgs {
+    awsIamRole?: pulumi.Input<inputs.CredentialAwsIamRole>;
+    azureManagedIdentity?: pulumi.Input<inputs.CredentialAzureManagedIdentity>;
+    azureServicePrincipal?: pulumi.Input<inputs.CredentialAzureServicePrincipal>;
+    comment?: pulumi.Input<string>;
+    createdAt?: pulumi.Input<number>;
+    createdBy?: pulumi.Input<string>;
+    databricksGcpServiceAccount?: pulumi.Input<inputs.CredentialDatabricksGcpServiceAccount>;
+    /**
+     * Delete credential regardless of its dependencies.
+     */
+    forceDestroy?: pulumi.Input<boolean>;
+    /**
+     * Update credential regardless of its dependents.
+     */
+    forceUpdate?: pulumi.Input<boolean>;
+    fullName?: pulumi.Input<string>;
+    /**
+     * Whether the credential is accessible from all workspaces or a specific set of workspaces. Can be `ISOLATION_MODE_ISOLATED` or `ISOLATION_MODE_OPEN`. Setting the credential to `ISOLATION_MODE_ISOLATED` will automatically restrict access to only from the current workspace.
+     *
+     * `awsIamRole` optional configuration block for credential details for AWS:
+     */
+    isolationMode?: pulumi.Input<string>;
+    metastoreId?: pulumi.Input<string>;
+    /**
+     * Name of Credentials, which must be unique within the databricks_metastore. Change forces creation of a new resource.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Username/groupname/sp applicationId of the credential owner.
+     */
+    owner?: pulumi.Input<string>;
+    /**
+     * Indicates the purpose of the credential. Can be `SERVICE` or `STORAGE`.
+     */
+    purpose: pulumi.Input<string>;
+    /**
+     * Indicates whether the credential is only usable for read operations. Only applicable when purpose is `STORAGE`.
+     */
+    readOnly?: pulumi.Input<boolean>;
+    /**
+     * Suppress validation errors if any & force save the credential.
+     */
+    skipValidation?: pulumi.Input<boolean>;
+    updatedAt?: pulumi.Input<number>;
+    updatedBy?: pulumi.Input<string>;
+    usedForManagedStorage?: pulumi.Input<boolean>;
+}

