@pulumi/databricks 1.99.0-alpha.1783234126 → 1.99.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/budget.d.ts +35 -0
- package/budget.d.ts.map +1 -1
- package/budget.js +35 -0
- package/budget.js.map +1 -1
- package/cluster.d.ts +12 -0
- package/cluster.d.ts.map +1 -1
- package/cluster.js +2 -0
- package/cluster.js.map +1 -1
- package/dataClassificationCatalogConfig.d.ts +21 -0
- package/dataClassificationCatalogConfig.d.ts.map +1 -1
- package/dataClassificationCatalogConfig.js +2 -0
- package/dataClassificationCatalogConfig.js.map +1 -1
- package/getDataClassificationCatalogConfig.d.ts +7 -0
- package/getDataClassificationCatalogConfig.d.ts.map +1 -1
- package/getDataClassificationCatalogConfig.js.map +1 -1
- package/getGroup.d.ts +23 -5
- package/getGroup.d.ts.map +1 -1
- package/getGroup.js +4 -2
- package/getGroup.js.map +1 -1
- package/getSecretUc.d.ts +42 -11
- package/getSecretUc.d.ts.map +1 -1
- package/getSecretUc.js +42 -2
- package/getSecretUc.js.map +1 -1
- package/getSecretUcs.d.ts +50 -19
- package/getSecretUcs.d.ts.map +1 -1
- package/getSecretUcs.js +44 -4
- package/getSecretUcs.js.map +1 -1
- package/mwsNccPrivateEndpointRule.d.ts +25 -45
- package/mwsNccPrivateEndpointRule.d.ts.map +1 -1
- package/mwsNccPrivateEndpointRule.js +14 -10
- package/mwsNccPrivateEndpointRule.js.map +1 -1
- package/mwsWorkspaces.d.ts +3 -3
- package/package.json +2 -2
- package/postgresDatabase.d.ts +65 -0
- package/postgresDatabase.d.ts.map +1 -1
- package/postgresDatabase.js +65 -0
- package/postgresDatabase.js.map +1 -1
- package/postgresRole.d.ts +82 -0
- package/postgresRole.d.ts.map +1 -1
- package/postgresRole.js +82 -0
- package/postgresRole.js.map +1 -1
- package/secretUc.d.ts +3 -19
- package/secretUc.d.ts.map +1 -1
- package/secretUc.js +3 -5
- package/secretUc.js.map +1 -1
- package/types/input.d.ts +318 -42
- package/types/input.d.ts.map +1 -1
- package/types/output.d.ts +840 -199
- package/types/output.d.ts.map +1 -1
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"postgresDatabase.d.ts","sourceRoot":"","sources":["../postgresDatabase.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAG1C
|
|
1
|
+
{"version":3,"file":"postgresDatabase.d.ts","sourceRoot":"","sources":["../postgresDatabase.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAG1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsKG;AACH,qBAAa,gBAAiB,SAAQ,MAAM,CAAC,cAAc;IACvD;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,qBAAqB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,gBAAgB;IAOlJ;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,gBAAgB;IAO3D;;OAEG;IACH,SAAgC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClE;;OAEG;IACH,SAAwB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D;;;OAGG;IACH,SAAgC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D;;;OAGG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD;;OAEG;IACH,SAAwB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IAC9F;;;OAGG;IACH,SAAwB,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC5E;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC1E;;OAEG;IACH,SAAgC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACtF;;OAEG;IACH,SAAgC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAElE;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAiC5F;AAED;;GAEG;AACH,MAAM,WAAW,qBAAqB;IAClC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,8BAA8B,GAAG,SAAS,CAAC,CAAC;IACjF;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACpD;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;IAC7D;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IACjE;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACjD;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACjC;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,8BAA8B,GAAG,SAAS,CAAC,CAAC;IACjF;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACpD;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,oBAAoB,GAAG,SAAS,CAAC,CAAC;CAChE"}
|
package/postgresDatabase.js
CHANGED
|
@@ -35,6 +35,71 @@ const utilities = __importStar(require("./utilities"));
|
|
|
35
35
|
*
|
|
36
36
|
* ## Example Usage
|
|
37
37
|
*
|
|
38
|
+
* ### Managing Implicitly Created Database
|
|
39
|
+
*
|
|
40
|
+
* A database named `databricks-postgres` (Postgres name `databricksPostgres`) is implicitly created on every branch. Since Pulumi is declarative, managing an already-existing resource requires `replaceExisting = true`: it lets Pulumi represent the implicitly created database in Pulumi state and immediately apply the provided configuration to it.
