pulumi-databricks 1.74.0a1753335781__py3-none-any.whl → 1.77.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_databricks/__init__.py +185 -12
- pulumi_databricks/_inputs.py +30467 -20225
- pulumi_databricks/access_control_rule_set.py +28 -29
- pulumi_databricks/account_federation_policy.py +473 -0
- pulumi_databricks/account_network_policy.py +74 -43
- pulumi_databricks/account_setting_v2.py +759 -0
- pulumi_databricks/aibi_dashboard_embedding_access_policy_setting.py +30 -31
- pulumi_databricks/aibi_dashboard_embedding_approved_domains_setting.py +30 -31
- pulumi_databricks/alert.py +185 -186
- pulumi_databricks/alert_v2.py +369 -211
- pulumi_databricks/app.py +315 -209
- pulumi_databricks/apps_settings_custom_template.py +531 -0
- pulumi_databricks/artifact_allowlist.py +72 -73
- pulumi_databricks/automatic_cluster_update_workspace_setting.py +30 -31
- pulumi_databricks/budget.py +84 -85
- pulumi_databricks/budget_policy.py +75 -53
- pulumi_databricks/catalog.py +544 -225
- pulumi_databricks/catalog_workspace_binding.py +82 -83
- pulumi_databricks/cluster.py +561 -683
- pulumi_databricks/cluster_policy.py +115 -116
- pulumi_databricks/compliance_security_profile_workspace_setting.py +30 -31
- pulumi_databricks/config/__init__.py +1 -1
- pulumi_databricks/config/__init__.pyi +3 -2
- pulumi_databricks/config/vars.py +40 -37
- pulumi_databricks/connection.py +346 -211
- pulumi_databricks/credential.py +262 -263
- pulumi_databricks/custom_app_integration.py +175 -176
- pulumi_databricks/dashboard.py +207 -208
- pulumi_databricks/data_quality_monitor.py +453 -0
- pulumi_databricks/data_quality_refresh.py +492 -0
- pulumi_databricks/database_database_catalog.py +437 -0
- pulumi_databricks/database_instance.py +938 -137
- pulumi_databricks/database_synced_database_table.py +589 -0
- pulumi_databricks/dbfs_file.py +87 -84
- pulumi_databricks/default_namespace_setting.py +30 -31
- pulumi_databricks/directory.py +61 -62
- pulumi_databricks/disable_legacy_access_setting.py +109 -33
- pulumi_databricks/disable_legacy_dbfs_setting.py +58 -39
- pulumi_databricks/disable_legacy_features_setting.py +62 -37
- pulumi_databricks/enhanced_security_monitoring_workspace_setting.py +30 -31
- pulumi_databricks/entitlements.py +148 -149
- pulumi_databricks/entity_tag_assignment.py +409 -0
- pulumi_databricks/external_location.py +276 -290
- pulumi_databricks/external_metadata.py +726 -0
- pulumi_databricks/feature_engineering_feature.py +480 -0
- pulumi_databricks/feature_engineering_materialized_feature.py +397 -0
- pulumi_databricks/file.py +96 -97
- pulumi_databricks/get_account_federation_policies.py +127 -0
- pulumi_databricks/get_account_federation_policy.py +214 -0
- pulumi_databricks/get_account_network_policies.py +36 -7
- pulumi_databricks/get_account_network_policy.py +33 -29
- pulumi_databricks/get_account_setting_v2.py +331 -0
- pulumi_databricks/get_alert_v2.py +100 -84
- pulumi_databricks/get_alerts_v2.py +35 -17
- pulumi_databricks/get_app.py +31 -20
- pulumi_databricks/get_apps.py +26 -15
- pulumi_databricks/get_apps_settings_custom_template.py +207 -0
- pulumi_databricks/get_apps_settings_custom_templates.py +133 -0
- pulumi_databricks/get_aws_assume_role_policy.py +27 -28
- pulumi_databricks/get_aws_bucket_policy.py +39 -40
- pulumi_databricks/get_aws_cross_account_policy.py +47 -48
- pulumi_databricks/get_aws_unity_catalog_assume_role_policy.py +35 -36
- pulumi_databricks/get_aws_unity_catalog_policy.py +35 -36
- pulumi_databricks/get_budget_policies.py +74 -11
- pulumi_databricks/get_budget_policy.py +43 -39
- pulumi_databricks/get_catalog.py +35 -19
- pulumi_databricks/get_catalogs.py +32 -14
- pulumi_databricks/get_cluster.py +41 -25
- pulumi_databricks/get_cluster_policy.py +72 -54
- pulumi_databricks/get_clusters.py +41 -25
- pulumi_databricks/get_current_config.py +23 -24
- pulumi_databricks/get_current_metastore.py +29 -13
- pulumi_databricks/get_current_user.py +17 -18
- pulumi_databricks/get_dashboards.py +34 -15
- pulumi_databricks/get_data_quality_monitor.py +210 -0
- pulumi_databricks/get_data_quality_monitors.py +143 -0
- pulumi_databricks/get_data_quality_refresh.py +270 -0
- pulumi_databricks/get_data_quality_refreshes.py +207 -0
- pulumi_databricks/get_database_database_catalog.py +176 -0
- pulumi_databricks/get_database_database_catalogs.py +120 -0
- pulumi_databricks/get_database_instance.py +274 -50
- pulumi_databricks/get_database_instances.py +35 -11
- pulumi_databricks/get_database_synced_database_table.py +225 -0
- pulumi_databricks/get_database_synced_database_tables.py +120 -0
- pulumi_databricks/get_dbfs_file.py +19 -20
- pulumi_databricks/get_dbfs_file_paths.py +16 -17
- pulumi_databricks/get_directory.py +43 -25
- pulumi_databricks/get_entity_tag_assignment.py +202 -0
- pulumi_databricks/get_entity_tag_assignments.py +187 -0
- pulumi_databricks/get_external_location.py +35 -19
- pulumi_databricks/get_external_locations.py +32 -14
- pulumi_databricks/get_external_metadata.py +292 -0
- pulumi_databricks/get_external_metadatas.py +135 -0
- pulumi_databricks/get_feature_engineering_feature.py +179 -0
- pulumi_databricks/get_feature_engineering_features.py +103 -0
- pulumi_databricks/get_feature_engineering_materialized_feature.py +180 -0
- pulumi_databricks/get_feature_engineering_materialized_features.py +123 -0
- pulumi_databricks/get_functions.py +38 -24
- pulumi_databricks/get_group.py +85 -86
- pulumi_databricks/get_instance_pool.py +10 -11
- pulumi_databricks/get_instance_profiles.py +25 -9
- pulumi_databricks/get_job.py +22 -23
- pulumi_databricks/get_jobs.py +44 -26
- pulumi_databricks/get_materialized_features_feature_tag.py +102 -0
- pulumi_databricks/get_materialized_features_feature_tags.py +133 -0
- pulumi_databricks/get_metastore.py +28 -29
- pulumi_databricks/get_metastores.py +9 -10
- pulumi_databricks/get_mlflow_experiment.py +62 -46
- pulumi_databricks/get_mlflow_model.py +47 -31
- pulumi_databricks/get_mlflow_models.py +32 -14
- pulumi_databricks/get_mws_credentials.py +9 -10
- pulumi_databricks/get_mws_network_connectivity_config.py +40 -41
- pulumi_databricks/get_mws_network_connectivity_configs.py +15 -16
- pulumi_databricks/get_mws_workspaces.py +5 -6
- pulumi_databricks/get_node_type.py +123 -87
- pulumi_databricks/get_notebook.py +37 -38
- pulumi_databricks/get_notebook_paths.py +16 -17
- pulumi_databricks/get_notification_destinations.py +33 -18
- pulumi_databricks/get_online_store.py +36 -27
- pulumi_databricks/get_online_stores.py +33 -13
- pulumi_databricks/get_pipelines.py +49 -31
- pulumi_databricks/get_policy_info.py +338 -0
- pulumi_databricks/get_policy_infos.py +169 -0
- pulumi_databricks/get_quality_monitor_v2.py +21 -18
- pulumi_databricks/get_quality_monitors_v2.py +26 -8
- pulumi_databricks/get_registered_model.py +41 -27
- pulumi_databricks/get_registered_model_versions.py +29 -15
- pulumi_databricks/get_rfa_access_request_destinations.py +126 -0
- pulumi_databricks/get_schema.py +32 -16
- pulumi_databricks/get_schemas.py +38 -20
- pulumi_databricks/get_service_principal.py +80 -58
- pulumi_databricks/get_service_principal_federation_policies.py +151 -0
- pulumi_databricks/get_service_principal_federation_policy.py +220 -0
- pulumi_databricks/get_service_principals.py +16 -17
- pulumi_databricks/get_serving_endpoints.py +23 -9
- pulumi_databricks/get_share.py +130 -32
- pulumi_databricks/get_shares.py +29 -11
- pulumi_databricks/get_spark_version.py +87 -69
- pulumi_databricks/get_sql_warehouse.py +124 -110
- pulumi_databricks/get_sql_warehouses.py +37 -19
- pulumi_databricks/get_storage_credential.py +32 -16
- pulumi_databricks/get_storage_credentials.py +32 -14
- pulumi_databricks/get_table.py +30 -14
- pulumi_databricks/get_tables.py +41 -23
- pulumi_databricks/get_tag_policies.py +139 -0
- pulumi_databricks/get_tag_policy.py +175 -0
- pulumi_databricks/get_user.py +33 -34
- pulumi_databricks/get_views.py +41 -23
- pulumi_databricks/get_volume.py +32 -16
- pulumi_databricks/get_volumes.py +41 -23
- pulumi_databricks/get_workspace_network_option.py +45 -26
- pulumi_databricks/get_workspace_setting_v2.py +331 -0
- pulumi_databricks/get_zones.py +39 -21
- pulumi_databricks/git_credential.py +242 -76
- pulumi_databricks/global_init_script.py +99 -100
- pulumi_databricks/grant.py +215 -212
- pulumi_databricks/grants.py +200 -211
- pulumi_databricks/group.py +176 -177
- pulumi_databricks/group_instance_profile.py +37 -38
- pulumi_databricks/group_member.py +37 -38
- pulumi_databricks/group_role.py +37 -38
- pulumi_databricks/instance_pool.py +168 -169
- pulumi_databricks/instance_profile.py +69 -70
- pulumi_databricks/ip_access_list.py +71 -72
- pulumi_databricks/job.py +426 -346
- pulumi_databricks/lakehouse_monitor.py +199 -200
- pulumi_databricks/library.py +264 -99
- pulumi_databricks/materialized_features_feature_tag.py +213 -0
- pulumi_databricks/metastore.py +254 -255
- pulumi_databricks/metastore_assignment.py +52 -53
- pulumi_databricks/metastore_data_access.py +153 -154
- pulumi_databricks/metastore_provider.py +69 -70
- pulumi_databricks/mlflow_experiment.py +108 -109
- pulumi_databricks/mlflow_model.py +45 -46
