@pulumi/databricks 1.91.0 → 1.91.1

package/postgresProject.d.ts

@@ -44,10 +44,12 @@ import * as outputs from "./types/output";
  *
  * ### Project with High Availability Endpoint
  *
- * Create a project whose initial read-write endpoint is configured with multiple compute instances for high availability.
+ * Create a project whose read-write endpoint is configured with multiple compute instances for high availability.
  * One compute instance acts as the read-write primary.
  * The remaining secondary compute instances are ready for automatic failover if the primary becomes unavailable.
  *
+ * This example manages implicitly created resources for the root branch and read-write endpoint. For more details, see the documentation for `databricks.PostgresBranch` and `databricks.PostgresEndpoint`.
+ *
  * ```typescript
  * import * as pulumi from "@pulumi/pulumi";
  * import * as databricks from "@pulumi/databricks";
@@ -58,13 +60,31 @@ import * as outputs from "./types/output";
  *         pgVersion: 17,
  *         displayName: "HA Production Project",
  *     },
- *     initialEndpointSpec: {
+ * });
+ * const production = new databricks.PostgresBranch("production", {
+ *     branchId: "production",
+ *     parent: ha.name,
+ *     spec: {
+ *         noExpiry: true,
+ *         isProtected: true,
+ *     },
+ *     replaceExisting: true,
+ * });
+ * const primary = new databricks.PostgresEndpoint("primary", {
+ *     endpointId: "primary",
+ *     parent: production.name,
+ *     spec: {
+ *         endpointType: "ENDPOINT_TYPE_READ_WRITE",
+ *         noSuspension: true,
+ *         autoscalingLimitMinCu: 0.5,
+ *         autoscalingLimitMaxCu: 4,
  *         group: {
  *             min: 2,
  *             max: 2,
  *             enableReadableSecondaries: false,
  *         },
  *     },
+ *     replaceExisting: true,
  * });
  * ```
  *
@@ -111,7 +131,12 @@ export declare class PostgresProject extends pulumi.CustomResource {
      */
     readonly createTime: pulumi.Output<string>;
     /**
-     * Configuration settings for the initial Read/Write endpoint created inside the default branch for a newly
+     * (string) - A timestamp indicating when the project was soft-deleted.
+     * Empty if the project is not deleted, otherwise set to a timestamp in the past
+     */
+    readonly deleteTime: pulumi.Output<string>;
+    /**
+     * Configuration settings for the initial Read/Write endpoint created inside the initial branch for a newly
      * created project. If omitted, the initial endpoint created will have default settings, without high availability
      * configured. This field does not apply to any endpoints created after project creation. Use
      * spec.default_endpoint_settings to configure default settings for endpoints created after project creation
@@ -132,6 +157,16 @@ export declare class PostgresProject extends pulumi.CustomResource {
      * Configure the provider for management through account provider.
      */
     readonly providerConfig: pulumi.Output<outputs.PostgresProjectProviderConfig | undefined>;
+    /**
+     * If true, permanently deletes the project (hard delete).
+     * If false or unset, performs a soft delete
+     */
+    readonly purgeOnDelete: pulumi.Output<boolean | undefined>;
+    /**
+     * (string) - A timestamp indicating when the project is scheduled for permanent deletion.
+     * Empty if the project is not deleted, otherwise set to a timestamp in the future
+     */
+    readonly purgeTime: pulumi.Output<string>;
     /**
      * The spec contains the project configuration, including display_name, pgVersion (Postgres version), history_retention_duration, and default_endpoint_settings
      */
@@ -166,7 +201,12 @@ export interface PostgresProjectState {
      */
     createTime?: pulumi.Input<string>;
     /**
-     * Configuration settings for the initial Read/Write endpoint created inside the default branch for a newly
+     * (string) - A timestamp indicating when the project was soft-deleted.
+     * Empty if the project is not deleted, otherwise set to a timestamp in the past
+     */
+    deleteTime?: pulumi.Input<string>;
+    /**
+     * Configuration settings for the initial Read/Write endpoint created inside the initial branch for a newly
      * created project. If omitted, the initial endpoint created will have default settings, without high availability
      * configured. This field does not apply to any endpoints created after project creation. Use
      * spec.default_endpoint_settings to configure default settings for endpoints created after project creation
@@ -187,6 +227,16 @@ export interface PostgresProjectState {
      * Configure the provider for management through account provider.
      */
     providerConfig?: pulumi.Input<inputs.PostgresProjectProviderConfig>;
+    /**
+     * If true, permanently deletes the project (hard delete).
+     * If false or unset, performs a soft delete
+     */
+    purgeOnDelete?: pulumi.Input<boolean>;
+    /**
+     * (string) - A timestamp indicating when the project is scheduled for permanent deletion.
+     * Empty if the project is not deleted, otherwise set to a timestamp in the future
+     */
+    purgeTime?: pulumi.Input<string>;
     /**
      * The spec contains the project configuration, including display_name, pgVersion (Postgres version), history_retention_duration, and default_endpoint_settings
      */
@@ -209,7 +259,7 @@ export interface PostgresProjectState {
  */
 export interface PostgresProjectArgs {
     /**
-     * Configuration settings for the initial Read/Write endpoint created inside the default branch for a newly
+     * Configuration settings for the initial Read/Write endpoint created inside the initial branch for a newly
      * created project. If omitted, the initial endpoint created will have default settings, without high availability
      * configured. This field does not apply to any endpoints created after project creation. Use
      * spec.default_endpoint_settings to configure default settings for endpoints created after project creation
@@ -225,6 +275,11 @@ export interface PostgresProjectArgs {
      * Configure the provider for management through account provider.
      */
     providerConfig?: pulumi.Input<inputs.PostgresProjectProviderConfig>;
+    /**
+     * If true, permanently deletes the project (hard delete).
+     * If false or unset, performs a soft delete
+     */
+    purgeOnDelete?: pulumi.Input<boolean>;
     /**
      * The spec contains the project configuration, including display_name, pgVersion (Postgres version), history_retention_duration, and default_endpoint_settings
      */