|
|
41
|
+
*
|
|
42
|
+
* `replaceExisting = true` only affects the initial adoption. Once the database is in Pulumi state, it is managed like any other resource: removing it from your configuration and applying **deletes the actual database** (and its data), not just the state entry. This is unlike `databricks.PostgresBranch`, whose deletion is instead controlled by its parent project. To stop managing the database without deleting it, remove it from state with `terraform state rm` before removing it from your configuration.
|
|
43
|
+
*
|
|
44
|
+
* `spec.role` is optional: omit it to keep the database's existing owner (as shown below). When you do set it — to change ownership — it must reference a role in the same branch, written as `<branch-name>/roles/<role_id>`.
|
|
45
|
+
*
|
|
46
|
+
* ```typescript
|
|
47
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
48
|
+
* import * as databricks from "@pulumi/databricks";
|
|
49
|
+
*
|
|
50
|
+
* const _this = new databricks.PostgresProject("this", {
|
|
51
|
+
* projectId: "my-project",
|
|
52
|
+
* spec: {
|
|
53
|
+
* pgVersion: 17,
|
|
54
|
+
* displayName: "My Project",
|
|
55
|
+
* },
|
|
56
|
+
* });
|
|
57
|
+
* const production = new databricks.PostgresBranch("production", {
|
|
58
|
+
* branchId: "production",
|
|
59
|
+
* parent: _this.name,
|
|
60
|
+
* spec: {
|
|
61
|
+
* noExpiry: true,
|
|
62
|
+
* },
|
|
63
|
+
* replaceExisting: true,
|
|
64
|
+
* });
|
|
65
|
+
* const databricksPostgres = new databricks.PostgresDatabase("databricks_postgres", {
|
|
66
|
+
* databaseId: "databricks-postgres",
|
|
67
|
+
* parent: production.name,
|
|
68
|
+
* spec: {
|
|
69
|
+
* postgresDatabase: "databricks_postgres",
|
|
70
|
+
* },
|
|
71
|
+
* replaceExisting: true,
|
|
72
|
+
* });
|
|
73
|
+
* ```
|
|
74
|
+
*
|
|
75
|
+
* ### Managing a Database Inherited by a Child Branch
|
|
76
|
+
*
|
|
77
|
+
* A child branch created from a source branch (via `spec.source_branch`) shares the source's storage through copy-on-write, so every database on the source branch — including the implicit `databricks-postgres` database — already exists on the child at the branch point. These inherited databases are not created by Pulumi, so managing one requires `replaceExisting = true`, exactly as for the implicitly created database above.
|
|
78
|
+
*
|
|
79
|
+
* You typically adopt an inherited database when you want to manage its configuration (for example, transfer ownership via `spec.role`) on the child branch independently of the source.
|
|
80
|
+
*
|
|
81
|
+
* ```typescript
|
|
82
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
83
|
+
* import * as databricks from "@pulumi/databricks";
|
|
84
|
+
*
|
|
85
|
+
* const child = new databricks.PostgresBranch("child", {
|
|
86
|
+
* branchId: "feature-x",
|
|
87
|
+
* parent: _this.name,
|
|
88
|
+
* spec: {
|
|
89
|
+
* sourceBranch: production.name,
|
|
90
|
+
* noExpiry: true,
|
|
91
|
+
* },
|
|
92
|
+
* });
|
|
93
|
+
* const inherited = new databricks.PostgresDatabase("inherited", {
|
|
94
|
+
* databaseId: "databricks-postgres",
|
|
95
|
+
* parent: child.name,
|
|
96
|
+
* spec: {
|
|
97
|
+
* postgresDatabase: "databricks_postgres",
|
|
98
|
+
* },
|
|
99
|
+
* replaceExisting: true,
|
|
100
|
+
* });
|
|
101
|
+
* ```
|
|
102
|
+
*
|
|
38
103
|
* ### Database Owned by a Specific Role
|
|
39
104
|
*
|
|
40
105
|
* Assign ownership to a role you manage alongside the database. The Postgres database will be created with the specified role as its owner.