- pulumi_databricks/mlflow_webhook.py +75 -76
- pulumi_databricks/model_serving.py +195 -74
- pulumi_databricks/model_serving_provisioned_throughput.py +100 -54
- pulumi_databricks/mount.py +103 -104
- pulumi_databricks/mws_credentials.py +99 -100
- pulumi_databricks/mws_customer_managed_keys.py +75 -76
- pulumi_databricks/mws_log_delivery.py +188 -189
- pulumi_databricks/mws_ncc_binding.py +35 -36
- pulumi_databricks/mws_ncc_private_endpoint_rule.py +312 -289
- pulumi_databricks/mws_network_connectivity_config.py +136 -98
- pulumi_databricks/mws_networks.py +159 -160
- pulumi_databricks/mws_permission_assignment.py +70 -71
- pulumi_databricks/mws_private_access_settings.py +116 -117
- pulumi_databricks/mws_storage_configurations.py +74 -75
- pulumi_databricks/mws_vpc_endpoint.py +149 -150
- pulumi_databricks/mws_workspaces.py +464 -418
- pulumi_databricks/notebook.py +143 -144
- pulumi_databricks/notification_destination.py +38 -39
- pulumi_databricks/obo_token.py +63 -64
- pulumi_databricks/online_store.py +121 -70
- pulumi_databricks/online_table.py +41 -42
- pulumi_databricks/outputs.py +47821 -30802
- pulumi_databricks/permission_assignment.py +298 -57
- pulumi_databricks/permissions.py +523 -362
- pulumi_databricks/pipeline.py +515 -480
- pulumi_databricks/policy_info.py +916 -0
- pulumi_databricks/provider.py +283 -269
- pulumi_databricks/pulumi-plugin.json +1 -1
- pulumi_databricks/quality_monitor.py +263 -217
- pulumi_databricks/quality_monitor_v2.py +49 -46
- pulumi_databricks/query.py +227 -228
- pulumi_databricks/recipient.py +208 -209
- pulumi_databricks/registered_model.py +393 -122
- pulumi_databricks/repo.py +117 -118
- pulumi_databricks/restrict_workspace_admins_setting.py +30 -31
- pulumi_databricks/rfa_access_request_destinations.py +286 -0
- pulumi_databricks/schema.py +159 -160
- pulumi_databricks/secret.py +72 -73
- pulumi_databricks/secret_acl.py +52 -53
- pulumi_databricks/secret_scope.py +55 -56
- pulumi_databricks/service_principal.py +279 -278
- pulumi_databricks/service_principal_federation_policy.py +469 -0
- pulumi_databricks/service_principal_role.py +35 -36
- pulumi_databricks/service_principal_secret.py +156 -157
- pulumi_databricks/share.py +186 -187
- pulumi_databricks/sql_alert.py +98 -99
- pulumi_databricks/sql_dashboard.py +94 -95
- pulumi_databricks/sql_endpoint.py +298 -266
- pulumi_databricks/sql_global_config.py +103 -104
- pulumi_databricks/sql_permissions.py +121 -122
- pulumi_databricks/sql_query.py +150 -151
- pulumi_databricks/sql_table.py +310 -283
- pulumi_databricks/sql_visualization.py +92 -93
- pulumi_databricks/sql_widget.py +91 -88
- pulumi_databricks/storage_credential.py +236 -184
- pulumi_databricks/system_schema.py +50 -51
- pulumi_databricks/table.py +147 -148
- pulumi_databricks/tag_policy.py +357 -0
- pulumi_databricks/token.py +83 -84
- pulumi_databricks/user.py +284 -285
- pulumi_databricks/user_instance_profile.py +35 -36
- pulumi_databricks/user_role.py +35 -36
- pulumi_databricks/vector_search_endpoint.py +117 -118
- pulumi_databricks/vector_search_index.py +86 -87
- pulumi_databricks/volume.py +129 -130
- pulumi_databricks/workspace_binding.py +82 -131
- pulumi_databricks/workspace_conf.py +18 -19
- pulumi_databricks/workspace_file.py +100 -101
- pulumi_databricks/workspace_network_option.py +89 -40
- pulumi_databricks/workspace_setting_v2.py +759 -0
- {pulumi_databricks-1.74.0a1753335781.dist-info → pulumi_databricks-1.77.0.dist-info}/METADATA +1 -1
- pulumi_databricks-1.77.0.dist-info/RECORD +250 -0
- pulumi_databricks/get_recipient_federation_policies.py +0 -83
- pulumi_databricks/get_recipient_federation_policy.py +0 -166
- pulumi_databricks/recipient_federation_policy.py +0 -347
- pulumi_databricks-1.74.0a1753335781.dist-info/RECORD +0 -205
- {pulumi_databricks-1.74.0a1753335781.dist-info → pulumi_databricks-1.77.0.dist-info}/WHEEL +0 -0
- {pulumi_databricks-1.74.0a1753335781.dist-info → pulumi_databricks-1.77.0.dist-info}/top_level.txt +0 -0
|
@@ -2,8 +2,7 @@
|
|
|
2
2
|
# *** WARNING: this file was generated by pulumi-language-python. ***
|
|
3
3
|
# *** Do not edit by hand unless you're certain you know what you are doing! ***
|
|
4
4
|
|
|
5
|
-
import builtins
|
|
6
|
-
import copy
|
|
5
|
+
import builtins as _builtins
|
|
7
6
|
import warnings
|
|
8
7
|
import sys
|
|
9
8
|
import pulumi
|
|
@@ -20,40 +19,40 @@ __all__ = ['ServicePrincipalArgs', 'ServicePrincipal']
|
|
|
20
19
|
@pulumi.input_type
|
|
21
20
|
class ServicePrincipalArgs:
|
|
22
21
|
def __init__(__self__, *,
|
|
23
|
-
acl_principal_id: Optional[pulumi.Input[
|
|
24
|
-
active: Optional[pulumi.Input[
|
|
25
|
-
allow_cluster_create: Optional[pulumi.Input[
|
|
26
|
-
allow_instance_pool_create: Optional[pulumi.Input[
|
|
27
|
-
application_id: Optional[pulumi.Input[
|
|
28
|
-
databricks_sql_access: Optional[pulumi.Input[
|
|
29
|
-
disable_as_user_deletion: Optional[pulumi.Input[
|
|
30
|
-
display_name: Optional[pulumi.Input[
|
|
31
|
-
external_id: Optional[pulumi.Input[
|
|
32
|
-
force: Optional[pulumi.Input[
|
|
33
|
-
force_delete_home_dir: Optional[pulumi.Input[
|
|
34
|
-
force_delete_repos: Optional[pulumi.Input[
|
|
35
|
-
home: Optional[pulumi.Input[
|
|
36
|
-
repos: Optional[pulumi.Input[
|
|
37
|
-
workspace_access: Optional[pulumi.Input[
|
|
38
|
-
workspace_consume: Optional[pulumi.Input[
|
|
22
|
+
acl_principal_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
23
|
+
active: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
24
|
+
allow_cluster_create: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
25
|
+
allow_instance_pool_create: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
26
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
27
|
+
databricks_sql_access: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
28
|
+
disable_as_user_deletion: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
29
|
+
display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
30
|
+
external_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
31
|
+
force: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
32
|
+
force_delete_home_dir: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
33
|
+
force_delete_repos: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
34
|
+
home: Optional[pulumi.Input[_builtins.str]] = None,
|
|
35
|
+
repos: Optional[pulumi.Input[_builtins.str]] = None,
|
|
36
|
+
workspace_access: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
37
|
+
workspace_consume: Optional[pulumi.Input[_builtins.bool]] = None):
|
|
39
38
|
"""
|
|
40
39
|
The set of arguments for constructing a ServicePrincipal resource.
|
|
41
|
-
:param pulumi.Input[
|
|
42
|
-
:param pulumi.Input[
|
|
43
|
-
:param pulumi.Input[
|
|
44
|
-
:param pulumi.Input[
|
|
45
|
-
:param pulumi.Input[
|
|
46
|
-
:param pulumi.Input[
|
|
47
|
-
:param pulumi.Input[
|
|
48
|
-
:param pulumi.Input[
|
|
49
|
-
:param pulumi.Input[
|
|
50
|
-
:param pulumi.Input[
|
|
51
|
-
:param pulumi.Input[
|
|
52
|
-
:param pulumi.Input[
|
|
53
|
-
:param pulumi.Input[
|
|
54
|
-
:param pulumi.Input[
|
|
55
|
-
:param pulumi.Input[
|
|
56
|
-
:param pulumi.Input[
|
|
40
|
+
:param pulumi.Input[_builtins.str] acl_principal_id: identifier for use in databricks_access_control_rule_set, e.g. `servicePrincipals/00000000-0000-0000-0000-000000000000`.
|
|
41
|
+
:param pulumi.Input[_builtins.bool] active: Either service principal is active or not. True by default, but can be set to false in case of service principal deactivation with preserving service principal assets.
|
|
42
|
+
:param pulumi.Input[_builtins.bool] allow_cluster_create: Allow the service principal to have cluster create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and `cluster_id` argument. Everyone without `allow_cluster_create` argument set, but with permission to use Cluster Policy would be able to create clusters, but within the boundaries of that specific policy.
|
|
43
|
+
:param pulumi.Input[_builtins.bool] allow_instance_pool_create: Allow the service principal to have instance pool create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and instance_pool_id argument.
|
|
44
|
+
:param pulumi.Input[_builtins.str] application_id: This is the Azure Application ID of the given Azure service principal and will be their form of access and identity. For Databricks-managed service principals this value is auto-generated.
|
|
45
|
+
:param pulumi.Input[_builtins.bool] databricks_sql_access: This is a field to allow the service principal to have access to [Databricks SQL](https://databricks.com/product/databricks-sql) feature through databricks_sql_endpoint.
|
|
46
|
+
:param pulumi.Input[_builtins.bool] disable_as_user_deletion: Deactivate the service principal when deleting the resource, rather than deleting the service principal entirely. Defaults to `true` when the provider is configured at the account-level and `false` when configured at the workspace-level. This flag is exclusive to force_delete_repos and force_delete_home_dir flags.
|
|
47
|
+
:param pulumi.Input[_builtins.str] display_name: This is an alias for the service principal and can be the full name of the service principal.