package/postgresProject.js

@@ -48,10 +48,12 @@ const utilities = require("./utilities");
  *
  * ### Project with High Availability Endpoint
  *
- * Create a project whose initial read-write endpoint is configured with multiple compute instances for high availability.
+ * Create a project whose read-write endpoint is configured with multiple compute instances for high availability.
  * One compute instance acts as the read-write primary.
  * The remaining secondary compute instances are ready for automatic failover if the primary becomes unavailable.
  *
+ * This example manages implicitly created resources for the root branch and read-write endpoint. For more details, see the documentation for `databricks.PostgresBranch` and `databricks.PostgresEndpoint`.
+ *
  * ```typescript
  * import * as pulumi from "@pulumi/pulumi";
  * import * as databricks from "@pulumi/databricks";
@@ -62,13 +64,31 @@ const utilities = require("./utilities");
  *         pgVersion: 17,
  *         displayName: "HA Production Project",
  *     },
- *     initialEndpointSpec: {
+ * });
+ * const production = new databricks.PostgresBranch("production", {
+ *     branchId: "production",
+ *     parent: ha.name,
+ *     spec: {
+ *         noExpiry: true,
+ *         isProtected: true,
+ *     },
+ *     replaceExisting: true,
+ * });
+ * const primary = new databricks.PostgresEndpoint("primary", {
+ *     endpointId: "primary",
+ *     parent: production.name,
+ *     spec: {
+ *         endpointType: "ENDPOINT_TYPE_READ_WRITE",
+ *         noSuspension: true,
+ *         autoscalingLimitMinCu: 0.5,
+ *         autoscalingLimitMaxCu: 4,
  *         group: {
  *             min: 2,
  *             max: 2,
  *             enableReadableSecondaries: false,
  *         },
  *     },
+ *     replaceExisting: true,
  * });
  * ```
  *
@@ -123,10 +143,13 @@ class PostgresProject extends pulumi.CustomResource {
         if (opts.id) {
             const state = argsOrState;
             resourceInputs["createTime"] = state?.createTime;
+            resourceInputs["deleteTime"] = state?.deleteTime;
             resourceInputs["initialEndpointSpec"] = state?.initialEndpointSpec;
             resourceInputs["name"] = state?.name;
             resourceInputs["projectId"] = state?.projectId;
             resourceInputs["providerConfig"] = state?.providerConfig;
+            resourceInputs["purgeOnDelete"] = state?.purgeOnDelete;
+            resourceInputs["purgeTime"] = state?.purgeTime;
             resourceInputs["spec"] = state?.spec;
             resourceInputs["status"] = state?.status;
             resourceInputs["uid"] = state?.uid;
@@ -140,9 +163,12 @@ class PostgresProject extends pulumi.CustomResource {
             resourceInputs["initialEndpointSpec"] = args?.initialEndpointSpec;
             resourceInputs["projectId"] = args?.projectId;
             resourceInputs["providerConfig"] = args?.providerConfig;
+            resourceInputs["purgeOnDelete"] = args?.purgeOnDelete;
             resourceInputs["spec"] = args?.spec;
             resourceInputs["createTime"] = undefined /*out*/;
+            resourceInputs["deleteTime"] = undefined /*out*/;
             resourceInputs["name"] = undefined /*out*/;
+            resourceInputs["purgeTime"] = undefined /*out*/;
             resourceInputs["status"] = undefined /*out*/;
             resourceInputs["uid"] = undefined /*out*/;
             resourceInputs["updateTime"] = undefined /*out*/;