|
package/postgresDatabase.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"postgresDatabase.js","sourceRoot":"","sources":["../postgresDatabase.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAGzC,uDAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"postgresDatabase.js","sourceRoot":"","sources":["../postgresDatabase.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAGzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsKG;AACH,MAAa,gBAAiB,SAAQ,MAAM,CAAC,cAAc;IACvD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA6B,EAAE,IAAmC;QAC3H,OAAO,IAAI,gBAAgB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,oDAAoD,CAAC;IAE3F;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,gBAAgB,CAAC,YAAY,CAAC;IACjE,CAAC;IAkDD,YAAY,IAAY,EAAE,WAA0D,EAAE,IAAmC;QACrH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAgD,CAAC;YAC/D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;SACpD;aAAM;YACH,MAAM,IAAI,GAAG,WAA+C,CAAC;YAC7D,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACpD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,gBAAgB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;;AA3GL,4CA4GC"}
|
package/postgresRole.d.ts
CHANGED
|
@@ -8,6 +8,88 @@ import * as outputs from "./types/output";
|
|
|
8
8
|
*
|
|
9
9
|
* ## Example Usage
|
|
10
10
|
*
|
|
11
|
+
* ### Managing Implicitly Created Owner Role
|
|
12
|
+
*
|
|
13
|
+
* An owner role is implicitly created on every branch, starting with `DATABRICKS_SUPERUSER` membership. Its `roleId` is derived from the identity that created the branch:
|
|
14
|
+
*
|
|
15
|
+
* - **User:** the part of the email before `@`, lowercased, with dots, underscores, and any other non-alphanumeric characters replaced by hyphens. For example, `Jane.Doe@databricks.com` becomes `jane-doe`.
|
|
16
|
+
* - **Service principal:** `sp-` followed by the application ID (for example, `sp-00000000-0000-0000-0000-000000000000`).
|
|
17
|
+
*
|
|
18
|
+
* If you're unsure of the exact value, find the role in the Lakebase UI (or list the branch's roles with the Postgres API) and read its `roleId` rather than deriving it by hand. Since Pulumi is declarative, managing an already-existing resource requires `replaceExisting = true`: it lets Pulumi represent the implicitly created role in Pulumi state and immediately apply the provided configuration to it.
|
|
19
|
+
*
|
|
20
|
+
* `replaceExisting = true` only affects the initial adoption. Once the role is in Pulumi state, it is managed like any other resource: removing it from your configuration and applying **deletes the actual role**, not just the state entry. This is unlike `databricks.PostgresBranch`, whose deletion is instead controlled by its parent project. To stop managing the role without deleting it, remove it from state with `terraform state rm` before removing it from your configuration — this is also required for the implicit owner role, which cannot be deleted while it still owns objects on the branch.
|
|
21
|
+
*
|
|
22
|
+
* `spec.membership_roles` overwrites the role's memberships on every apply. The list you provide fully replaces the previous one, it isn't merged. Keep `DATABRICKS_SUPERUSER` in the list; leaving it out removes all of the role's memberships.
|
|
23
|
+
*
|
|
24
|
+
* ```typescript
|
|
25
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
26
|
+
* import * as databricks from "@pulumi/databricks";
|
|
27
|
+
*
|
|
28
|
+
* const _this = new databricks.PostgresProject("this", {
|
|
29
|
+
* projectId: "my-project",
|
|
30
|
+
* spec: {
|
|
31
|
+
* pgVersion: 17,
|
|
32
|
+
* displayName: "My Project",
|
|
33
|
+
* },
|
|
34
|
+
* });
|
|
35
|
+
* const production = new databricks.PostgresBranch("production", {
|
|
36
|
+
* branchId: "production",
|
|
37
|
+
* parent: _this.name,
|
|
38
|
+
* spec: {
|
|
39
|
+
* noExpiry: true,
|
|
40
|
+
* },
|
|
41
|
+
* replaceExisting: true,
|
|
42
|
+
* });
|
|
43
|
+
* const owner = new databricks.PostgresRole("owner", {
|
|
44
|
+
* roleId: "jane-doe",
|
|
45
|
+
* parent: production.name,
|
|
46
|
+
* spec: {
|
|
47
|
+
* postgresRole: "jane.doe@databricks.com",
|
|
48
|
+
* membershipRoles: ["DATABRICKS_SUPERUSER"],
|
|
49
|
+
* attributes: {
|
|
50
|
+
* createdb: true,
|
|
51
|
+
* createrole: true,
|
|
52
|
+
* bypassrls: true,
|
|
53
|
+
* },
|
|
54
|
+
* },
|
|
55
|
+
* replaceExisting: true,
|
|
56
|
+
* });
|
|
57
|
+
* ```
|
|
58
|
+
*
|
|
59
|
+
* ### Managing a Role Inherited by a Child Branch
|
|
60
|
+
*
|
|
61
|
+
* A child branch created from a source branch (via `spec.source_branch`) shares the source's storage through copy-on-write, so every role on the source branch — including the implicit owner role — already exists on the child at the branch point. These inherited roles are not created by Pulumi, so managing one requires `replaceExisting = true`, exactly as for the implicitly created owner role above.
