使用Terraform管理Databricks工作区

资源"databricks_token" "pat" {comment = "从${abspath(path.module)}创建的" lifetime_seconds = 3600}资源"databricks_notebook" "this" {path = "${data.databricks_current_user.me. txt "home}/Terraform" language = "PYTHON" content_base64 = base64encode(<<-EOT token = dbutils.secrets.get('${databricks_secret_range .this.name}'， '${databricks_secret.token.key}') print(f' this should be redacted: {token}') EOT)} resource "databricks_job" "this" {name = "Terraform Demo (${data.databricks_current_user.me. alphannumeric})" new_cluster {num_workers = 1 spark_version = data.databricks_spark_version.latest. txt "Id node_type_id = data.databricks_node_type. least。Id} notebook_task {notebook_path = databricks_记事本。email_notifications {}} resource "databricks_cluster" "this" {cluster_name = "Exploration (${data.databricks_current_user.me. alphannumeric})" spark_version = data.databricks_spark_version.latest. path} email_notifications {}} resource "databricks_cluster" "this" {cluster_name = "Exploration (${data.databricks_current_user.me. alphannumeric})"Id instance_pool_id = databricks_instance_pool.smallest_nodes。Id autotermination_minutes = 20 autoscale {min_workers = 1 max_workers = 10}}输出"notebook_url" {value = databricks_记事本。Url}输出"job_url" {value = databricks_job.this。url}

资源"databricks_secret_acl" "spectator " {principal = databricks_group.spectator。display_name scope = databricks_secret_scope.this.name permission = "READ"} resource "databricks_group" " audience " {display_name = " audience (by ${data.databricks_current_user.me. alphannumeric})"} resource "dummy" {user_name = "dummy+${data.databricks_current_user. me.alphannumeric}@example.com" display_name = "dummy ${data.databricks_current_user.me. "字母数字}"}resource "databricks_group_member" "a" {group_id = databricks_group.spectator .}"Id member_id = databricks_user.dummy。Id} resource "databricks_permissions" "notebook" {notebook_path = databricks_notebook.this. Id} resource "databricks_permissions" "notebook" {notebook_path = databricks_notebook.this. Id}Id access_control {user_name = databricks_user.dummy。user_name permission_level = "CAN_RUN"} access_control {group_name = databricks_group.spectator . user_name permission_level = "CAN_RUN"}display_name permission_level = "CAN_READ"}} resource "databricks_permissions" "job" {job_id = databricks_job.this. {job_id = "CAN_READ"}}Id access_control {user_name = databricks_user.dummy。user_name permission_level = "IS_OWNER"} access_control {group_name = databricks_group.spectator . user_name permission_level = "IS_OWNER"}display_name permission_level = "CAN_MANAGE_RUN"}} resource "databricks_permissions" "cluster" {cluster_id = databricks_cluster.this. display_name permission_level = "CAN_MANAGE_RUN"}}Id access_control {user_name = databricks_user.dummy。user_name permission_level = "CAN_RESTART"} access_control {group_name = databricks_group.spectator . user_name permission_level = "CAN_RESTART"}display_name permission_level = "CAN_ATTACH_TO"}}resource "databricks_permissions" "policy" { cluster_policy_id = databricks_cluster_policy.this.id access_control { group_name = databricks_group.spectators.display_name permission_level = "CAN_USE" } } resource "databricks_permissions" "pool" { instance_pool_id = databricks_instance_pool.smallest_nodes.id access_control { group_name = databricks_group.spectators.display_name permission_level = "CAN_ATTACH_TO" } }

数据"http" "my" {url = "https://ifconfig。{custom_config = {"enableIpAccessLists": "true"}}