package/credential.js

@@ -0,0 +1,183 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Credential = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * > This resource can only be used with a workspace-level provider.
+ *
+ * > This feature is in [Public Preview](https://docs.databricks.com/release-notes/release-types.html).
+ *
+ * A credential represents an authentication and authorization mechanism for accessing services on your cloud tenant. Each credential is subject to Unity Catalog access-control policies that control which users and groups can access the credential.
+ *
+ * The type of credential to be created is determined by the `purpose` field, which should be either `SERVICE` or `STORAGE`.
+ * The caller must be a metastore admin or have the metastore privilege `CREATE_STORAGE_CREDENTIAL` for storage credentials, or `CREATE_SERVICE_CREDENTIAL` for service credentials. The user who creates the credential can delegate ownership to another user or group to manage permissions on it
+ *
+ * On AWS, the IAM role for a credential requires a trust policy. See [documentation](https://docs.databricks.com/en/connect/unity-catalog/cloud-services/service-credentials.html#step-1-create-an-iam-role) for more details. The data source databricks.getAwsUnityCatalogAssumeRolePolicy can be used to create the necessary AWS Unity Catalog assume role policy.
+ *
+ * ## Example Usage
+ *
+ * For AWS
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as databricks from "@pulumi/databricks";
+ *
+ * const external = new databricks.Credential("external", {
+ *     name: externalDataAccess.name,
+ *     awsIamRole: {
+ *         roleArn: externalDataAccess.arn,
+ *     },
+ *     purpose: "SERVICE",
+ *     comment: "Managed by TF",
+ * });
+ * const externalCreds = new databricks.Grants("external_creds", {
+ *     credential: external.id,
+ *     grants: [{
+ *         principal: "Data Engineers",
+ *         privileges: ["ACCESS"],
+ *     }],
+ * });
+ * ```
+ *
+ * For Azure
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as databricks from "@pulumi/databricks";
+ *
+ * const externalMi = new databricks.Credential("external_mi", {
+ *     name: "mi_credential",
+ *     azureManagedIdentity: {
+ *         accessConnectorId: example.id,
+ *     },
+ *     purpose: "SERVICE",
+ *     comment: "Managed identity credential managed by TF",
+ * });
+ * const externalCreds = new databricks.Grants("external_creds", {
+ *     credential: externalMi.id,
+ *     grants: [{
+ *         principal: "Data Engineers",
+ *         privileges: ["ACCESS"],
+ *     }],
+ * });
+ * ```
+ *
+ * For GCP (only applicable when purpose is `STORAGE`)
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as databricks from "@pulumi/databricks";
+ *
+ * const externalGcpSa = new databricks.Credential("external_gcp_sa", {
+ *     name: "gcp_sa_credential",
+ *     databricksGcpServiceAccount: {},
+ *     purpose: "STORAGE",
+ *     comment: "GCP SA credential managed by TF",
+ * });
+ * const externalCreds = new databricks.Grants("external_creds", {
+ *     credential: externalGcpSa.id,
+ *     grants: [{
+ *         principal: "Data Engineers",
+ *         privileges: ["ACCESS"],
+ *     }],
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * This resource can be imported by name:
+ *
+ * bash
+ *
+ * ```sh
+ * $ pulumi import databricks:index/credential:Credential this <name>
+ * ```
+ */
+class Credential extends pulumi.CustomResource {
+    /**
+     * Get an existing Credential resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new Credential(name, state, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of Credential.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === Credential.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["awsIamRole"] = state ? state.awsIamRole : undefined;
+            resourceInputs["azureManagedIdentity"] = state ? state.azureManagedIdentity : undefined;
+            resourceInputs["azureServicePrincipal"] = state ? state.azureServicePrincipal : undefined;
+            resourceInputs["comment"] = state ? state.comment : undefined;
+            resourceInputs["createdAt"] = state ? state.createdAt : undefined;
+            resourceInputs["createdBy"] = state ? state.createdBy : undefined;
+            resourceInputs["credentialId"] = state ? state.credentialId : undefined;
+            resourceInputs["databricksGcpServiceAccount"] = state ? state.databricksGcpServiceAccount : undefined;
+            resourceInputs["forceDestroy"] = state ? state.forceDestroy : undefined;
+            resourceInputs["forceUpdate"] = state ? state.forceUpdate : undefined;
+            resourceInputs["fullName"] = state ? state.fullName : undefined;
+            resourceInputs["isolationMode"] = state ? state.isolationMode : undefined;
+            resourceInputs["metastoreId"] = state ? state.metastoreId : undefined;
+            resourceInputs["name"] = state ? state.name : undefined;
+            resourceInputs["owner"] = state ? state.owner : undefined;
+            resourceInputs["purpose"] = state ? state.purpose : undefined;
+            resourceInputs["readOnly"] = state ? state.readOnly : undefined;
+            resourceInputs["skipValidation"] = state ? state.skipValidation : undefined;
+            resourceInputs["updatedAt"] = state ? state.updatedAt : undefined;
+            resourceInputs["updatedBy"] = state ? state.updatedBy : undefined;
+            resourceInputs["usedForManagedStorage"] = state ? state.usedForManagedStorage : undefined;
+        }
+        else {
+            const args = argsOrState;
+            if ((!args || args.purpose === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'purpose'");
+            }
+            resourceInputs["awsIamRole"] = args ? args.awsIamRole : undefined;
+            resourceInputs["azureManagedIdentity"] = args ? args.azureManagedIdentity : undefined;
+            resourceInputs["azureServicePrincipal"] = args ? args.azureServicePrincipal : undefined;
+            resourceInputs["comment"] = args ? args.comment : undefined;
+            resourceInputs["createdAt"] = args ? args.createdAt : undefined;
+            resourceInputs["createdBy"] = args ? args.createdBy : undefined;
+            resourceInputs["databricksGcpServiceAccount"] = args ? args.databricksGcpServiceAccount : undefined;
+            resourceInputs["forceDestroy"] = args ? args.forceDestroy : undefined;
+            resourceInputs["forceUpdate"] = args ? args.forceUpdate : undefined;
+            resourceInputs["fullName"] = args ? args.fullName : undefined;
+            resourceInputs["isolationMode"] = args ? args.isolationMode : undefined;
+            resourceInputs["metastoreId"] = args ? args.metastoreId : undefined;
+            resourceInputs["name"] = args ? args.name : undefined;
+            resourceInputs["owner"] = args ? args.owner : undefined;
+            resourceInputs["purpose"] = args ? args.purpose : undefined;
+            resourceInputs["readOnly"] = args ? args.readOnly : undefined;
+            resourceInputs["skipValidation"] = args ? args.skipValidation : undefined;
+            resourceInputs["updatedAt"] = args ? args.updatedAt : undefined;
+            resourceInputs["updatedBy"] = args ? args.updatedBy : undefined;
+            resourceInputs["usedForManagedStorage"] = args ? args.usedForManagedStorage : undefined;
+            resourceInputs["credentialId"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(Credential.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.Credential = Credential;
+/** @internal */
+Credential.__pulumiType = 'databricks:index/credential:Credential';
+//# sourceMappingURL=credential.js.map