|
|
62
|
+
*
|
|
63
|
+
* You typically adopt an inherited role when you want to manage its configuration (for example, its `membershipRoles` or `attributes`) on the child branch independently of the source.
|
|
64
|
+
*
|
|
65
|
+
* ```typescript
|
|
66
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
67
|
+
* import * as databricks from "@pulumi/databricks";
|
|
68
|
+
*
|
|
69
|
+
* const child = new databricks.PostgresBranch("child", {
|
|
70
|
+
* branchId: "feature-x",
|
|
71
|
+
* parent: _this.name,
|
|
72
|
+
* spec: {
|
|
73
|
+
* sourceBranch: production.name,
|
|
74
|
+
* noExpiry: true,
|
|
75
|
+
* },
|
|
76
|
+
* });
|
|
77
|
+
* const inheritedOwner = new databricks.PostgresRole("inherited_owner", {
|
|
78
|
+
* roleId: "jane-doe",
|
|
79
|
+
* parent: child.name,
|
|
80
|
+
* spec: {
|
|
81
|
+
* postgresRole: "jane.doe@databricks.com",
|
|
82
|
+
* membershipRoles: ["DATABRICKS_SUPERUSER"],
|
|
83
|
+
* attributes: {
|
|
84
|
+
* createdb: true,
|
|
85
|
+
* createrole: true,
|
|
86
|
+
* bypassrls: true,
|
|
87
|
+
* },
|
|
88
|
+
* },
|
|
89
|
+
* replaceExisting: true,
|
|
90
|
+
* });
|
|
91
|
+
* ```
|
|
92
|
+
*
|
|
11
93
|
* ### Role Backed by a Databricks User Identity
|
|
12
94
|
*
|
|
13
95
|
* Create a role that is authenticated as a specific Databricks workspace user via OAuth. `authMethod` is left unset and defaults to `LAKEBASE_OAUTH_V1` for managed identities.
|
package/postgresRole.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"postgresRole.d.ts","sourceRoot":"","sources":["../postgresRole.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAG1C
|
|
1
|
+
{"version":3,"file":"postgresRole.d.ts","sourceRoot":"","sources":["../postgresRole.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAG1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkMG;AACH,qBAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IACnD;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,iBAAiB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,YAAY;IAO1I;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,YAAY;IAOvD;;OAEG;IACH,SAAgC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClE;;;OAGG;IACH,SAAgC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5D;;;OAGG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD;;OAEG;IACH,SAAwB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAC1F;;;;;;;;;OASG;IACH,SAAwB,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IAC5E;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACtE;;OAEG;IACH,SAAgC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAClF;;OAEG;IACH,SAAgC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAElE;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAiCxF;AAED;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAC9B;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IAC7E;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACpD;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IACzD;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,GAAG,SAAS,CAAC,CAAC;IAC7D;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CACjD;AAED;;GAEG;AACH,MAAM,WAAW,gBAAgB;IAC7B;;;OAGG;IACH,MAAM,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC7B;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,0BAA0B,GAAG,SAAS,CAAC,CAAC;IAC7E;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC;IACpD;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;CAC5D"}
|
package/postgresRole.js
CHANGED
|
@@ -35,6 +35,88 @@ const utilities = __importStar(require("./utilities"));
|
|
|
35
35
|
*
|
|
36
36
|
* ## Example Usage
|
|
37
37
|
*
|
|
38
|
+
* ### Managing Implicitly Created Owner Role
|
|
39
|
+
*
|
|
40
|
+
* An owner role is implicitly created on every branch, starting with `DATABRICKS_SUPERUSER` membership. Its `roleId` is derived from the identity that created the branch:
|
|
41
|
+
*
|
|
42
|
+
* - **User:** the part of the email before `@`, lowercased, with dots, underscores, and any other non-alphanumeric characters replaced by hyphens. For example, `Jane.Doe@databricks.com` becomes `jane-doe`.
