pipelines run_as

Author: denik

acceptance/bundle/migrate/runas/out.plan.json

@@ -5,31 +5,7 @@
   "serial": 5,
   "plan": {
     "resources.pipelines.foo": {
-      "action": "update",
-      "new_state": {
-        "value": {
-          "catalog": "main",
-          "channel": "CURRENT",
-          "deployment": {
-            "kind": "BUNDLE",
-            "metadata_file_path": "/Workspace/Users/[USERNAME]/.bundle/dabs_revenue-[UNIQUE_NAME]/production/state/metadata.json"
-          },
-          "edition": "ADVANCED",
-          "libraries": [
-            {
-              "notebook": {
-                "path": "/Workspace/Users/[USERNAME]/.bundle/dabs_revenue-[UNIQUE_NAME]/production/files/sql"
-              }
-            }
-          ],
-          "name": "DABs Revenue Pipeline",
-          "run_as": {
-            "service_principal_name": "[UUID]"
-          },
-          "serverless": true,
-          "target": "team_eng_deco"
-        }
-      },
+      "action": "skip",
       "remote_state": {
         "creator_user_name": "[USERNAME]",
         "last_modified": [UNIX_TIME_MILLIS],
@@ -60,7 +36,8 @@
       },
       "changes": {
         "run_as": {
-          "action": "update",
+          "action": "skip",
+          "reason": "field_triggers",
           "old": {
             "service_principal_name": "[UUID]"
           },

acceptance/bundle/migrate/runas/output.txt

@@ -119,9 +119,7 @@ Consider using a adding a top-level permissions section such as the following:
 See https://docs.databricks.com/dev-tools/bundles/permissions.html to learn more about permission configuration.
   in databricks.yml:5:3
 
-update pipelines.foo
-
-Plan: 0 to add, 1 to change, 0 to delete, 1 unchanged
+Plan: 0 to add, 0 to change, 0 to delete, 2 unchanged
 
 >>> DATABRICKS_BUNDLE_ENGINE= [CLI] bundle plan -o json
 Recommendation: permissions section should explicitly include the current deployment identity '[USERNAME]' or one of its groups

bundle/direct/dresources/pipeline.go

@@ -125,20 +125,9 @@ func (*ResourcePipeline) FieldTriggers() map[string]deployplan.ActionType {
 		"storage":                                   deployplan.ActionTypeRecreate,
 		"ingestion_definition.connection_name":      deployplan.ActionTypeRecreate,
 		"ingestion_definition.ingestion_gateway_id": deployplan.ActionTypeRecreate,
+		"run_as": deployplan.ActionTypeSkip,
 	}
 
-	/*
-
-		if !isLocal {
-			// We've seen that run_as is not consistently set by the backend
-			// TF also ignores it (by not copying it here:
-			// https://github.com/databricks/terraform-provider-databricks/blob/15e951f976e3857d9f01651c4b2513657f137796/pipelines/resource_pipeline.go#L304-L317
-			// TODO: Rather than skipping, consider ignoring the change if run_as is not present but still triggering an update if run_as is different.
-			result["run_as"] = deployplan.ActionTypeSkip
-		}
-
-	*/
-
 	return result
 }