package/postgresProject.js.map

@@ -1 +1 @@
-{"version":3,"file":"postgresProject.js","sourceRoot":"","sources":["../postgresProject.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwFG;AACH,MAAa,eAAgB,SAAQ,MAAM,CAAC,cAAc;IACtD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA4B,EAAE,IAAmC;QAC1H,OAAO,IAAI,eAAe,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,eAAe,CAAC,YAAY,CAAC;IAChE,CAAC;IAqDD,YAAY,IAAY,EAAE,WAAwD,EAAE,IAAmC;QACnH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA+C,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,EAAE,mBAAmB,CAAC;YACnE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC;YACnC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;SACpD;aAAM;YACH,MAAM,IAAI,GAAG,WAA8C,CAAC;YAC5D,IAAI,IAAI,EAAE,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC5C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,EAAE,mBAAmB,CAAC;YAClE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7C,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACpD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,eAAe,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC;;AA9GL,0CA+GC;AAjGG,gBAAgB;AACO,4BAAY,GAAG,kDAAkD,CAAC"}
+{"version":3,"file":"postgresProject.js","sourceRoot":"","sources":["../postgresProject.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4GG;AACH,MAAa,eAAgB,SAAQ,MAAM,CAAC,cAAc;IACtD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA4B,EAAE,IAAmC;QAC1H,OAAO,IAAI,eAAe,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACtE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,eAAe,CAAC,YAAY,CAAC;IAChE,CAAC;IAoED,YAAY,IAAY,EAAE,WAAwD,EAAE,IAAmC;QACnH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA+C,CAAC;YAC9D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,EAAE,mBAAmB,CAAC;YACnE,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC;YACnC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;SACpD;aAAM;YACH,MAAM,IAAI,GAAG,WAA8C,CAAC;YAC5D,IAAI,IAAI,EAAE,SAAS,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC5C,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAC;aAC5D;YACD,cAAc,CAAC,qBAAqB,CAAC,GAAG,IAAI,EAAE,mBAAmB,CAAC;YAClE,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC;YACtD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7C,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACpD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,eAAe,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC;;AAnIL,0CAoIC;AAtHG,gBAAgB;AACO,4BAAY,GAAG,kDAAkD,CAAC"}