|
|
43
|
+
* - **Service principal:** `sp-` followed by the application ID (for example, `sp-00000000-0000-0000-0000-000000000000`).
|
|
44
|
+
*
|
|
45
|
+
* If you're unsure of the exact value, find the role in the Lakebase UI (or list the branch's roles with the Postgres API) and read its `roleId` rather than deriving it by hand. Since Pulumi is declarative, managing an already-existing resource requires `replaceExisting = true`: it lets Pulumi represent the implicitly created role in Pulumi state and immediately apply the provided configuration to it.
|
|
46
|
+
*
|
|
47
|
+
* `replaceExisting = true` only affects the initial adoption. Once the role is in Pulumi state, it is managed like any other resource: removing it from your configuration and applying **deletes the actual role**, not just the state entry. This is unlike `databricks.PostgresBranch`, whose deletion is instead controlled by its parent project. To stop managing the role without deleting it, remove it from state with `terraform state rm` before removing it from your configuration — this is also required for the implicit owner role, which cannot be deleted while it still owns objects on the branch.
|
|
48
|
+
*
|
|
49
|
+
* `spec.membership_roles` overwrites the role's memberships on every apply. The list you provide fully replaces the previous one, it isn't merged. Keep `DATABRICKS_SUPERUSER` in the list; leaving it out removes all of the role's memberships.
|
|
50
|
+
*
|
|
51
|
+
* ```typescript
|
|
52
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
53
|
+
* import * as databricks from "@pulumi/databricks";
|
|
54
|
+
*
|
|
55
|
+
* const _this = new databricks.PostgresProject("this", {
|
|
56
|
+
* projectId: "my-project",
|
|
57
|
+
* spec: {
|
|
58
|
+
* pgVersion: 17,
|
|
59
|
+
* displayName: "My Project",
|
|
60
|
+
* },
|
|
61
|
+
* });
|
|
62
|
+
* const production = new databricks.PostgresBranch("production", {
|
|
63
|
+
* branchId: "production",
|
|
64
|
+
* parent: _this.name,
|
|
65
|
+
* spec: {
|
|
66
|
+
* noExpiry: true,
|
|
67
|
+
* },
|
|
68
|
+
* replaceExisting: true,
|
|
69
|
+
* });
|
|
70
|
+
* const owner = new databricks.PostgresRole("owner", {
|
|
71
|
+
* roleId: "jane-doe",
|
|
72
|
+
* parent: production.name,
|
|
73
|
+
* spec: {
|
|
74
|
+
* postgresRole: "jane.doe@databricks.com",
|
|
75
|
+
* membershipRoles: ["DATABRICKS_SUPERUSER"],
|
|
76
|
+
* attributes: {
|
|
77
|
+
* createdb: true,
|
|
78
|
+
* createrole: true,
|
|
79
|
+
* bypassrls: true,
|
|
80
|
+
* },
|
|
81
|
+
* },
|
|
82
|
+
* replaceExisting: true,
|
|
83
|
+
* });
|
|
84
|
+
* ```
|
|
85
|
+
*
|
|
86
|
+
* ### Managing a Role Inherited by a Child Branch
|
|
87
|
+
*
|
|
88
|
+
* A child branch created from a source branch (via `spec.source_branch`) shares the source's storage through copy-on-write, so every role on the source branch — including the implicit owner role — already exists on the child at the branch point. These inherited roles are not created by Pulumi, so managing one requires `replaceExisting = true`, exactly as for the implicitly created owner role above.
|
|
89
|
+
*
|
|
90
|
+
* You typically adopt an inherited role when you want to manage its configuration (for example, its `membershipRoles` or `attributes`) on the child branch independently of the source.