package/credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.js","sourceRoot":"","sources":["../credential.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0FG;AACH,MAAa,UAAW,SAAQ,MAAM,CAAC,cAAc;IACjD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAuB,EAAE,IAAmC;QACrH,OAAO,IAAI,UAAU,CAAC,IAAI,EAAO,KAAK,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACjE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,UAAU,CAAC,YAAY,CAAC;IAC3D,CAAC;IA6DD,YAAY,IAAY,EAAE,WAA8C,EAAE,IAAmC;QACzG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA0C,CAAC;YACzD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1F,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,6BAA6B,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1D,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5E,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;SAC7F;aAAM;YACH,MAAM,IAAI,GAAG,WAAyC,CAAC;YACvD,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC;YAClE,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,SAAS,CAAC;YACtF,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,6BAA6B,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,2BAA2B,CAAC,CAAC,CAAC,SAAS,CAAC;YACpG,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC;YACtE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC;YACxE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;YACpE,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;YAC1E,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;YAChE,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,SAAS,CAAC;YACxF,cAAc,CAAC,cAAc,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACtD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,UAAU,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC/D,CAAC;;AA9IL,gCA+IC;AAjIG,gBAAgB;AACO,uBAAY,GAAG,wCAAwC,CAAC"}

package/getApp.d.ts

@@ -0,0 +1,95 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as outputs from "./types/output";
+/**
+ * > This feature is in [Public Preview](https://docs.databricks.com/release-notes/release-types.html).
+ *
+ * [Databricks Apps](https://docs.databricks.com/en/dev-tools/databricks-apps/index.html) run directly on a customer’s Databricks instance, integrate with their data, use and extend Databricks services, and enable users to interact through single sign-on. This resource creates the application but does not handle app deployment, which should be handled separately as part of your CI/CD pipeline.
+ *
+ * This data source allows you to fetch information about a Databricks App.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as databricks from "@pulumi/databricks";
+ *
+ * const this = databricks.getApp({
+ *     name: "my-custom-app",
+ * });
+ * ```
+ *
+ * ## Related Resources
+ *
+ * The following resources are used in the same context:
+ *
+ * * databricks.App to manage [Databricks Apps](https://docs.databricks.com/en/dev-tools/databricks-apps/index.html).
+ * * databricks.SqlEndpoint to manage Databricks SQL [Endpoints](https://docs.databricks.com/sql/admin/sql-endpoints.html).
+ * * databricks.ModelServing to serve this model on a Databricks serving endpoint.
+ * * databricks.Secret to manage [secrets](https://docs.databricks.com/security/secrets/index.html#secrets-user-guide) in Databricks workspace.
+ * * databricks.Job to manage [Databricks Jobs](https://docs.databricks.com/jobs.html) to run non-interactive code.
+ */
+export declare function getApp(args: GetAppArgs, opts?: pulumi.InvokeOptions): Promise<GetAppResult>;
+/**
+ * A collection of arguments for invoking getApp.
+ */
+export interface GetAppArgs {
+    /**
+     * The name of the app.
+     */
+    name: string;
+}
+/**
+ * A collection of values returned by getApp.
+ */
+export interface GetAppResult {
+    /**
+     * attribute
+     */
+    readonly app: outputs.GetAppApp;
+    /**
+     * The provider-assigned unique ID for this managed resource.
+     */
+    readonly id: string;
+    /**
+     * Name of the serving endpoint to grant permission on.
+     */
+    readonly name: string;
+}
+/**
+ * > This feature is in [Public Preview](https://docs.databricks.com/release-notes/release-types.html).
+ *
+ * [Databricks Apps](https://docs.databricks.com/en/dev-tools/databricks-apps/index.html) run directly on a customer’s Databricks instance, integrate with their data, use and extend Databricks services, and enable users to interact through single sign-on. This resource creates the application but does not handle app deployment, which should be handled separately as part of your CI/CD pipeline.
+ *
+ * This data source allows you to fetch information about a Databricks App.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as databricks from "@pulumi/databricks";
+ *
+ * const this = databricks.getApp({
+ *     name: "my-custom-app",
+ * });
+ * ```
+ *
+ * ## Related Resources
+ *
+ * The following resources are used in the same context:
+ *
+ * * databricks.App to manage [Databricks Apps](https://docs.databricks.com/en/dev-tools/databricks-apps/index.html).
+ * * databricks.SqlEndpoint to manage Databricks SQL [Endpoints](https://docs.databricks.com/sql/admin/sql-endpoints.html).
+ * * databricks.ModelServing to serve this model on a Databricks serving endpoint.
+ * * databricks.Secret to manage [secrets](https://docs.databricks.com/security/secrets/index.html#secrets-user-guide) in Databricks workspace.
+ * * databricks.Job to manage [Databricks Jobs](https://docs.databricks.com/jobs.html) to run non-interactive code.
+ */
+export declare function getAppOutput(args: GetAppOutputArgs, opts?: pulumi.InvokeOutputOptions): pulumi.Output<GetAppResult>;
+/**
+ * A collection of arguments for invoking getApp.
+ */
+export interface GetAppOutputArgs {
+    /**
+     * The name of the app.
+     */
+    name: pulumi.Input<string>;
+}