package/postgresRole.d.ts

@@ -3,6 +3,114 @@ import * as inputs from "./types/input";
 import * as outputs from "./types/output";
 /**
  * [![Public Beta](https://img.shields.io/badge/Release_Stage-Public_Beta-orange)](https://docs.databricks.com/aws/en/release-notes/release-types)
+ *
+ * ## Example Usage
+ *
+ * ### Role Backed by a Databricks User Identity
+ *
+ * Create a role that is authenticated as a specific Databricks workspace user via OAuth. `authMethod` is left unset and defaults to `LAKEBASE_OAUTH_V1` for managed identities.
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as databricks from "@pulumi/databricks";
+ *
+ * const _this = new databricks.PostgresProject("this", {
+ *     projectId: "my-project",
+ *     spec: {
+ *         pgVersion: 17,
+ *         displayName: "My Project",
+ *     },
+ * });
+ * const main = new databricks.PostgresBranch("main", {
+ *     branchId: "main",
+ *     parent: _this.name,
+ *     spec: {
+ *         noExpiry: true,
+ *     },
+ * });
+ * const jane = new databricks.PostgresRole("jane", {
+ *     roleId: "jane",
+ *     parent: main.name,
+ *     spec: {
+ *         identityType: "USER",
+ *         postgresRole: "jane@databricks.com",
+ *     },
+ * });
+ * ```
+ *
+ * ### Service Principal with `DATABRICKS_SUPERUSER` Membership
+ *
+ * Create a role that is authenticated as a Databricks service principal via OAuth and grant it the highest customer-exposed privilege set via `DATABRICKS_SUPERUSER` membership.
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as databricks from "@pulumi/databricks";
+ *
+ * const adminSp = new databricks.PostgresRole("admin_sp", {
+ *     roleId: "admin-sp",
+ *     parent: main.name,
+ *     spec: {
+ *         identityType: "SERVICE_PRINCIPAL",
+ *         postgresRole: "00000000-0000-0000-0000-000000000000",
+ *         authMethod: "LAKEBASE_OAUTH_V1",
+ *         membershipRoles: ["DATABRICKS_SUPERUSER"],
+ *     },
+ * });
+ * ```
+ *
+ * ### Multiple roles in a branch
+ *
+ * By default, Pulumi creates resources in parallel if the dependency graph allows. However, Lakebase
+ * doesn't allow executing parallel manipulations inside a single branch. Only one of these resources can
+ * be created or updated at a time:
+ *
+ * - Role
+ * - Database
+ * - Endpoint
+ *
+ * If you try to create resources in parallel, you'll see a conflict error like:
+ *
+ * > Your project already has conflicting operations in progress. Please wait until they are complete, and then try again.
+ *
+ * Pulumi serializes execution automatically when one resource references another.
+ * For example, when a database names a role as its owner via `spec.role`, Pulumi creates the role before the database.
+ * For resources that don't reference each other, like two sibling roles in the same branch, add `dependsOn` so
+ * Pulumi knows to wait for creation of the first one to finish, before scheduling the creation of the second one.
+ *
+ * For example:
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as databricks from "@pulumi/databricks";
+ *
+ * const schemaOwner = new databricks.PostgresRole("schema_owner", {
+ *     roleId: "schemamigrator",
+ *     parent: test.name,
+ *     spec: {
+ *         postgresRole: "schemamigrator",
+ *         membershipRoles: ["DATABRICKS_SUPERUSER"],
+ *     },
+ * });
+ * const application = new databricks.PostgresDatabase("application", {
+ *     databaseId: "application",
+ *     parent: test.name,
+ *     spec: {
+ *         postgresDatabase: "application",
+ *         role: schemaOwner.name,
+ *     },
+ * });
+ * const applicationPostgresRole = new databricks.PostgresRole("application", {
+ *     roleId: "application",
+ *     parent: test.name,
+ *     spec: {
+ *         postgresRole: "application",
+ *     },
+ * }, {
+ *     dependsOn: [application],
+ * });
+ * ```
+ *
+ * Note: in a real setup, the `application` role would also need `GRANT` privileges, but that's out of scope for this example.
  */
 export declare class PostgresRole extends pulumi.CustomResource {
     /**