|
|
91
|
+
*
|
|
92
|
+
* ```typescript
|
|
93
|
+
* import * as pulumi from "@pulumi/pulumi";
|
|
94
|
+
* import * as databricks from "@pulumi/databricks";
|
|
95
|
+
*
|
|
96
|
+
* const child = new databricks.PostgresBranch("child", {
|
|
97
|
+
* branchId: "feature-x",
|
|
98
|
+
* parent: _this.name,
|
|
99
|
+
* spec: {
|
|
100
|
+
* sourceBranch: production.name,
|
|
101
|
+
* noExpiry: true,
|
|
102
|
+
* },
|
|
103
|
+
* });
|
|
104
|
+
* const inheritedOwner = new databricks.PostgresRole("inherited_owner", {
|
|
105
|
+
* roleId: "jane-doe",
|
|
106
|
+
* parent: child.name,
|
|
107
|
+
* spec: {
|
|
108
|
+
* postgresRole: "jane.doe@databricks.com",
|
|
109
|
+
* membershipRoles: ["DATABRICKS_SUPERUSER"],
|
|
110
|
+
* attributes: {
|
|
111
|
+
* createdb: true,
|
|
112
|
+
* createrole: true,
|
|
113
|
+
* bypassrls: true,
|
|
114
|
+
* },
|
|
115
|
+
* },
|
|
116
|
+
* replaceExisting: true,
|
|
117
|
+
* });
|
|
118
|
+
* ```
|
|
119
|
+
*
|
|
38
120
|
* ### Role Backed by a Databricks User Identity
|
|
39
121
|
*
|
|
40
122
|
* Create a role that is authenticated as a specific Databricks workspace user via OAuth. `authMethod` is left unset and defaults to `LAKEBASE_OAUTH_V1` for managed identities.
|
package/postgresRole.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"postgresRole.js","sourceRoot":"","sources":["../postgresRole.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAGzC,uDAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"postgresRole.js","sourceRoot":"","sources":["../postgresRole.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAGzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkMG;AACH,MAAa,YAAa,SAAQ,MAAM,CAAC,cAAc;IACnD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAyB,EAAE,IAAmC;QACvH,OAAO,IAAI,YAAY,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,4CAA4C,CAAC;IAEnF;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,YAAY,CAAC,YAAY,CAAC;IAC7D,CAAC;IAwDD,YAAY,IAAY,EAAE,WAAkD,EAAE,IAAmC;QAC7G,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA4C,CAAC;YAC3D,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;SACpD;aAAM;YACH,MAAM,IAAI,GAAG,WAA2C,CAAC;YACzD,IAAI,IAAI,EAAE,MAAM,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACzC,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;aACzD;YACD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC7C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACpD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,YAAY,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjE,CAAC;;AAjHL,oCAkHC"}
|
package/secretUc.d.ts
CHANGED
|
@@ -2,7 +2,9 @@ import * as pulumi from "@pulumi/pulumi";
|
|
|
2
2
|
import * as inputs from "./types/input";
|
|
3
3
|
import * as outputs from "./types/output";
|
|
4
4
|
/**
|
|
5
|
-
* [](https://docs.databricks.com/aws/en/release-notes/release-types)
|
|
6
|
+
*
|
|
7
|
+
* [API Documentation](https://docs.databricks.com/api/workspace/secretsuc)
|
|
6
8
|
*
|
|
7
9
|
* The Secret resource allows you to manage secrets in Unity Catalog. Secrets provide a secure way to store and access sensitive information such as credentials, API keys, and tokens within Unity Catalog.
|
|
8
10
|
*
|
|
@@ -44,11 +46,6 @@ export declare class SecretUc extends pulumi.CustomResource {
|
|
|
44
46
|
* when multiple copies of the Pulumi SDK have been loaded into the same process.