|
|
48
|
+
:param pulumi.Input[_builtins.str] external_id: ID of the service principal in an external identity provider.
|
|
49
|
+
:param pulumi.Input[_builtins.bool] force: Ignore `cannot create service principal: Service principal with application ID X already exists` errors and implicitly import the specified service principal into Pulumi state, enforcing entitlements defined in the instance of resource. _This functionality is experimental_ and is designed to simplify corner cases, like Azure Active Directory synchronisation.
|
|
50
|
+
:param pulumi.Input[_builtins.bool] force_delete_home_dir: This flag determines whether the service principal's home directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
|
|
51
|
+
:param pulumi.Input[_builtins.bool] force_delete_repos: This flag determines whether the service principal's repo directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
|
|
52
|
+
:param pulumi.Input[_builtins.str] home: Home folder of the service principal, e.g. `/Users/00000000-0000-0000-0000-000000000000`.
|
|
53
|
+
:param pulumi.Input[_builtins.str] repos: Personal Repos location of the service principal, e.g. `/Repos/00000000-0000-0000-0000-000000000000`.
|
|
54
|
+
:param pulumi.Input[_builtins.bool] workspace_access: This is a field to allow the service principal to have access to a Databricks Workspace.
|
|
55
|
+
:param pulumi.Input[_builtins.bool] workspace_consume: This is a field to allow the service principal to have access to a Databricks Workspace as consumer, with limited access to workspace UI. Couldn't be used with `workspace_access` or `databricks_sql_access`.
|
|
57
56
|
"""
|
|
58
57
|
if acl_principal_id is not None:
|
|
59
58
|
pulumi.set(__self__, "acl_principal_id", acl_principal_id)
|
|
@@ -88,236 +87,236 @@ class ServicePrincipalArgs:
|
|
|
88
87
|
if workspace_consume is not None:
|
|
89
88
|
pulumi.set(__self__, "workspace_consume", workspace_consume)
|
|
90
89
|
|
|
91
|
-
@property
|
|
90
|
+
@_builtins.property
|
|
92
91
|
@pulumi.getter(name="aclPrincipalId")
|
|
93
|
-
def acl_principal_id(self) -> Optional[pulumi.Input[
|
|
92
|
+
def acl_principal_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
94
93
|
"""
|
|
95
94
|
identifier for use in databricks_access_control_rule_set, e.g. `servicePrincipals/00000000-0000-0000-0000-000000000000`.
|
|
96
95
|
"""
|
|
97
96
|
return pulumi.get(self, "acl_principal_id")
|
|
98
97
|
|
|
99
98
|
@acl_principal_id.setter
|
|
100
|
-
def acl_principal_id(self, value: Optional[pulumi.Input[
|
|
99
|
+
def acl_principal_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
101
100
|
pulumi.set(self, "acl_principal_id", value)
|
|
102
101
|
|
|
103
|
-
@property
|
|
102
|
+
@_builtins.property
|
|
104
103
|
@pulumi.getter
|
|
105
|
-
def active(self) -> Optional[pulumi.Input[
|
|
104
|
+
def active(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
106
105
|
"""
|
|
107
106
|
Either service principal is active or not. True by default, but can be set to false in case of service principal deactivation with preserving service principal assets.
|
|
108
107
|
"""
|
|
109
108
|
return pulumi.get(self, "active")
|
|
110
109
|
|
|
111
110
|
@active.setter
|
|
112
|
-
def active(self, value: Optional[pulumi.Input[
|
|
111
|
+
def active(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
113
112
|
pulumi.set(self, "active", value)
|
|
114
113
|
|
|
115
|
-
@property
|
|
114
|
+
@_builtins.property
|
|
116
115
|
@pulumi.getter(name="allowClusterCreate")
|
|
117
|
-
def allow_cluster_create(self) -> Optional[pulumi.Input[
|
|
116
|
+
def allow_cluster_create(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
118
117
|
"""
|
|
119
118
|
Allow the service principal to have cluster create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and `cluster_id` argument. Everyone without `allow_cluster_create` argument set, but with permission to use Cluster Policy would be able to create clusters, but within the boundaries of that specific policy.
|
|
120
119
|
"""
|
|
121
120
|
return pulumi.get(self, "allow_cluster_create")
|
|
122
121
|
|
|
123
122
|
@allow_cluster_create.setter
|
|
124
|
-
def allow_cluster_create(self, value: Optional[pulumi.Input[
|
|
123
|
+
def allow_cluster_create(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
125
124
|
pulumi.set(self, "allow_cluster_create", value)
|
|
126
125
|
|
|
127
|
-
@property
|
|
126
|
+
@_builtins.property
|
|
128
127
|
@pulumi.getter(name="allowInstancePoolCreate")
|
|
129
|
-
def allow_instance_pool_create(self) -> Optional[pulumi.Input[
|
|
128
|
+
def allow_instance_pool_create(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
130
129
|
"""
|
|
131
130
|
Allow the service principal to have instance pool create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and instance_pool_id argument.
|
|
132
131
|
"""
|
|
133
132
|
return pulumi.get(self, "allow_instance_pool_create")
|
|
134
133
|
|
|
135
134
|
@allow_instance_pool_create.setter
|
|
136
|
-
def allow_instance_pool_create(self, value: Optional[pulumi.Input[
|
|
135
|
+
def allow_instance_pool_create(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
137
136
|
pulumi.set(self, "allow_instance_pool_create", value)
|
|
138
137
|
|
|
139
|
-
@property
|
|
138
|
+
@_builtins.property
|
|
140
139
|
@pulumi.getter(name="applicationId")
|
|
141
|
-
def application_id(self) -> Optional[pulumi.Input[
|
|
140
|
+
def application_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
142
141
|
"""
|
|
143
142
|
This is the Azure Application ID of the given Azure service principal and will be their form of access and identity. For Databricks-managed service principals this value is auto-generated.
|
|
144
143
|
"""
|
|
145
144
|
return pulumi.get(self, "application_id")
|
|
146
145
|
|
|
147
146
|
@application_id.setter
|
|
148
|
-
def application_id(self, value: Optional[pulumi.Input[
|
|
147
|
+
def application_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
149
148
|
pulumi.set(self, "application_id", value)
|
|
150
149
|
|
|
151
|
-
@property
|
|
150
|
+
@_builtins.property
|
|
152
151
|
@pulumi.getter(name="databricksSqlAccess")
|
|
153
|
-
def databricks_sql_access(self) -> Optional[pulumi.Input[
|
|
152
|
+
def databricks_sql_access(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
154
153
|
"""
|
|
155
154
|
This is a field to allow the service principal to have access to [Databricks SQL](https://databricks.com/product/databricks-sql) feature through databricks_sql_endpoint.
|
|
156
155
|
"""
|
|
157
156
|
return pulumi.get(self, "databricks_sql_access")
|
|
158
157
|
|
|
159
158
|
@databricks_sql_access.setter
|
|
160
|
-
def databricks_sql_access(self, value: Optional[pulumi.Input[
|
|
159
|
+
def databricks_sql_access(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
161
160
|
pulumi.set(self, "databricks_sql_access", value)
|
|
162
161
|
|
|
163
|
-
@property
|
|
162
|
+
@_builtins.property
|
|
164
163
|
@pulumi.getter(name="disableAsUserDeletion")
|
|
165
|
-
def disable_as_user_deletion(self) -> Optional[pulumi.Input[
|
|
164
|
+
def disable_as_user_deletion(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
166
165
|
"""
|
|
167
166
|
Deactivate the service principal when deleting the resource, rather than deleting the service principal entirely. Defaults to `true` when the provider is configured at the account-level and `false` when configured at the workspace-level. This flag is exclusive to force_delete_repos and force_delete_home_dir flags.
|
|
168
167
|
"""
|
|
169
168
|
return pulumi.get(self, "disable_as_user_deletion")
|
|
170
169
|
|
|
171
170
|
@disable_as_user_deletion.setter
|
|
172
|
-
def disable_as_user_deletion(self, value: Optional[pulumi.Input[
|
|
171
|
+
def disable_as_user_deletion(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
173
172
|
pulumi.set(self, "disable_as_user_deletion", value)
|
|
174
173
|
|
|
175
|
-
@property
|
|
174
|
+
@_builtins.property
|
|
176
175
|
@pulumi.getter(name="displayName")
|
|
177
|
-
def display_name(self) -> Optional[pulumi.Input[
|
|
176
|
+
def display_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
178
177
|
"""
|
|
179
178
|
This is an alias for the service principal and can be the full name of the service principal.
|
|
180
179
|
"""
|
|
181
180
|
return pulumi.get(self, "display_name")
|
|
182
181
|
|
|
183
182
|
@display_name.setter
|
|
184
|
-
def display_name(self, value: Optional[pulumi.Input[
|
|
183
|
+
def display_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
185
184
|
pulumi.set(self, "display_name", value)
|
|
186
185
|
|
|
187
|
-
@property
|
|
186
|
+
@_builtins.property
|
|
188
187
|
@pulumi.getter(name="externalId")
|
|
189
|
-
def external_id(self) -> Optional[pulumi.Input[
|
|
188
|
+
def external_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
190
189
|
"""
|
|
191
190
|
ID of the service principal in an external identity provider.
|
|
192
191
|
"""
|
|
193
192
|
return pulumi.get(self, "external_id")
|
|
194
193
|
|
|
195
194
|
@external_id.setter
|
|
196
|
-
def external_id(self, value: Optional[pulumi.Input[
|
|
195
|
+
def external_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
197
196
|
pulumi.set(self, "external_id", value)
|
|
198
197
|
|
|
199
|
-
@property
|
|
198
|
+
@_builtins.property
|
|
200
199
|
@pulumi.getter
|
|
201
|
-
def force(self) -> Optional[pulumi.Input[
|
|
200
|
+
def force(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
202
201
|
"""
|
|
203
202
|
Ignore `cannot create service principal: Service principal with application ID X already exists` errors and implicitly import the specified service principal into Pulumi state, enforcing entitlements defined in the instance of resource. _This functionality is experimental_ and is designed to simplify corner cases, like Azure Active Directory synchronisation.
