File tree Expand file tree Collapse file tree 1 file changed +21
-0
lines changed
Expand file tree Collapse file tree 1 file changed +21
-0
lines changed Original file line number Diff line number Diff line change @@ -21,6 +21,13 @@ resource "databricks_permissions" "clusters" {
2121 permission_level = access_control. value . permission_level
2222 }
2323 }
24+
25+ lifecycle {
26+ precondition {
27+ condition = alltrue ([for i in each . value . permissions : contains (var. iam_account_groups [* ]. group_name , i. group_name )])
28+ error_message = " Incorrect group_name set for permission cluster settings"
29+ }
30+ }
2431}
2532
2633resource "databricks_permissions" "sql_endpoint" {
@@ -38,6 +45,13 @@ resource "databricks_permissions" "sql_endpoint" {
3845 permission_level = access_control. value . permission_level
3946 }
4047 }
48+
49+ lifecycle {
50+ precondition {
51+ condition = alltrue ([for i in each . value . permissions : contains (var. iam_account_groups [* ]. group_name , i. group_name )])
52+ error_message = " Incorrect group_name set for permission cluster settings"
53+ }
54+ }
4155}
4256
4357resource "databricks_secret_acl" "this" {
@@ -46,4 +60,11 @@ resource "databricks_secret_acl" "this" {
4660 scope = databricks_secret_scope. this [each . value . scope ]. name
4761 principal = length (var. iam_account_groups ) != 0 ? data. databricks_group . account_groups [each . value . principal ]. display_name : databricks_group. this [each . value . principal ]. display_name
4862 permission = each. value . permission
63+
64+ lifecycle {
65+ precondition {
66+ condition = alltrue ([for i in each . value . permissions : contains (var. iam_account_groups [* ]. group_name , i. group_name )])
67+ error_message = " Incorrect group_name set for permission cluster settings"
68+ }
69+ }
4970}
You can’t perform that action at this time.
0 commit comments