|
|
45
47
|
*/
|
|
46
48
|
static isInstance(obj: any): obj is SecretUc;
|
|
47
|
-
/**
|
|
48
|
-
* (boolean) - Indicates whether the principal is limited to retrieving metadata for the associated object
|
|
49
|
-
* through the **BROWSE** privilege when **include_browse** is enabled in the request
|
|
50
|
-
*/
|
|
51
|
-
readonly browseOnly: pulumi.Output<boolean>;
|
|
52
49
|
/**
|
|
53
50
|
* The name of the catalog where the schema and the secret reside
|
|
54
51
|
*/
|
|
@@ -81,10 +78,6 @@ export declare class SecretUc extends pulumi.CustomResource {
|
|
|
81
78
|
* does not trigger any automatic actions or affect the secret's lifecycle
|
|
82
79
|
*/
|
|
83
80
|
readonly expireTime: pulumi.Output<string | undefined>;
|
|
84
|
-
/**
|
|
85
|
-
* (string)
|
|
86
|
-
*/
|
|
87
|
-
readonly externalSecretId: pulumi.Output<string>;
|
|
88
81
|
/**
|
|
89
82
|
* (string) - The three-level (fully qualified) name of the secret, in the form of **catalog_name.schema_name.secret_name**
|
|
90
83
|
*/
|
|
@@ -138,11 +131,6 @@ export declare class SecretUc extends pulumi.CustomResource {
|
|
|
138
131
|
* Input properties used for looking up and filtering SecretUc resources.
|
|
139
132
|
*/
|
|
140
133
|
export interface SecretUcState {
|
|
141
|
-
/**
|
|
142
|
-
* (boolean) - Indicates whether the principal is limited to retrieving metadata for the associated object
|
|
143
|
-
* through the **BROWSE** privilege when **include_browse** is enabled in the request
|
|
144
|
-
*/
|
|
145
|
-
browseOnly?: pulumi.Input<boolean | undefined>;
|
|
146
134
|
/**
|
|
147
135
|
* The name of the catalog where the schema and the secret reside
|
|
148
136
|
*/
|
|
@@ -175,10 +163,6 @@ export interface SecretUcState {
|
|
|
175
163
|
* does not trigger any automatic actions or affect the secret's lifecycle
|
|
176
164
|
*/
|
|
177
165
|
expireTime?: pulumi.Input<string | undefined>;
|
|
178
|
-
/**
|
|
179
|
-
* (string)
|
|
180
|
-
*/
|
|
181
|
-
externalSecretId?: pulumi.Input<string | undefined>;
|
|
182
166
|
/**
|
|
183
167
|
* (string) - The three-level (fully qualified) name of the secret, in the form of **catalog_name.schema_name.secret_name**
|
|
184
168
|
*/
|
package/secretUc.d.ts.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"secretUc.d.ts","sourceRoot":"","sources":["../secretUc.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAG1C
|
|
1
|
+
{"version":3,"file":"secretUc.d.ts","sourceRoot":"","sources":["../secretUc.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,eAAe,CAAC;AACxC,OAAO,KAAK,OAAO,MAAM,gBAAgB,CAAC;AAG1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,qBAAa,QAAS,SAAQ,MAAM,CAAC,cAAc;IAC/C;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,QAAQ;IAOlI;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,QAAQ;IAOnD;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC3D;;OAEG;IACH,SAAwB,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnE;;OAEG;IACH,SAAgC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClE;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;;OAGG;IACH,SAAgC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtE;;;OAGG;IACH,SAAgC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtE;;;;OAIG;IACH,SAAwB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACtE;;OAEG;IACH,SAAgC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAChE;;OAEG;IACH,SAAgC,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnE;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD;;;OAGG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACrD;;OAEG;IACH,SAAwB,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IACtF;;OAEG;IACH,SAAwB,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D;;OAEG;IACH,SAAgC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClE;;OAEG;IACH,SAAgC,SAAS,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACjE;;;;;OAKG;IACH,SAAwB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAErD;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CAqDpF;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC1B;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5C;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IACzE;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC7C;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;CAC5C;AAED;;GAEG;AACH,MAAM,WAAW,YAAY;IACzB;;OAEG;IACH,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAClC;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC3C;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACzC;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAAC;IACzE;;OAEG;IACH,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjC;;;;;OAKG;IACH,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;CAC/B"}
|
package/secretUc.js
CHANGED
|
@@ -29,7 +29,9 @@ exports.SecretUc = void 0;
|
|
|
29
29
|
const pulumi = __importStar(require("@pulumi/pulumi"));
|
|
30
30
|
const utilities = __importStar(require("./utilities"));
|
|
31
31
|
/**
|
|
32
|
-
* [](https://docs.databricks.com/aws/en/release-notes/release-types)
|
|
33
|
+
*
|
|
34
|
+
* [API Documentation](https://docs.databricks.com/api/workspace/secretsuc)
|
|
33
35
|
*
|
|
34
36
|
* The Secret resource allows you to manage secrets in Unity Catalog. Secrets provide a secure way to store and access sensitive information such as credentials, API keys, and tokens within Unity Catalog.
