databricks / terraform-provider-databricks

Databricks Terraform Provider
https://registry.terraform.io/providers/databricks/databricks/latest
Other
444 stars 380 forks source link

Support Authenticating using a Service Principal with Open ID Connect #3004

Open KarthicPortal opened 9 months ago

KarthicPortal commented 9 months ago

Hi there,

Currently the supported authentication types are pat, basic, azure-client-secret, azure-msi, azure-cli, google-credentials, and google-id for databricks provider.

Proposal

With the introduction of Workload Identity federation in CI/CD pipelines for Azure Resource Manager, need azure-oidc support as well to authenticate azure databricks provider. This support is already available for AzureRM provider. When we combine both azurerm and azure-databricks providers for deployment in single CI/CD pipeline, it is hard to maintain different authentication types for each provider.

References

https://registry.terraform.io/providers/hashicorp/azurerm/latest/docs/guides/service_principal_oidc

alexott commented 9 months ago

Please open issue against https://github.com/databricks/databricks-sdk-go - the authentication is handled there.

KarthicPortal commented 9 months ago

done.. this is the ticket.