package/postgresRole.js

@@ -7,6 +7,114 @@ const pulumi = require("@pulumi/pulumi");
 const utilities = require("./utilities");
 /**
  * [![Public Beta](https://img.shields.io/badge/Release_Stage-Public_Beta-orange)](https://docs.databricks.com/aws/en/release-notes/release-types)
+ *
+ * ## Example Usage
+ *
+ * ### Role Backed by a Databricks User Identity
+ *
+ * Create a role that is authenticated as a specific Databricks workspace user via OAuth. `authMethod` is left unset and defaults to `LAKEBASE_OAUTH_V1` for managed identities.
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as databricks from "@pulumi/databricks";
+ *
+ * const _this = new databricks.PostgresProject("this", {
+ *     projectId: "my-project",
+ *     spec: {
+ *         pgVersion: 17,
+ *         displayName: "My Project",
+ *     },
+ * });
+ * const main = new databricks.PostgresBranch("main", {
+ *     branchId: "main",
+ *     parent: _this.name,
+ *     spec: {
+ *         noExpiry: true,
+ *     },
+ * });
+ * const jane = new databricks.PostgresRole("jane", {
+ *     roleId: "jane",
+ *     parent: main.name,
+ *     spec: {
+ *         identityType: "USER",
+ *         postgresRole: "jane@databricks.com",
+ *     },
+ * });
+ * ```
+ *
+ * ### Service Principal with `DATABRICKS_SUPERUSER` Membership
+ *
+ * Create a role that is authenticated as a Databricks service principal via OAuth and grant it the highest customer-exposed privilege set via `DATABRICKS_SUPERUSER` membership.
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as databricks from "@pulumi/databricks";
+ *
+ * const adminSp = new databricks.PostgresRole("admin_sp", {
+ *     roleId: "admin-sp",
+ *     parent: main.name,
+ *     spec: {
+ *         identityType: "SERVICE_PRINCIPAL",
+ *         postgresRole: "00000000-0000-0000-0000-000000000000",
+ *         authMethod: "LAKEBASE_OAUTH_V1",
+ *         membershipRoles: ["DATABRICKS_SUPERUSER"],
+ *     },
+ * });
+ * ```
+ *
+ * ### Multiple roles in a branch
+ *
+ * By default, Pulumi creates resources in parallel if the dependency graph allows. However, Lakebase
+ * doesn't allow executing parallel manipulations inside a single branch. Only one of these resources can
+ * be created or updated at a time:
+ *
+ * - Role
+ * - Database
+ * - Endpoint
+ *
+ * If you try to create resources in parallel, you'll see a conflict error like:
+ *
+ * > Your project already has conflicting operations in progress. Please wait until they are complete, and then try again.
+ *
+ * Pulumi serializes execution automatically when one resource references another.
+ * For example, when a database names a role as its owner via `spec.role`, Pulumi creates the role before the database.
+ * For resources that don't reference each other, like two sibling roles in the same branch, add `dependsOn` so
+ * Pulumi knows to wait for creation of the first one to finish, before scheduling the creation of the second one.
+ *
+ * For example:
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as databricks from "@pulumi/databricks";
+ *
+ * const schemaOwner = new databricks.PostgresRole("schema_owner", {
+ *     roleId: "schemamigrator",
+ *     parent: test.name,
+ *     spec: {
+ *         postgresRole: "schemamigrator",
+ *         membershipRoles: ["DATABRICKS_SUPERUSER"],
+ *     },
+ * });
+ * const application = new databricks.PostgresDatabase("application", {
+ *     databaseId: "application",
+ *     parent: test.name,
+ *     spec: {
+ *         postgresDatabase: "application",
+ *         role: schemaOwner.name,
+ *     },
+ * });
+ * const applicationPostgresRole = new databricks.PostgresRole("application", {
+ *     roleId: "application",
+ *     parent: test.name,
+ *     spec: {
+ *         postgresRole: "application",
+ *     },
+ * }, {
+ *     dependsOn: [application],
+ * });
+ * ```
+ *
+ * Note: in a real setup, the `application` role would also need `GRANT` privileges, but that's out of scope for this example.
  */
 class PostgresRole extends pulumi.CustomResource {
     /**

package/postgresRole.js.map

@@ -1 +1 @@
-{"version":3,"file":"postgresRole.js","sourceRoot":"","sources":["../postgresRole.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;GAEG;AACH,MAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IACnD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyB,EAAE,IAAmC;QACvH,OAAO,IAAI,YAAY,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC,YAAY,CAAC;IAC7D,CAAC;IAoDD,YAAY,IAAY,EAAE,WAAkD,EAAE,IAAmC;QAC7G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4C,CAAC;YAC3D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;SACpD;aAAM;YACH,MAAM,IAAI,GAAG,WAA2C,CAAC;YACzD,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACpD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;;AA3GL,oCA4GC;AA9FG,gBAAgB;AACO,yBAAY,GAAG,4CAA4C,CAAC"}
+{"version":3,"file":"postgresRole.js","sourceRoot":"","sources":["../postgresRole.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAGzC,yCAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8GG;AACH,MAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IACnD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyB,EAAE,IAAmC;QACvH,OAAO,IAAI,YAAY,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC,YAAY,CAAC;IAC7D,CAAC;IAoDD,YAAY,IAAY,EAAE,WAAkD,EAAE,IAAmC;QAC7G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4C,CAAC;YAC3D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;SACpD;aAAM;YACH,MAAM,IAAI,GAAG,WAA2C,CAAC;YACzD,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACpD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;;AA3GL,oCA4GC;AA9FG,gBAAgB;AACO,yBAAY,GAAG,4CAA4C,CAAC"}