|
|
35
37
|
*
|
|
@@ -85,7 +87,6 @@ class SecretUc extends pulumi.CustomResource {
|
|
|
85
87
|
opts = opts || {};
|
|
86
88
|
if (opts.id) {
|
|
87
89
|
const state = argsOrState;
|
|
88
|
-
resourceInputs["browseOnly"] = state?.browseOnly;
|
|
89
90
|
resourceInputs["catalogName"] = state?.catalogName;
|
|
90
91
|
resourceInputs["comment"] = state?.comment;
|
|
91
92
|
resourceInputs["createTime"] = state?.createTime;
|
|
@@ -93,7 +94,6 @@ class SecretUc extends pulumi.CustomResource {
|
|
|
93
94
|
resourceInputs["effectiveOwner"] = state?.effectiveOwner;
|
|
94
95
|
resourceInputs["effectiveValue"] = state?.effectiveValue;
|
|
95
96
|
resourceInputs["expireTime"] = state?.expireTime;
|
|
96
|
-
resourceInputs["externalSecretId"] = state?.externalSecretId;
|
|
97
97
|
resourceInputs["fullName"] = state?.fullName;
|
|
98
98
|
resourceInputs["metastoreId"] = state?.metastoreId;
|
|
99
99
|
resourceInputs["name"] = state?.name;
|
|
@@ -123,12 +123,10 @@ class SecretUc extends pulumi.CustomResource {
|
|
|
123
123
|
resourceInputs["providerConfig"] = args?.providerConfig;
|
|
124
124
|
resourceInputs["schemaName"] = args?.schemaName;
|
|
125
125
|
resourceInputs["value"] = args?.value;
|
|
126
|
-
resourceInputs["browseOnly"] = undefined /*out*/;
|
|
127
126
|
resourceInputs["createTime"] = undefined /*out*/;
|
|
128
127
|
resourceInputs["createdBy"] = undefined /*out*/;
|
|
129
128
|
resourceInputs["effectiveOwner"] = undefined /*out*/;
|
|
130
129
|
resourceInputs["effectiveValue"] = undefined /*out*/;
|
|
131
|
-
resourceInputs["externalSecretId"] = undefined /*out*/;
|
|
132
130
|
resourceInputs["fullName"] = undefined /*out*/;
|
|
133
131
|
resourceInputs["metastoreId"] = undefined /*out*/;
|
|
134
132
|
resourceInputs["updateTime"] = undefined /*out*/;
|
package/secretUc.js.map
CHANGED
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"secretUc.js","sourceRoot":"","sources":["../secretUc.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAGzC,uDAAyC;AAEzC
|
|
1
|
+
{"version":3,"file":"secretUc.js","sourceRoot":"","sources":["../secretUc.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAGzC,uDAAyC;AAEzC;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AACH,MAAa,QAAS,SAAQ,MAAM,CAAC,cAAc;IAC/C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAqB,EAAE,IAAmC;QACnH,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,oCAAoC,CAAC;IAE3E;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,QAAQ,CAAC,YAAY,CAAC;IACzD,CAAC;IAmFD,YAAY,IAAY,EAAE,WAA0C,EAAE,IAAmC;QACrG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAwC,CAAC;YACvD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;YACvC,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,OAAO,CAAC,GAAG,KAAK,EAAE,KAAK,CAAC;SAC1C;aAAM;YACH,MAAM,IAAI,GAAG,WAAuC,CAAC;YACrD,IAAI,IAAI,EAAE,WAAW,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC9C,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;aAC9D;YACD,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,IAAI,EAAE,KAAK,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACxC,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,EAAE,KAAK,CAAC;YACtC,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACrD,cAAc,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACrD,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,aAAa,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAClD,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACnD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,QAAQ,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC7D,CAAC;;AAhKL,4BAiKC"}
|