Summary
The databricks_secret resource now includes new string_value_wo and string_value_wo_version attributes. These additions allow users to manage write-only secret values within Databricks secret scopes.
Summary generated by brickster.ai. For the full changelog and any code/binary attachments, follow the GitHub link above.
More from databricks/terraform-provider-databricks
Updated the Databricks API definitions to the latest version (#6020).
Fixed databricks_grant and databricks_grants for AI Gateway securables (model_service, mcp_service, model_provider_service), which previously failed when using resource names that included API prefixes like 'model-provider-services/'. The provider now automatically strips these prefixes before API calls and treats both prefixed and bare resource names as equivalent, eliminating apply failures and perpetual diffs.
Added databricks_domain and databricks_sandbox resources, plus secret securable support in databricks_grant. Fixed databricks_app resource to eliminate inconsistent result errors and perpetual diffs when managing git source configuration fields.
Added data sources for managing external users, service principals, and groups at both account and workspace levels using v2 API versions. Introduced a new resource and data source for Postgres snapshot schedule configuration.
The databricks_repo resource now defaults to a 600-second HTTP timeout for inline Git operations to prevent failures when cloning or updating large repositories. Additionally, the resource exporter now supports Lakebase autoscaling resources.
The exporter now supports exporting six additional resource types including data classifications, secrets, endpoints, and workspace environments. The release also fixes exporter issues including skipping system-managed jobs during export, preserving zero values in settings, and properly resolving embedded references instead of hardcoding them.