package/getApp.js

@@ -0,0 +1,78 @@
+"use strict";
+// *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getAppOutput = exports.getApp = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("./utilities");
+/**
+ * > This feature is in [Public Preview](https://docs.databricks.com/release-notes/release-types.html).
+ *
+ * [Databricks Apps](https://docs.databricks.com/en/dev-tools/databricks-apps/index.html) run directly on a customer’s Databricks instance, integrate with their data, use and extend Databricks services, and enable users to interact through single sign-on. This resource creates the application but does not handle app deployment, which should be handled separately as part of your CI/CD pipeline.
+ *
+ * This data source allows you to fetch information about a Databricks App.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as databricks from "@pulumi/databricks";
+ *
+ * const this = databricks.getApp({
+ *     name: "my-custom-app",
+ * });
+ * ```
+ *
+ * ## Related Resources
+ *
+ * The following resources are used in the same context:
+ *
+ * * databricks.App to manage [Databricks Apps](https://docs.databricks.com/en/dev-tools/databricks-apps/index.html).
+ * * databricks.SqlEndpoint to manage Databricks SQL [Endpoints](https://docs.databricks.com/sql/admin/sql-endpoints.html).
+ * * databricks.ModelServing to serve this model on a Databricks serving endpoint.
+ * * databricks.Secret to manage [secrets](https://docs.databricks.com/security/secrets/index.html#secrets-user-guide) in Databricks workspace.
+ * * databricks.Job to manage [Databricks Jobs](https://docs.databricks.com/jobs.html) to run non-interactive code.
+ */
+function getApp(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invoke("databricks:index/getApp:getApp", {
+        "name": args.name,
+    }, opts);
+}
+exports.getApp = getApp;
+/**
+ * > This feature is in [Public Preview](https://docs.databricks.com/release-notes/release-types.html).
+ *
+ * [Databricks Apps](https://docs.databricks.com/en/dev-tools/databricks-apps/index.html) run directly on a customer’s Databricks instance, integrate with their data, use and extend Databricks services, and enable users to interact through single sign-on. This resource creates the application but does not handle app deployment, which should be handled separately as part of your CI/CD pipeline.
+ *
+ * This data source allows you to fetch information about a Databricks App.
+ *
+ * ## Example Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as databricks from "@pulumi/databricks";
+ *
+ * const this = databricks.getApp({
+ *     name: "my-custom-app",
+ * });
+ * ```
+ *
+ * ## Related Resources
+ *
+ * The following resources are used in the same context:
+ *
+ * * databricks.App to manage [Databricks Apps](https://docs.databricks.com/en/dev-tools/databricks-apps/index.html).
+ * * databricks.SqlEndpoint to manage Databricks SQL [Endpoints](https://docs.databricks.com/sql/admin/sql-endpoints.html).
+ * * databricks.ModelServing to serve this model on a Databricks serving endpoint.
+ * * databricks.Secret to manage [secrets](https://docs.databricks.com/security/secrets/index.html#secrets-user-guide) in Databricks workspace.
+ * * databricks.Job to manage [Databricks Jobs](https://docs.databricks.com/jobs.html) to run non-interactive code.
+ */
+function getAppOutput(args, opts) {
+    opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts || {});
+    return pulumi.runtime.invokeOutput("databricks:index/getApp:getApp", {
+        "name": args.name,
+    }, opts);
+}
+exports.getAppOutput = getAppOutput;
+//# sourceMappingURL=getApp.js.map

package/getApp.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getApp.js","sourceRoot":"","sources":["../getApp.ts"],"names":[],"mappings":";AAAA,wFAAwF;AACxF,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,SAAgB,MAAM,CAAC,IAAgB,EAAE,IAA2B;IAChE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,gCAAgC,EAAE;QAC3D,MAAM,EAAE,IAAI,CAAC,IAAI;KACpB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AALD,wBAKC;AA6BD;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,SAAgB,YAAY,CAAC,IAAsB,EAAE,IAAiC;IAClF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,CAAC;IACzE,OAAO,MAAM,CAAC,OAAO,CAAC,YAAY,CAAC,gCAAgC,EAAE;QACjE,MAAM,EAAE,IAAI,CAAC,IAAI;KACpB,EAAE,IAAI,CAAC,CAAC;AACb,CAAC;AALD,oCAKC"}