|
|
204
203
|
"""
|
|
205
204
|
return pulumi.get(self, "force")
|
|
206
205
|
|
|
207
206
|
@force.setter
|
|
208
|
-
def force(self, value: Optional[pulumi.Input[
|
|
207
|
+
def force(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
209
208
|
pulumi.set(self, "force", value)
|
|
210
209
|
|
|
211
|
-
@property
|
|
210
|
+
@_builtins.property
|
|
212
211
|
@pulumi.getter(name="forceDeleteHomeDir")
|
|
213
|
-
def force_delete_home_dir(self) -> Optional[pulumi.Input[
|
|
212
|
+
def force_delete_home_dir(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
214
213
|
"""
|
|
215
214
|
This flag determines whether the service principal's home directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
|
|
216
215
|
"""
|
|
217
216
|
return pulumi.get(self, "force_delete_home_dir")
|
|
218
217
|
|
|
219
218
|
@force_delete_home_dir.setter
|
|
220
|
-
def force_delete_home_dir(self, value: Optional[pulumi.Input[
|
|
219
|
+
def force_delete_home_dir(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
221
220
|
pulumi.set(self, "force_delete_home_dir", value)
|
|
222
221
|
|
|
223
|
-
@property
|
|
222
|
+
@_builtins.property
|
|
224
223
|
@pulumi.getter(name="forceDeleteRepos")
|
|
225
|
-
def force_delete_repos(self) -> Optional[pulumi.Input[
|
|
224
|
+
def force_delete_repos(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
226
225
|
"""
|
|
227
226
|
This flag determines whether the service principal's repo directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
|
|
228
227
|
"""
|
|
229
228
|
return pulumi.get(self, "force_delete_repos")
|
|
230
229
|
|
|
231
230
|
@force_delete_repos.setter
|
|
232
|
-
def force_delete_repos(self, value: Optional[pulumi.Input[
|
|
231
|
+
def force_delete_repos(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
233
232
|
pulumi.set(self, "force_delete_repos", value)
|
|
234
233
|
|
|
235
|
-
@property
|
|
234
|
+
@_builtins.property
|
|
236
235
|
@pulumi.getter
|
|
237
|
-
def home(self) -> Optional[pulumi.Input[
|
|
236
|
+
def home(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
238
237
|
"""
|
|
239
238
|
Home folder of the service principal, e.g. `/Users/00000000-0000-0000-0000-000000000000`.
|
|
240
239
|
"""
|
|
241
240
|
return pulumi.get(self, "home")
|
|
242
241
|
|
|
243
242
|
@home.setter
|
|
244
|
-
def home(self, value: Optional[pulumi.Input[
|
|
243
|
+
def home(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
245
244
|
pulumi.set(self, "home", value)
|
|
246
245
|
|
|
247
|
-
@property
|
|
246
|
+
@_builtins.property
|
|
248
247
|
@pulumi.getter
|
|
249
|
-
def repos(self) -> Optional[pulumi.Input[
|
|
248
|
+
def repos(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
250
249
|
"""
|
|
251
250
|
Personal Repos location of the service principal, e.g. `/Repos/00000000-0000-0000-0000-000000000000`.
|
|
252
251
|
"""
|
|
253
252
|
return pulumi.get(self, "repos")
|
|
254
253
|
|
|
255
254
|
@repos.setter
|
|
256
|
-
def repos(self, value: Optional[pulumi.Input[
|
|
255
|
+
def repos(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
257
256
|
pulumi.set(self, "repos", value)
|
|
258
257
|
|
|
259
|
-
@property
|
|
258
|
+
@_builtins.property
|
|
260
259
|
@pulumi.getter(name="workspaceAccess")
|
|
261
|
-
def workspace_access(self) -> Optional[pulumi.Input[
|
|
260
|
+
def workspace_access(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
262
261
|
"""
|
|
263
262
|
This is a field to allow the service principal to have access to a Databricks Workspace.
|
|
264
263
|
"""
|
|
265
264
|
return pulumi.get(self, "workspace_access")
|
|
266
265
|
|
|
267
266
|
@workspace_access.setter
|
|
268
|
-
def workspace_access(self, value: Optional[pulumi.Input[
|
|
267
|
+
def workspace_access(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
269
268
|
pulumi.set(self, "workspace_access", value)
|
|
270
269
|
|
|
271
|
-
@property
|
|
270
|
+
@_builtins.property
|
|
272
271
|
@pulumi.getter(name="workspaceConsume")
|
|
273
|
-
def workspace_consume(self) -> Optional[pulumi.Input[
|
|
272
|
+
def workspace_consume(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
274
273
|
"""
|
|
275
274
|
This is a field to allow the service principal to have access to a Databricks Workspace as consumer, with limited access to workspace UI. Couldn't be used with `workspace_access` or `databricks_sql_access`.
|
|
276
275
|
"""
|
|
277
276
|
return pulumi.get(self, "workspace_consume")
|
|
278
277
|
|
|
279
278
|
@workspace_consume.setter
|
|
280
|
-
def workspace_consume(self, value: Optional[pulumi.Input[
|
|
279
|
+
def workspace_consume(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
281
280
|
pulumi.set(self, "workspace_consume", value)
|
|
282
281
|
|
|
283
282
|
|
|
284
283
|
@pulumi.input_type
|
|
285
284
|
class _ServicePrincipalState:
|
|
286
285
|
def __init__(__self__, *,
|
|
287
|
-
acl_principal_id: Optional[pulumi.Input[
|
|
288
|
-
active: Optional[pulumi.Input[
|
|
289
|
-
allow_cluster_create: Optional[pulumi.Input[
|
|
290
|
-
allow_instance_pool_create: Optional[pulumi.Input[
|
|
291
|
-
application_id: Optional[pulumi.Input[
|
|
292
|
-
databricks_sql_access: Optional[pulumi.Input[
|
|
293
|
-
disable_as_user_deletion: Optional[pulumi.Input[
|
|
294
|
-
display_name: Optional[pulumi.Input[
|
|
295
|
-
external_id: Optional[pulumi.Input[
|
|
296
|
-
force: Optional[pulumi.Input[
|
|
297
|
-
force_delete_home_dir: Optional[pulumi.Input[
|
|
298
|
-
force_delete_repos: Optional[pulumi.Input[
|
|
299
|
-
home: Optional[pulumi.Input[
|
|
300
|
-
repos: Optional[pulumi.Input[
|
|
301
|
-
workspace_access: Optional[pulumi.Input[
|
|
302
|
-
workspace_consume: Optional[pulumi.Input[
|
|
286
|
+
acl_principal_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
287
|
+
active: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
288
|
+
allow_cluster_create: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
289
|
+
allow_instance_pool_create: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
290
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
291
|
+
databricks_sql_access: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
292
|
+
disable_as_user_deletion: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
293
|
+
display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
294
|
+
external_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
295
|
+
force: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
296
|
+
force_delete_home_dir: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
297
|
+
force_delete_repos: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
298
|
+
home: Optional[pulumi.Input[_builtins.str]] = None,
|
|
299
|
+
repos: Optional[pulumi.Input[_builtins.str]] = None,
|
|
300
|
+
workspace_access: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
301
|
+
workspace_consume: Optional[pulumi.Input[_builtins.bool]] = None):
|
|
303
302
|
"""
|
|
304
303
|
Input properties used for looking up and filtering ServicePrincipal resources.
|
|
305
|
-
:param pulumi.Input[
|
|
306
|
-
:param pulumi.Input[
|
|
307
|
-
:param pulumi.Input[
|
|
308
|
-
:param pulumi.Input[
|
|
309
|
-
:param pulumi.Input[
|
|
310
|
-
:param pulumi.Input[
|
|
311
|
-
:param pulumi.Input[
|
|
312
|
-
:param pulumi.Input[
|
|
313
|
-
:param pulumi.Input[
|
|
314
|
-
:param pulumi.Input[
|
|
315
|
-
:param pulumi.Input[
|
|
316
|
-
:param pulumi.Input[
|
|
317
|
-
:param pulumi.Input[
|
|
318
|
-
:param pulumi.Input[
|
|
319
|
-
:param pulumi.Input[
|
|
320
|
-
:param pulumi.Input[
|
|
304
|
+
:param pulumi.Input[_builtins.str] acl_principal_id: identifier for use in databricks_access_control_rule_set, e.g. `servicePrincipals/00000000-0000-0000-0000-000000000000`.
|
|
305
|
+
:param pulumi.Input[_builtins.bool] active: Either service principal is active or not. True by default, but can be set to false in case of service principal deactivation with preserving service principal assets.
|
|
306
|
+
:param pulumi.Input[_builtins.bool] allow_cluster_create: Allow the service principal to have cluster create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and `cluster_id` argument. Everyone without `allow_cluster_create` argument set, but with permission to use Cluster Policy would be able to create clusters, but within the boundaries of that specific policy.
|
|
307
|
+
:param pulumi.Input[_builtins.bool] allow_instance_pool_create: Allow the service principal to have instance pool create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and instance_pool_id argument.
|
|
308
|
+
:param pulumi.Input[_builtins.str] application_id: This is the Azure Application ID of the given Azure service principal and will be their form of access and identity. For Databricks-managed service principals this value is auto-generated.
|
|
309
|
+
:param pulumi.Input[_builtins.bool] databricks_sql_access: This is a field to allow the service principal to have access to [Databricks SQL](https://databricks.com/product/databricks-sql) feature through databricks_sql_endpoint.
|
|
310
|
+
:param pulumi.Input[_builtins.bool] disable_as_user_deletion: Deactivate the service principal when deleting the resource, rather than deleting the service principal entirely. Defaults to `true` when the provider is configured at the account-level and `false` when configured at the workspace-level. This flag is exclusive to force_delete_repos and force_delete_home_dir flags.
|
|
311
|
+
:param pulumi.Input[_builtins.str] display_name: This is an alias for the service principal and can be the full name of the service principal.
|
|
312
|
+
:param pulumi.Input[_builtins.str] external_id: ID of the service principal in an external identity provider.
|
|
313
|
+
:param pulumi.Input[_builtins.bool] force: Ignore `cannot create service principal: Service principal with application ID X already exists` errors and implicitly import the specified service principal into Pulumi state, enforcing entitlements defined in the instance of resource. _This functionality is experimental_ and is designed to simplify corner cases, like Azure Active Directory synchronisation.
|
|
314
|
+
:param pulumi.Input[_builtins.bool] force_delete_home_dir: This flag determines whether the service principal's home directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
|
|
315
|
+
:param pulumi.Input[_builtins.bool] force_delete_repos: This flag determines whether the service principal's repo directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
|
|
316
|
+
:param pulumi.Input[_builtins.str] home: Home folder of the service principal, e.g. `/Users/00000000-0000-0000-0000-000000000000`.
|
|
317
|
+
:param pulumi.Input[_builtins.str] repos: Personal Repos location of the service principal, e.g. `/Repos/00000000-0000-0000-0000-000000000000`.
|
|
318
|
+
:param pulumi.Input[_builtins.bool] workspace_access: This is a field to allow the service principal to have access to a Databricks Workspace.
