[Feature] Update databricks_permissions resource to support vector-search-endpoints

[zgcalebp]

Changes

Databricks permissions API has been updated to support vector-search-endpoints. This corresponding change to the permissions_definitions would enable the use of the databricks_permissions resource to manage ACLs for Vector Search Endpoints leveraging the existing APIs under the hood.

Example CLI call confirming support:

databricks permissions get vector-search-endpoints {endpoint-id} --debug
18:56:25  INFO start pid=77800 version=0.224.1 args="databricks, permissions, get, vector-search-endpoints, {endpoint-id}, --debug"
18:56:25  INFO Ignoring pat auth, because databricks-cli is preferred pid=77800 sdk=true
18:56:25  INFO Ignoring basic auth, because databricks-cli is preferred pid=77800 sdk=true
18:56:25  INFO Ignoring oauth-m2m auth, because databricks-cli is preferred pid=77800 sdk=true
18:56:25  INFO Refreshed OAuth token from Databricks CLI, expires on 2024-11-11 19:00:53.515729 -0500 EST pid=77800 sdk=true
18:56:25 DEBUG Using Databricks CLI authentication with Databricks OAuth tokens pid=77800 sdk=true
18:56:25  INFO Refreshed OAuth token from Databricks CLI, expires on 2024-11-11 19:00:53.515729 -0500 EST pid=77800 sdk=true
18:56:26 DEBUG GET /api/2.0/permissions/vector-search-endpoints/{endpoint-id}
< HTTP/2.0 200 OK
< {
<   "access_control_list": [
....

Tests

• make test run locally
• relevant change in docs/ folder
• covered with integration tests in internal/acceptance
• relevant acceptance tests are passing
• using Go SDK

[alexott]

changes looks good - thank you.

can you please add a permission resource inside this integration test: https://github.com/databricks/terraform-provider-databricks/blob/main/internal/acceptance/vector_search_test.go#L20?

[alexott]

And please do make fmt

[zgcalebp]

Sorry for the typos on that last commit 😅 . Working through getting these integration tests to run locally now. Thanks for the quick review too!

[zgcalebp]

Was able to validate the MR updates locally, should be good to merge upon review and Git action completions. Let me know if any further input is needed!

[zgcalebp]

Thanks @alexott for the test update. Should've more strongly considered the provisioning time for a permissions test.

[alexott]

It's very specific for vector search endpoint - I realised that test was running too long, and made the update.
I'll merge as soon as tests are passing

thank you for your contribution!

[zgcalebp]

Is there some way to view the output of the integration tests? Surprised they aren't passing, happy to update to fix.

[alexott]

@zgcalebp The tests were failing because I ran the original patch with full-blown permissions test, but VS requires UC, and the test name wasn't adjusted for running only on UC-enabled workspaces

[github-actions]

If integration tests don't run automatically, an authorized user can run them manually by following the instructions below:

Trigger:
go/deco-tests-run/terraform

Inputs:

• PR number: 4209
• Commit SHA: 81605c2aa8673d2f0c7eedae14deeba3276748f1

Checks will be approved automatically on success.

[eng-dev-ecosystem-bot]

Test Details: go/deco-tests/11813686757