Summary
Utility clusters created by resources like `databricks_aws_s3_mount` now default to `SPOT_WITH_FALLBACK` for improved reliability. Plaintext credential fields in `databricks_model_serving` and `databricks_git_credential` are now marked sensitive to prevent display in plan/apply output.
Summary generated by brickster.ai. For the full changelog and any code/binary attachments, follow the GitHub link above.
More from databricks/terraform-provider-databricks
Added data sources for managing external users, service principals, and groups at both account and workspace levels using v2 API versions. Introduced a new resource and data source for Postgres snapshot schedule configuration.
The databricks_repo resource now defaults to a 600-second HTTP timeout for inline Git operations to prevent failures when cloning or updating large repositories. Additionally, the resource exporter now supports Lakebase autoscaling resources.
The exporter now supports exporting six additional resource types including data classifications, secrets, endpoints, and workspace environments. The release also fixes exporter issues including skipping system-managed jobs during export, preserving zero values in settings, and properly resolving embedded references instead of hardcoding them.
This release introduces v2 IAM resources and data sources at both account and workspace levels, covering management of groups, users, service principals, and workspace assignments. Documentation improvements include expanded Genie budget configuration guidance with shared versus per-user examples.
Added support for model_service, mcp_service, and model_provider_service securables in databricks_grant and databricks_grants resources. Fixed databricks_share to sync comment changes made outside Terraform instead of failing, with the comment attribute now optional and computed.
Fixed an issue where config.DefaultHostMetadataResolverFactory wasn't being honored during provider configuration. Fixed perpetual plan diffs and null ID issues in databricks_share resources by properly restoring resource IDs on read and update operations.