|
|
319
|
+
:param pulumi.Input[_builtins.bool] workspace_consume: This is a field to allow the service principal to have access to a Databricks Workspace as consumer, with limited access to workspace UI. Couldn't be used with `workspace_access` or `databricks_sql_access`.
|
|
321
320
|
"""
|
|
322
321
|
if acl_principal_id is not None:
|
|
323
322
|
pulumi.set(__self__, "acl_principal_id", acl_principal_id)
|
|
@@ -352,196 +351,196 @@ class _ServicePrincipalState:
|
|
|
352
351
|
if workspace_consume is not None:
|
|
353
352
|
pulumi.set(__self__, "workspace_consume", workspace_consume)
|
|
354
353
|
|
|
355
|
-
@property
|
|
354
|
+
@_builtins.property
|
|
356
355
|
@pulumi.getter(name="aclPrincipalId")
|
|
357
|
-
def acl_principal_id(self) -> Optional[pulumi.Input[
|
|
356
|
+
def acl_principal_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
358
357
|
"""
|
|
359
358
|
identifier for use in databricks_access_control_rule_set, e.g. `servicePrincipals/00000000-0000-0000-0000-000000000000`.
|
|
360
359
|
"""
|
|
361
360
|
return pulumi.get(self, "acl_principal_id")
|
|
362
361
|
|
|
363
362
|
@acl_principal_id.setter
|
|
364
|
-
def acl_principal_id(self, value: Optional[pulumi.Input[
|
|
363
|
+
def acl_principal_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
365
364
|
pulumi.set(self, "acl_principal_id", value)
|
|
366
365
|
|
|
367
|
-
@property
|
|
366
|
+
@_builtins.property
|
|
368
367
|
@pulumi.getter
|
|
369
|
-
def active(self) -> Optional[pulumi.Input[
|
|
368
|
+
def active(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
370
369
|
"""
|
|
371
370
|
Either service principal is active or not. True by default, but can be set to false in case of service principal deactivation with preserving service principal assets.
|
|
372
371
|
"""
|
|
373
372
|
return pulumi.get(self, "active")
|
|
374
373
|
|
|
375
374
|
@active.setter
|
|
376
|
-
def active(self, value: Optional[pulumi.Input[
|
|
375
|
+
def active(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
377
376
|
pulumi.set(self, "active", value)
|
|
378
377
|
|
|
379
|
-
@property
|
|
378
|
+
@_builtins.property
|
|
380
379
|
@pulumi.getter(name="allowClusterCreate")
|
|
381
|
-
def allow_cluster_create(self) -> Optional[pulumi.Input[
|
|
380
|
+
def allow_cluster_create(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
382
381
|
"""
|
|
383
382
|
Allow the service principal to have cluster create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and `cluster_id` argument. Everyone without `allow_cluster_create` argument set, but with permission to use Cluster Policy would be able to create clusters, but within the boundaries of that specific policy.
|
|
384
383
|
"""
|
|
385
384
|
return pulumi.get(self, "allow_cluster_create")
|
|
386
385
|
|
|
387
386
|
@allow_cluster_create.setter
|
|
388
|
-
def allow_cluster_create(self, value: Optional[pulumi.Input[
|
|
387
|
+
def allow_cluster_create(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
389
388
|
pulumi.set(self, "allow_cluster_create", value)
|
|
390
389
|
|
|
391
|
-
@property
|
|
390
|
+
@_builtins.property
|
|
392
391
|
@pulumi.getter(name="allowInstancePoolCreate")
|
|
393
|
-
def allow_instance_pool_create(self) -> Optional[pulumi.Input[
|
|
392
|
+
def allow_instance_pool_create(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
394
393
|
"""
|
|
395
394
|
Allow the service principal to have instance pool create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and instance_pool_id argument.
|
|
396
395
|
"""
|
|
397
396
|
return pulumi.get(self, "allow_instance_pool_create")
|
|
398
397
|
|
|
399
398
|
@allow_instance_pool_create.setter
|
|
400
|
-
def allow_instance_pool_create(self, value: Optional[pulumi.Input[
|
|
399
|
+
def allow_instance_pool_create(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
401
400
|
pulumi.set(self, "allow_instance_pool_create", value)
|
|
402
401
|
|
|
403
|
-
@property
|
|
402
|
+
@_builtins.property
|
|
404
403
|
@pulumi.getter(name="applicationId")
|
|
405
|
-
def application_id(self) -> Optional[pulumi.Input[
|
|
404
|
+
def application_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
406
405
|
"""
|
|
407
406
|
This is the Azure Application ID of the given Azure service principal and will be their form of access and identity. For Databricks-managed service principals this value is auto-generated.
|
|
408
407
|
"""
|
|
409
408
|
return pulumi.get(self, "application_id")
|
|
410
409
|
|
|
411
410
|
@application_id.setter
|
|
412
|
-
def application_id(self, value: Optional[pulumi.Input[
|
|
411
|
+
def application_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
413
412
|
pulumi.set(self, "application_id", value)
|
|
414
413
|
|
|
415
|
-
@property
|
|
414
|
+
@_builtins.property
|
|
416
415
|
@pulumi.getter(name="databricksSqlAccess")
|
|
417
|
-
def databricks_sql_access(self) -> Optional[pulumi.Input[
|
|
416
|
+
def databricks_sql_access(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
418
417
|
"""
|
|
419
418
|
This is a field to allow the service principal to have access to [Databricks SQL](https://databricks.com/product/databricks-sql) feature through databricks_sql_endpoint.
|
|
420
419
|
"""
|
|
421
420
|
return pulumi.get(self, "databricks_sql_access")
|
|
422
421
|
|
|
423
422
|
@databricks_sql_access.setter
|
|
424
|
-
def databricks_sql_access(self, value: Optional[pulumi.Input[
|
|
423
|
+
def databricks_sql_access(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
425
424
|
pulumi.set(self, "databricks_sql_access", value)
|
|
426
425
|
|
|
427
|
-
@property
|
|
426
|
+
@_builtins.property
|
|
428
427
|
@pulumi.getter(name="disableAsUserDeletion")
|
|
429
|
-
def disable_as_user_deletion(self) -> Optional[pulumi.Input[
|
|
428
|
+
def disable_as_user_deletion(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
430
429
|
"""
|
|
431
430
|
Deactivate the service principal when deleting the resource, rather than deleting the service principal entirely. Defaults to `true` when the provider is configured at the account-level and `false` when configured at the workspace-level. This flag is exclusive to force_delete_repos and force_delete_home_dir flags.
|
|
432
431
|
"""
|
|
433
432
|
return pulumi.get(self, "disable_as_user_deletion")
|
|
434
433
|
|
|
435
434
|
@disable_as_user_deletion.setter
|
|
436
|
-
def disable_as_user_deletion(self, value: Optional[pulumi.Input[
|
|
435
|
+
def disable_as_user_deletion(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
437
436
|
pulumi.set(self, "disable_as_user_deletion", value)
|
|
438
437
|
|
|
439
|
-
@property
|
|
438
|
+
@_builtins.property
|
|
440
439
|
@pulumi.getter(name="displayName")
|
|
441
|
-
def display_name(self) -> Optional[pulumi.Input[
|
|
440
|
+
def display_name(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
442
441
|
"""
|
|
443
442
|
This is an alias for the service principal and can be the full name of the service principal.
|
|
444
443
|
"""
|
|
445
444
|
return pulumi.get(self, "display_name")
|
|
446
445
|
|
|
447
446
|
@display_name.setter
|
|
448
|
-
def display_name(self, value: Optional[pulumi.Input[
|
|
447
|
+
def display_name(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
449
448
|
pulumi.set(self, "display_name", value)
|
|
450
449
|
|
|
451
|
-
@property
|
|
450
|
+
@_builtins.property
|
|
452
451
|
@pulumi.getter(name="externalId")
|
|
453
|
-
def external_id(self) -> Optional[pulumi.Input[
|
|
452
|
+
def external_id(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
454
453
|
"""
|
|
455
454
|
ID of the service principal in an external identity provider.
|
|
456
455
|
"""
|
|
457
456
|
return pulumi.get(self, "external_id")
|
|
458
457
|
|
|
459
458
|
@external_id.setter
|
|
460
|
-
def external_id(self, value: Optional[pulumi.Input[
|
|
459
|
+
def external_id(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
461
460
|
pulumi.set(self, "external_id", value)
|
|
462
461
|
|
|
463
|
-
@property
|
|
462
|
+
@_builtins.property
|
|
464
463
|
@pulumi.getter
|
|
465
|
-
def force(self) -> Optional[pulumi.Input[
|
|
464
|
+
def force(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
466
465
|
"""
|
|
467
466
|
Ignore `cannot create service principal: Service principal with application ID X already exists` errors and implicitly import the specified service principal into Pulumi state, enforcing entitlements defined in the instance of resource. _This functionality is experimental_ and is designed to simplify corner cases, like Azure Active Directory synchronisation.
|
|
468
467
|
"""
|
|
469
468
|
return pulumi.get(self, "force")
|
|
470
469
|
|
|
471
470
|
@force.setter
|
|
472
|
-
def force(self, value: Optional[pulumi.Input[
|
|
471
|
+
def force(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
473
472
|
pulumi.set(self, "force", value)
|
|
474
473
|
|
|
475
|
-
@property
|
|
474
|
+
@_builtins.property
|
|
476
475
|
@pulumi.getter(name="forceDeleteHomeDir")
|
|
477
|
-
def force_delete_home_dir(self) -> Optional[pulumi.Input[
|
|
476
|
+
def force_delete_home_dir(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
478
477
|
"""
|
|
479
478
|
This flag determines whether the service principal's home directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
|
|
480
479
|
"""
|
|
481
480
|
return pulumi.get(self, "force_delete_home_dir")
|
|
482
481
|
|
|
483
482
|
@force_delete_home_dir.setter
|
|
484
|
-
def force_delete_home_dir(self, value: Optional[pulumi.Input[
|
|
483
|
+
def force_delete_home_dir(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
485
484
|
pulumi.set(self, "force_delete_home_dir", value)
|
|
486
485
|
|
|
487
|
-
@property
|
|
486
|
+
@_builtins.property
|
|
488
487
|
@pulumi.getter(name="forceDeleteRepos")
|
|
489
|
-
def force_delete_repos(self) -> Optional[pulumi.Input[
|
|
488
|
+
def force_delete_repos(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
490
489
|
"""
|
|
491
490
|
This flag determines whether the service principal's repo directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
|
|
492
491
|
"""
|
|
493
492
|
return pulumi.get(self, "force_delete_repos")
|
|
494
493
|
|
|
495
494
|
@force_delete_repos.setter
|
|
496
|
-
def force_delete_repos(self, value: Optional[pulumi.Input[
|
|
495
|
+
def force_delete_repos(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
497
496
|
pulumi.set(self, "force_delete_repos", value)
|
|
498
497
|
|
|
499
|
-
@property
|
|
498
|
+
@_builtins.property
|
|
500
499
|
@pulumi.getter
|
|
501
|
-
def home(self) -> Optional[pulumi.Input[
|
|
500
|
+
def home(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
502
501
|
"""
|
|
503
502
|
Home folder of the service principal, e.g. `/Users/00000000-0000-0000-0000-000000000000`.