package/types/input.d.ts

@@ -17711,7 +17711,8 @@ export interface PostgresBranchSpec {
     isProtected?: pulumi.Input<boolean>;
     /**
      * Explicitly disable expiration. When set to true, the branch will not expire.
-     * If set to false, the request is invalid; provide either ttl or expireTime instead
+     * If set to false, the request is invalid; provide either ttl or expireTime instead.
+     * Mutually exclusive with `expireTime` and `ttl`. When updating, use `spec.expiration` in the update_mask
      */
     noExpiry?: pulumi.Input<boolean>;
     /**
@@ -17728,11 +17729,18 @@ export interface PostgresBranchSpec {
      */
     sourceBranchTime?: pulumi.Input<string>;
     /**
-     * Relative time-to-live duration. When set, the branch will expire at creationTime + ttl
+     * Relative time-to-live duration. When set, the branch will expire at creationTime + ttl.
+     * Mutually exclusive with `expireTime` and `noExpiry`. When updating, use `spec.expiration` in the update_mask
      */
     ttl?: pulumi.Input<string>;
 }
 export interface PostgresBranchStatus {
+    /**
+     * The ID to use for the Branch. This becomes the final component of the branch's resource name.
+     * The ID is required and must be 1-63 characters long, start with a lowercase letter, and contain only lowercase letters, numbers, and hyphens.
+     * For example, `development` becomes `projects/my-app/branches/development`
+     */
+    branchId?: pulumi.Input<string>;
     /**
      * (string) - The branch's state, indicating if it is initializing, ready for use, or archived. Possible values are: `ARCHIVED`, `IMPORTING`, `INIT`, `READY`, `RESETTING`
      */
@@ -17804,6 +17812,11 @@ export interface PostgresCatalogStatus {
      * (string) - The resource path of the branch associated with the catalog.
      */
     branch?: pulumi.Input<string>;
+    /**
+     * The ID in the Unity Catalog.
+     * It becomes the full resource name, for example "myCatalog" becomes "catalogs/my_catalog"
+     */
+    catalogId?: pulumi.Input<string>;
     /**
      * (string) - The name of the Postgres database associated with the catalog
      */
@@ -17824,6 +17837,17 @@ export interface PostgresDatabaseSpec {
     role?: pulumi.Input<string>;
 }
 export interface PostgresDatabaseStatus {
+    /**
+     * The ID to use for the Database, which will become the final component of
+     * the database's resource name.
+     * This ID becomes the database name in postgres.
+     *
+     * This value should be 4-63 characters, and only use characters available in DNS names,
+     * as defined by RFC-1123
+     *
+     * If databaseId is not specified in the request, it is generated automatically
+     */
+    databaseId?: pulumi.Input<string>;
     postgresDatabase?: pulumi.Input<string>;
     role?: pulumi.Input<string>;
 }
@@ -17835,7 +17859,8 @@ export interface PostgresEndpointProviderConfig {
 }
 export interface PostgresEndpointSpec {
     /**
-     * (number) - The maximum number of Compute Units
+     * (number) - The maximum number of Compute Units. The maximum value is 64.
+     * The difference between the minimum and maximum Compute Units (max - min) must not exceed 16
      */
     autoscalingLimitMaxCu?: pulumi.Input<number>;
     /**
@@ -17859,7 +17884,8 @@ export interface PostgresEndpointSpec {
     group?: pulumi.Input<inputs.PostgresEndpointSpecGroup>;
     /**
      * When set to true, explicitly disables automatic suspension (never suspend).
-     * Should be set to true when provided
+     * Should be set to true when provided.
+     * Mutually exclusive with `suspendTimeoutDuration`. When updating, use `spec.suspension` in the update_mask
      */
     noSuspension?: pulumi.Input<boolean>;
     /**
@@ -17890,7 +17916,8 @@ export interface PostgresEndpointSpecSettings {
 }
 export interface PostgresEndpointStatus {
     /**
-     * (number) - The maximum number of Compute Units
+     * (number) - The maximum number of Compute Units. The maximum value is 64.
+     * The difference between the minimum and maximum Compute Units (max - min) must not exceed 16
      */
     autoscalingLimitMaxCu?: pulumi.Input<number>;
     /**
@@ -17908,6 +17935,12 @@ export interface PostgresEndpointStatus {
      * console action
      */
     disabled?: pulumi.Input<boolean>;
+    /**
+     * The ID to use for the Endpoint. This becomes the final component of the endpoint's resource name.