|
|
504
503
|
"""
|
|
505
504
|
return pulumi.get(self, "home")
|
|
506
505
|
|
|
507
506
|
@home.setter
|
|
508
|
-
def home(self, value: Optional[pulumi.Input[
|
|
507
|
+
def home(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
509
508
|
pulumi.set(self, "home", value)
|
|
510
509
|
|
|
511
|
-
@property
|
|
510
|
+
@_builtins.property
|
|
512
511
|
@pulumi.getter
|
|
513
|
-
def repos(self) -> Optional[pulumi.Input[
|
|
512
|
+
def repos(self) -> Optional[pulumi.Input[_builtins.str]]:
|
|
514
513
|
"""
|
|
515
514
|
Personal Repos location of the service principal, e.g. `/Repos/00000000-0000-0000-0000-000000000000`.
|
|
516
515
|
"""
|
|
517
516
|
return pulumi.get(self, "repos")
|
|
518
517
|
|
|
519
518
|
@repos.setter
|
|
520
|
-
def repos(self, value: Optional[pulumi.Input[
|
|
519
|
+
def repos(self, value: Optional[pulumi.Input[_builtins.str]]):
|
|
521
520
|
pulumi.set(self, "repos", value)
|
|
522
521
|
|
|
523
|
-
@property
|
|
522
|
+
@_builtins.property
|
|
524
523
|
@pulumi.getter(name="workspaceAccess")
|
|
525
|
-
def workspace_access(self) -> Optional[pulumi.Input[
|
|
524
|
+
def workspace_access(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
526
525
|
"""
|
|
527
526
|
This is a field to allow the service principal to have access to a Databricks Workspace.
|
|
528
527
|
"""
|
|
529
528
|
return pulumi.get(self, "workspace_access")
|
|
530
529
|
|
|
531
530
|
@workspace_access.setter
|
|
532
|
-
def workspace_access(self, value: Optional[pulumi.Input[
|
|
531
|
+
def workspace_access(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
533
532
|
pulumi.set(self, "workspace_access", value)
|
|
534
533
|
|
|
535
|
-
@property
|
|
534
|
+
@_builtins.property
|
|
536
535
|
@pulumi.getter(name="workspaceConsume")
|
|
537
|
-
def workspace_consume(self) -> Optional[pulumi.Input[
|
|
536
|
+
def workspace_consume(self) -> Optional[pulumi.Input[_builtins.bool]]:
|
|
538
537
|
"""
|
|
539
538
|
This is a field to allow the service principal to have access to a Databricks Workspace as consumer, with limited access to workspace UI. Couldn't be used with `workspace_access` or `databricks_sql_access`.
|
|
540
539
|
"""
|
|
541
540
|
return pulumi.get(self, "workspace_consume")
|
|
542
541
|
|
|
543
542
|
@workspace_consume.setter
|
|
544
|
-
def workspace_consume(self, value: Optional[pulumi.Input[
|
|
543
|
+
def workspace_consume(self, value: Optional[pulumi.Input[_builtins.bool]]):
|
|
545
544
|
pulumi.set(self, "workspace_consume", value)
|
|
546
545
|
|
|
547
546
|
|
|
@@ -551,22 +550,22 @@ class ServicePrincipal(pulumi.CustomResource):
|
|
|
551
550
|
def __init__(__self__,
|
|
552
551
|
resource_name: str,
|
|
553
552
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
554
|
-
acl_principal_id: Optional[pulumi.Input[
|
|
555
|
-
active: Optional[pulumi.Input[
|
|
556
|
-
allow_cluster_create: Optional[pulumi.Input[
|
|
557
|
-
allow_instance_pool_create: Optional[pulumi.Input[
|
|
558
|
-
application_id: Optional[pulumi.Input[
|
|
559
|
-
databricks_sql_access: Optional[pulumi.Input[
|
|
560
|
-
disable_as_user_deletion: Optional[pulumi.Input[
|
|
561
|
-
display_name: Optional[pulumi.Input[
|
|
562
|
-
external_id: Optional[pulumi.Input[
|
|
563
|
-
force: Optional[pulumi.Input[
|
|
564
|
-
force_delete_home_dir: Optional[pulumi.Input[
|
|
565
|
-
force_delete_repos: Optional[pulumi.Input[
|
|
566
|
-
home: Optional[pulumi.Input[
|
|
567
|
-
repos: Optional[pulumi.Input[
|
|
568
|
-
workspace_access: Optional[pulumi.Input[
|
|
569
|
-
workspace_consume: Optional[pulumi.Input[
|
|
553
|
+
acl_principal_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
554
|
+
active: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
555
|
+
allow_cluster_create: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
556
|
+
allow_instance_pool_create: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
557
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
558
|
+
databricks_sql_access: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
559
|
+
disable_as_user_deletion: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
560
|
+
display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
561
|
+
external_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
562
|
+
force: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
563
|
+
force_delete_home_dir: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
564
|
+
force_delete_repos: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
565
|
+
home: Optional[pulumi.Input[_builtins.str]] = None,
|
|
566
|
+
repos: Optional[pulumi.Input[_builtins.str]] = None,
|
|
567
|
+
workspace_access: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
568
|
+
workspace_consume: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
570
569
|
__props__=None):
|
|
571
570
|
"""
|
|
572
571
|
Directly manage [Service Principals](https://docs.databricks.com/administration-guide/users-groups/service-principals.html) that could be added to Group in Databricks account or workspace.
|
|
@@ -643,11 +642,12 @@ class ServicePrincipal(pulumi.CustomResource):
|
|
|
643
642
|
The following resources are often used in the same context:
|
|
644
643
|
|
|
645
644
|
* End to end workspace management guide.
|
|
646
|
-
* Group to manage [
|
|
645
|
+
* Group to manage [Account-level](https://docs.databricks.com/aws/en/admin/users-groups/groups) or [Workspace-level](https://docs.databricks.com/aws/en/admin/users-groups/workspace-local-groups) groups.
|
|
647
646
|
* Group data to retrieve information about Group members, entitlements and instance profiles.
|
|
648
647
|
* GroupMember to attach users and groups as group members.
|
|
649
648
|
* Permissions to manage [access control](https://docs.databricks.com/security/access-control/index.html) in Databricks workspace.
|
|
650
|
-
*
|
|
649
|
+
* Grants to manage data access in Unity Catalog.
|
|
650
|
+
* ServicePrincipalSecret to manage secrets for a service principal.
|
|
651
651
|
|
|
652
652
|
## Import
|
|
653
653
|
|
|
@@ -673,22 +673,22 @@ class ServicePrincipal(pulumi.CustomResource):
|
|
|
673
673
|
|
|
674
674
|
:param str resource_name: The name of the resource.
|
|
675
675
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
676
|
-
:param pulumi.Input[
|
|
677
|
-
:param pulumi.Input[
|
|
678
|
-
:param pulumi.Input[
|
|
679
|
-
:param pulumi.Input[
|
|
680
|
-
:param pulumi.Input[
|
|
681
|
-
:param pulumi.Input[
|
|
682
|
-
:param pulumi.Input[
|
|
683
|
-
:param pulumi.Input[
|
|
684
|
-
:param pulumi.Input[
|
|
685
|
-
:param pulumi.Input[
|
|
686
|
-
:param pulumi.Input[
|
|
687
|
-
:param pulumi.Input[
|
|
688
|
-
:param pulumi.Input[
|
|
689
|
-
:param pulumi.Input[
|
|
690
|
-
:param pulumi.Input[
|
|
691
|
-
:param pulumi.Input[
|
|
676
|
+
:param pulumi.Input[_builtins.str] acl_principal_id: identifier for use in databricks_access_control_rule_set, e.g. `servicePrincipals/00000000-0000-0000-0000-000000000000`.
|
|
677
|
+
:param pulumi.Input[_builtins.bool] active: Either service principal is active or not. True by default, but can be set to false in case of service principal deactivation with preserving service principal assets.
|
|
678
|
+
:param pulumi.Input[_builtins.bool] allow_cluster_create: Allow the service principal to have cluster create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and `cluster_id` argument. Everyone without `allow_cluster_create` argument set, but with permission to use Cluster Policy would be able to create clusters, but within the boundaries of that specific policy.
|
|
679
|
+
:param pulumi.Input[_builtins.bool] allow_instance_pool_create: Allow the service principal to have instance pool create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and instance_pool_id argument.
|
|
680
|
+
:param pulumi.Input[_builtins.str] application_id: This is the Azure Application ID of the given Azure service principal and will be their form of access and identity. For Databricks-managed service principals this value is auto-generated.
|
|
681
|
+
:param pulumi.Input[_builtins.bool] databricks_sql_access: This is a field to allow the service principal to have access to [Databricks SQL](https://databricks.com/product/databricks-sql) feature through databricks_sql_endpoint.
|
|
682
|
+
:param pulumi.Input[_builtins.bool] disable_as_user_deletion: Deactivate the service principal when deleting the resource, rather than deleting the service principal entirely. Defaults to `true` when the provider is configured at the account-level and `false` when configured at the workspace-level. This flag is exclusive to force_delete_repos and force_delete_home_dir flags.
|
|
683
|
+
:param pulumi.Input[_builtins.str] display_name: This is an alias for the service principal and can be the full name of the service principal.
|
|
684
|
+
:param pulumi.Input[_builtins.str] external_id: ID of the service principal in an external identity provider.
|
|
685
|
+
:param pulumi.Input[_builtins.bool] force: Ignore `cannot create service principal: Service principal with application ID X already exists` errors and implicitly import the specified service principal into Pulumi state, enforcing entitlements defined in the instance of resource. _This functionality is experimental_ and is designed to simplify corner cases, like Azure Active Directory synchronisation.
|
|
686
|
+
:param pulumi.Input[_builtins.bool] force_delete_home_dir: This flag determines whether the service principal's home directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
|
|
687
|
+
:param pulumi.Input[_builtins.bool] force_delete_repos: This flag determines whether the service principal's repo directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
|
|
688
|
+
:param pulumi.Input[_builtins.str] home: Home folder of the service principal, e.g. `/Users/00000000-0000-0000-0000-000000000000`.
|
|
689
|
+
:param pulumi.Input[_builtins.str] repos: Personal Repos location of the service principal, e.g. `/Repos/00000000-0000-0000-0000-000000000000`.
|
|
690
|
+
:param pulumi.Input[_builtins.bool] workspace_access: This is a field to allow the service principal to have access to a Databricks Workspace.
|
|
691
|
+
:param pulumi.Input[_builtins.bool] workspace_consume: This is a field to allow the service principal to have access to a Databricks Workspace as consumer, with limited access to workspace UI. Couldn't be used with `workspace_access` or `databricks_sql_access`.
|
|
692
692
|
"""
|
|
693
693
|
...
|
|
694
694
|
@overload
|
|
@@ -771,11 +771,12 @@ class ServicePrincipal(pulumi.CustomResource):
|
|
|
771
771
|
The following resources are often used in the same context:
|
|
772
772
|
|
|
773
773
|
* End to end workspace management guide.
|
|
774
|
-
* Group to manage [
|
|
774
|
+
* Group to manage [Account-level](https://docs.databricks.com/aws/en/admin/users-groups/groups) or [Workspace-level](https://docs.databricks.com/aws/en/admin/users-groups/workspace-local-groups) groups.
|
|
775
775
|
* Group data to retrieve information about Group members, entitlements and instance profiles.
|
|
776
776
|
* GroupMember to attach users and groups as group members.
|
|
777
777
|
* Permissions to manage [access control](https://docs.databricks.com/security/access-control/index.html) in Databricks workspace.
|
|
778
|
-
*
|
|
778
|
+
* Grants to manage data access in Unity Catalog.
|
|
779
|
+
* ServicePrincipalSecret to manage secrets for a service principal.
|
|
779
780
|
|
|
780
781
|
## Import
|
|
781
782
|
|
|
@@ -814,22 +815,22 @@ class ServicePrincipal(pulumi.CustomResource):
|
|
|
814
815
|
def _internal_init(__self__,
|
|
815
816
|
resource_name: str,
|
|
816
817
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
817
|
-
acl_principal_id: Optional[pulumi.Input[
|
|
818
|
-
active: Optional[pulumi.Input[
|
|
819
|
-
allow_cluster_create: Optional[pulumi.Input[
|
|
820
|
-
allow_instance_pool_create: Optional[pulumi.Input[
|
|
821
|
-
application_id: Optional[pulumi.Input[
|
|
822
|
-
databricks_sql_access: Optional[pulumi.Input[
|
|
823
|
-
disable_as_user_deletion: Optional[pulumi.Input[
|
|
824
|
-
display_name: Optional[pulumi.Input[
|
|
825
|
-
external_id: Optional[pulumi.Input[
|
|
826
|
-
force: Optional[pulumi.Input[
|
|
827
|
-
force_delete_home_dir: Optional[pulumi.Input[
|
|
828
|
-
force_delete_repos: Optional[pulumi.Input[
|
|
829
|
-
home: Optional[pulumi.Input[
|
|
830
|
-
repos: Optional[pulumi.Input[
|
|
831
|
-
workspace_access: Optional[pulumi.Input[
|
|
832
|
-
workspace_consume: Optional[pulumi.Input[
|
|
818
|
+
acl_principal_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
819
|
+
active: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
820
|
+
allow_cluster_create: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
821
|
+
allow_instance_pool_create: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
822
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
823
|
+
databricks_sql_access: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
824
|
+
disable_as_user_deletion: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
825
|
+
display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
826
|
+
external_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
827
|
+
force: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
828
|
+
force_delete_home_dir: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
829
|
+
force_delete_repos: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
830
|
+
home: Optional[pulumi.Input[_builtins.str]] = None,
|
|
831
|
+
repos: Optional[pulumi.Input[_builtins.str]] = None,
|
|
832
|
+
workspace_access: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
833
|
+
workspace_consume: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
833
834
|
__props__=None):
|
|
834
835
|
opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
|
|
835
836
|
if not isinstance(opts, pulumi.ResourceOptions):
|
|
@@ -865,22 +866,22 @@ class ServicePrincipal(pulumi.CustomResource):
|
|
|
865
866
|
def get(resource_name: str,
|
|
866
867
|
id: pulumi.Input[str],
|
|
867
868
|
opts: Optional[pulumi.ResourceOptions] = None,
|
|
868
|
-
acl_principal_id: Optional[pulumi.Input[
|
|
869
|
-
active: Optional[pulumi.Input[
|
|
870
|
-
allow_cluster_create: Optional[pulumi.Input[
|
|
871
|
-
allow_instance_pool_create: Optional[pulumi.Input[
|
|
872
|
-
application_id: Optional[pulumi.Input[
|
|
873
|
-
databricks_sql_access: Optional[pulumi.Input[
|
|
874
|
-
disable_as_user_deletion: Optional[pulumi.Input[
|
|
875
|
-
display_name: Optional[pulumi.Input[
|
|
876
|
-
external_id: Optional[pulumi.Input[
|
|
877
|
-
force: Optional[pulumi.Input[
|
|
878
|
-
force_delete_home_dir: Optional[pulumi.Input[
|
|
879
|
-
force_delete_repos: Optional[pulumi.Input[
|
|
880
|
-
home: Optional[pulumi.Input[
|
|
881
|
-
repos: Optional[pulumi.Input[
|
|
882
|
-
workspace_access: Optional[pulumi.Input[
|
|
883
|
-
workspace_consume: Optional[pulumi.Input[
|
|
869
|
+
acl_principal_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
870
|
+
active: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
871
|
+
allow_cluster_create: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
872
|
+
allow_instance_pool_create: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
873
|
+
application_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
874
|
+
databricks_sql_access: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
875
|
+
disable_as_user_deletion: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
876
|
+
display_name: Optional[pulumi.Input[_builtins.str]] = None,
|
|
877
|
+
external_id: Optional[pulumi.Input[_builtins.str]] = None,
|
|
878
|
+
force: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
879
|
+
force_delete_home_dir: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
880
|
+
force_delete_repos: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
881
|
+
home: Optional[pulumi.Input[_builtins.str]] = None,
|
|
882
|
+
repos: Optional[pulumi.Input[_builtins.str]] = None,
|
|
883
|
+
workspace_access: Optional[pulumi.Input[_builtins.bool]] = None,
|
|
884
|
+
workspace_consume: Optional[pulumi.Input[_builtins.bool]] = None) -> 'ServicePrincipal':
|
|
884
885
|
"""
|
|
885
886
|
Get an existing ServicePrincipal resource's state with the given name, id, and optional extra
|
|
886
887
|
properties used to qualify the lookup.
|
|
@@ -888,22 +889,22 @@ class ServicePrincipal(pulumi.CustomResource):
|
|
|
888
889
|
:param str resource_name: The unique name of the resulting resource.
|
|
889
890
|
:param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
|
|
890
891
|
:param pulumi.ResourceOptions opts: Options for the resource.
|
|
891
|
-
:param pulumi.Input[
|
|
892
|
-
:param pulumi.Input[
|
|
893
|
-
:param pulumi.Input[
|
|
894
|
-
:param pulumi.Input[
|
|
895
|
-
:param pulumi.Input[
|
|
896
|
-
:param pulumi.Input[
|
|
897
|
-
:param pulumi.Input[
|
|
898
|
-
:param pulumi.Input[
|
|
899
|
-
:param pulumi.Input[
|
|
900
|
-
:param pulumi.Input[
|
|
901
|
-
:param pulumi.Input[
|
|
902
|
-
:param pulumi.Input[
|
|
903
|
-
:param pulumi.Input[
|
|
904
|
-
:param pulumi.Input[
|
|
905
|
-
:param pulumi.Input[
|
|
906
|
-
:param pulumi.Input[
|
|
892
|
+
:param pulumi.Input[_builtins.str] acl_principal_id: identifier for use in databricks_access_control_rule_set, e.g. `servicePrincipals/00000000-0000-0000-0000-000000000000`.
|
|
893
|
+
:param pulumi.Input[_builtins.bool] active: Either service principal is active or not. True by default, but can be set to false in case of service principal deactivation with preserving service principal assets.
|
|
894
|
+
:param pulumi.Input[_builtins.bool] allow_cluster_create: Allow the service principal to have cluster create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and `cluster_id` argument. Everyone without `allow_cluster_create` argument set, but with permission to use Cluster Policy would be able to create clusters, but within the boundaries of that specific policy.
|
|
895
|
+
:param pulumi.Input[_builtins.bool] allow_instance_pool_create: Allow the service principal to have instance pool create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and instance_pool_id argument.
|
|
896
|
+
:param pulumi.Input[_builtins.str] application_id: This is the Azure Application ID of the given Azure service principal and will be their form of access and identity. For Databricks-managed service principals this value is auto-generated.
|
|
897
|
+
:param pulumi.Input[_builtins.bool] databricks_sql_access: This is a field to allow the service principal to have access to [Databricks SQL](https://databricks.com/product/databricks-sql) feature through databricks_sql_endpoint.
|
|
898
|
+
:param pulumi.Input[_builtins.bool] disable_as_user_deletion: Deactivate the service principal when deleting the resource, rather than deleting the service principal entirely. Defaults to `true` when the provider is configured at the account-level and `false` when configured at the workspace-level. This flag is exclusive to force_delete_repos and force_delete_home_dir flags.
|
|
899
|
+
:param pulumi.Input[_builtins.str] display_name: This is an alias for the service principal and can be the full name of the service principal.
|
|
900
|
+
:param pulumi.Input[_builtins.str] external_id: ID of the service principal in an external identity provider.
|
|
901
|
+
:param pulumi.Input[_builtins.bool] force: Ignore `cannot create service principal: Service principal with application ID X already exists` errors and implicitly import the specified service principal into Pulumi state, enforcing entitlements defined in the instance of resource. _This functionality is experimental_ and is designed to simplify corner cases, like Azure Active Directory synchronisation.
|
|
902
|
+
:param pulumi.Input[_builtins.bool] force_delete_home_dir: This flag determines whether the service principal's home directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
|
|
903
|
+
:param pulumi.Input[_builtins.bool] force_delete_repos: This flag determines whether the service principal's repo directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
|
|
904
|
+
:param pulumi.Input[_builtins.str] home: Home folder of the service principal, e.g. `/Users/00000000-0000-0000-0000-000000000000`.
|
|
905
|
+
:param pulumi.Input[_builtins.str] repos: Personal Repos location of the service principal, e.g. `/Repos/00000000-0000-0000-0000-000000000000`.