+     * The ID is required and must be 1-63 characters long, start with a lowercase letter, and contain only lowercase letters, numbers, and hyphens.
+     * For example, `primary` becomes `projects/my-app/branches/development/endpoints/primary`
+     */
+    endpointId?: pulumi.Input<string>;
     /**
      * (string) - The endpoint type. A branch can only have one READ_WRITE endpoint. Possible values are: `ENDPOINT_TYPE_READ_ONLY`, `ENDPOINT_TYPE_READ_WRITE`
      */
@@ -18048,7 +18081,8 @@ export interface PostgresProjectSpecDefaultEndpointSettings {
     autoscalingLimitMinCu?: pulumi.Input<number>;
     /**
      * When set to true, explicitly disables automatic suspension (never suspend).
-     * Should be set to true when provided
+     * Should be set to true when provided.
+     * Mutually exclusive with `suspendTimeoutDuration`. When updating, use `spec.project_default_settings.suspension` in the update_mask
      */
     noSuspension?: pulumi.Input<boolean>;
     /**
@@ -18059,7 +18093,8 @@ export interface PostgresProjectSpecDefaultEndpointSettings {
     }>;
     /**
      * Duration of inactivity after which the compute endpoint is automatically suspended.
-     * If specified should be between 60s and 604800s (1 minute to 1 week)
+     * If specified should be between 60s and 604800s (1 minute to 1 week).
+     * Mutually exclusive with `noSuspension`. When updating, use `spec.project_default_settings.suspension` in the update_mask
      */
     suspendTimeoutDuration?: pulumi.Input<string>;
 }
@@ -18104,6 +18139,12 @@ export interface PostgresProjectStatus {
      * (integer) - The effective major Postgres version number
      */
     pgVersion?: pulumi.Input<number>;
+    /**
+     * The ID to use for the Project. This becomes the final component of the project's resource name.
+     * The ID is required and must be 1-63 characters long, start with a lowercase letter, and contain only lowercase letters, numbers, and hyphens.
+     * For example, `my-app` becomes `projects/my-app`
+     */
+    projectId?: pulumi.Input<string>;
     /**
      * (integer) - The current space occupied by the project in storage
      */
@@ -18130,7 +18171,8 @@ export interface PostgresProjectStatusDefaultEndpointSettings {
     autoscalingLimitMinCu?: pulumi.Input<number>;
     /**
      * When set to true, explicitly disables automatic suspension (never suspend).
-     * Should be set to true when provided
+     * Should be set to true when provided.
+     * Mutually exclusive with `suspendTimeoutDuration`. When updating, use `spec.project_default_settings.suspension` in the update_mask
      */
     noSuspension?: pulumi.Input<boolean>;
     /**
@@ -18141,7 +18183,8 @@ export interface PostgresProjectStatusDefaultEndpointSettings {
     }>;
     /**
      * Duration of inactivity after which the compute endpoint is automatically suspended.
-     * If specified should be between 60s and 604800s (1 minute to 1 week)
+     * If specified should be between 60s and 604800s (1 minute to 1 week).
+     * Mutually exclusive with `noSuspension`. When updating, use `spec.project_default_settings.suspension` in the update_mask
      */
     suspendTimeoutDuration?: pulumi.Input<string>;
 }
@@ -18169,6 +18212,17 @@ export interface PostgresRoleStatus {
     identityType?: pulumi.Input<string>;
     membershipRoles?: pulumi.Input<pulumi.Input<string>[]>;
     postgresRole?: pulumi.Input<string>;
+    /**
+     * The ID to use for the Role, which will become the final component of
+     * the role's resource name.
+     * This ID becomes the role in Postgres.
+     *
+     * This value should be 4-63 characters, and valid characters
+     * are lowercase letters, numbers, and hyphens, as defined by RFC 1123.
+     *
+     * If roleId is not specified in the request, it is generated automatically
+     */
+    roleId?: pulumi.Input<string>;
 }
 export interface PostgresRoleStatusAttributes {
     bypassrls?: pulumi.Input<boolean>;
@@ -18287,6 +18341,10 @@ export interface PostgresSyncedTableStatus {
      * (string) - ID of the associated pipeline
      */
     pipelineId?: pulumi.Input<string>;
+    /**
+     * (string) - The full resource name of the project associated with the table.
+     */
+    project?: pulumi.Input<string>;
     /**
      * (string) - The current phase of the data synchronization pipeline. Possible values are: `PROVISIONING_PHASE_INDEX_SCAN`, `PROVISIONING_PHASE_INDEX_SORT`, `PROVISIONING_PHASE_MAIN`
      */