|
|
906
|
+
:param pulumi.Input[_builtins.bool] workspace_access: This is a field to allow the service principal to have access to a Databricks Workspace.
|
|
907
|
+
:param pulumi.Input[_builtins.bool] workspace_consume: This is a field to allow the service principal to have access to a Databricks Workspace as consumer, with limited access to workspace UI. Couldn't be used with `workspace_access` or `databricks_sql_access`.
|
|
907
908
|
"""
|
|
908
909
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
|
909
910
|
|
|
@@ -927,129 +928,129 @@ class ServicePrincipal(pulumi.CustomResource):
|
|
|
927
928
|
__props__.__dict__["workspace_consume"] = workspace_consume
|
|
928
929
|
return ServicePrincipal(resource_name, opts=opts, __props__=__props__)
|
|
929
930
|
|
|
930
|
-
@property
|
|
931
|
+
@_builtins.property
|
|
931
932
|
@pulumi.getter(name="aclPrincipalId")
|
|
932
|
-
def acl_principal_id(self) -> pulumi.Output[
|
|
933
|
+
def acl_principal_id(self) -> pulumi.Output[_builtins.str]:
|
|
933
934
|
"""
|
|
934
935
|
identifier for use in databricks_access_control_rule_set, e.g. `servicePrincipals/00000000-0000-0000-0000-000000000000`.
|
|
935
936
|
"""
|
|
936
937
|
return pulumi.get(self, "acl_principal_id")
|
|
937
938
|
|
|
938
|
-
@property
|
|
939
|
+
@_builtins.property
|
|
939
940
|
@pulumi.getter
|
|
940
|
-
def active(self) -> pulumi.Output[Optional[
|
|
941
|
+
def active(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
941
942
|
"""
|
|
942
943
|
Either service principal is active or not. True by default, but can be set to false in case of service principal deactivation with preserving service principal assets.
|
|
943
944
|
"""
|
|
944
945
|
return pulumi.get(self, "active")
|
|
945
946
|
|
|
946
|
-
@property
|
|
947
|
+
@_builtins.property
|
|
947
948
|
@pulumi.getter(name="allowClusterCreate")
|
|
948
|
-
def allow_cluster_create(self) -> pulumi.Output[Optional[
|
|
949
|
+
def allow_cluster_create(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
949
950
|
"""
|
|
950
951
|
Allow the service principal to have cluster create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and `cluster_id` argument. Everyone without `allow_cluster_create` argument set, but with permission to use Cluster Policy would be able to create clusters, but within the boundaries of that specific policy.
|
|
951
952
|
"""
|
|
952
953
|
return pulumi.get(self, "allow_cluster_create")
|
|
953
954
|
|
|
954
|
-
@property
|
|
955
|
+
@_builtins.property
|
|
955
956
|
@pulumi.getter(name="allowInstancePoolCreate")
|
|
956
|
-
def allow_instance_pool_create(self) -> pulumi.Output[Optional[
|
|
957
|
+
def allow_instance_pool_create(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
957
958
|
"""
|
|
958
959
|
Allow the service principal to have instance pool create privileges. Defaults to false. More fine grained permissions could be assigned with Permissions and instance_pool_id argument.
|
|
959
960
|
"""
|
|
960
961
|
return pulumi.get(self, "allow_instance_pool_create")
|
|
961
962
|
|
|
962
|
-
@property
|
|
963
|
+
@_builtins.property
|
|
963
964
|
@pulumi.getter(name="applicationId")
|
|
964
|
-
def application_id(self) -> pulumi.Output[
|
|
965
|
+
def application_id(self) -> pulumi.Output[_builtins.str]:
|
|
965
966
|
"""
|
|
966
967
|
This is the Azure Application ID of the given Azure service principal and will be their form of access and identity. For Databricks-managed service principals this value is auto-generated.
|
|
967
968
|
"""
|
|
968
969
|
return pulumi.get(self, "application_id")
|
|
969
970
|
|
|
970
|
-
@property
|
|
971
|
+
@_builtins.property
|
|
971
972
|
@pulumi.getter(name="databricksSqlAccess")
|
|
972
|
-
def databricks_sql_access(self) -> pulumi.Output[Optional[
|
|
973
|
+
def databricks_sql_access(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
973
974
|
"""
|
|
974
975
|
This is a field to allow the service principal to have access to [Databricks SQL](https://databricks.com/product/databricks-sql) feature through databricks_sql_endpoint.
|
|
975
976
|
"""
|
|
976
977
|
return pulumi.get(self, "databricks_sql_access")
|
|
977
978
|
|
|
978
|
-
@property
|
|
979
|
+
@_builtins.property
|
|
979
980
|
@pulumi.getter(name="disableAsUserDeletion")
|
|
980
|
-
def disable_as_user_deletion(self) -> pulumi.Output[Optional[
|
|
981
|
+
def disable_as_user_deletion(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
981
982
|
"""
|
|
982
983
|
Deactivate the service principal when deleting the resource, rather than deleting the service principal entirely. Defaults to `true` when the provider is configured at the account-level and `false` when configured at the workspace-level. This flag is exclusive to force_delete_repos and force_delete_home_dir flags.
|
|
983
984
|
"""
|
|
984
985
|
return pulumi.get(self, "disable_as_user_deletion")
|
|
985
986
|
|
|
986
|
-
@property
|
|
987
|
+
@_builtins.property
|
|
987
988
|
@pulumi.getter(name="displayName")
|
|
988
|
-
def display_name(self) -> pulumi.Output[
|
|
989
|
+
def display_name(self) -> pulumi.Output[_builtins.str]:
|
|
989
990
|
"""
|
|
990
991
|
This is an alias for the service principal and can be the full name of the service principal.
|
|
991
992
|
"""
|
|
992
993
|
return pulumi.get(self, "display_name")
|
|
993
994
|
|
|
994
|
-
@property
|
|
995
|
+
@_builtins.property
|
|
995
996
|
@pulumi.getter(name="externalId")
|
|
996
|
-
def external_id(self) -> pulumi.Output[Optional[
|
|
997
|
+
def external_id(self) -> pulumi.Output[Optional[_builtins.str]]:
|
|
997
998
|
"""
|
|
998
999
|
ID of the service principal in an external identity provider.
|
|
999
1000
|
"""
|
|
1000
1001
|
return pulumi.get(self, "external_id")
|
|
1001
1002
|
|
|
1002
|
-
@property
|
|
1003
|
+
@_builtins.property
|
|
1003
1004
|
@pulumi.getter
|
|
1004
|
-
def force(self) -> pulumi.Output[Optional[
|
|
1005
|
+
def force(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1005
1006
|
"""
|
|
1006
1007
|
Ignore `cannot create service principal: Service principal with application ID X already exists` errors and implicitly import the specified service principal into Pulumi state, enforcing entitlements defined in the instance of resource. _This functionality is experimental_ and is designed to simplify corner cases, like Azure Active Directory synchronisation.
|
|
1007
1008
|
"""
|
|
1008
1009
|
return pulumi.get(self, "force")
|
|
1009
1010
|
|
|
1010
|
-
@property
|
|
1011
|
+
@_builtins.property
|
|
1011
1012
|
@pulumi.getter(name="forceDeleteHomeDir")
|
|
1012
|
-
def force_delete_home_dir(self) -> pulumi.Output[Optional[
|
|
1013
|
+
def force_delete_home_dir(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1013
1014
|
"""
|
|
1014
1015
|
This flag determines whether the service principal's home directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
|
|
1015
1016
|
"""
|
|
1016
1017
|
return pulumi.get(self, "force_delete_home_dir")
|
|
1017
1018
|
|
|
1018
|
-
@property
|
|
1019
|
+
@_builtins.property
|
|
1019
1020
|
@pulumi.getter(name="forceDeleteRepos")
|
|
1020
|
-
def force_delete_repos(self) -> pulumi.Output[Optional[
|
|
1021
|
+
def force_delete_repos(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1021
1022
|
"""
|
|
1022
1023
|
This flag determines whether the service principal's repo directory is deleted when the user is deleted. It will have no impact when in the accounts SCIM API. False by default.
|
|
1023
1024
|
"""
|
|
1024
1025
|
return pulumi.get(self, "force_delete_repos")
|
|
1025
1026
|
|
|
1026
|
-
@property
|
|
1027
|
+
@_builtins.property
|
|
1027
1028
|
@pulumi.getter
|
|
1028
|
-
def home(self) -> pulumi.Output[
|
|
1029
|
+
def home(self) -> pulumi.Output[_builtins.str]:
|
|
1029
1030
|
"""
|
|
1030
1031
|
Home folder of the service principal, e.g. `/Users/00000000-0000-0000-0000-000000000000`.
|
|
1031
1032
|
"""
|
|
1032
1033
|
return pulumi.get(self, "home")
|
|
1033
1034
|
|
|
1034
|
-
@property
|
|
1035
|
+
@_builtins.property
|
|
1035
1036
|
@pulumi.getter
|
|
1036
|
-
def repos(self) -> pulumi.Output[
|
|
1037
|
+
def repos(self) -> pulumi.Output[_builtins.str]:
|
|
1037
1038
|
"""
|
|
1038
1039
|
Personal Repos location of the service principal, e.g. `/Repos/00000000-0000-0000-0000-000000000000`.
|
|
1039
1040
|
"""
|
|
1040
1041
|
return pulumi.get(self, "repos")
|
|
1041
1042
|
|
|
1042
|
-
@property
|
|
1043
|
+
@_builtins.property
|
|
1043
1044
|
@pulumi.getter(name="workspaceAccess")
|
|
1044
|
-
def workspace_access(self) -> pulumi.Output[Optional[
|
|
1045
|
+
def workspace_access(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1045
1046
|
"""
|
|
1046
1047
|
This is a field to allow the service principal to have access to a Databricks Workspace.
|
|
1047
1048
|
"""
|
|
1048
1049
|
return pulumi.get(self, "workspace_access")
|
|
1049
1050
|
|
|
1050
|
-
@property
|
|
1051
|
+
@_builtins.property
|
|
1051
1052
|
@pulumi.getter(name="workspaceConsume")
|
|
1052
|
-
def workspace_consume(self) -> pulumi.Output[Optional[
|
|
1053
|
+
def workspace_consume(self) -> pulumi.Output[Optional[_builtins.bool]]:
|
|
1053
1054
|
"""
|
|
1054
1055
|
This is a field to allow the service principal to have access to a Databricks Workspace as consumer, with limited access to workspace UI. Couldn't be used with `workspace_access` or `databricks_sql_access`.
|
|
1055
1056
|
"""
|