Skip to content

Commit fcc6271

Browse files
author
dmytro_velychko3
committed
fix: create precondition
1 parent 4cc8ba5 commit fcc6271

File tree

1 file changed

+21
-0
lines changed

1 file changed

+21
-0
lines changed

permissions.tf

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -21,6 +21,13 @@ resource "databricks_permissions" "clusters" {
2121
permission_level = access_control.value.permission_level
2222
}
2323
}
24+
25+
lifecycle {
26+
precondition {
27+
condition = alltrue([for i in each.value.permissions : contains(var.iam_account_groups[*].group_name, i.group_name)])
28+
error_message = "Incorrect group_name set for permission cluster settings"
29+
}
30+
}
2431
}
2532

2633
resource "databricks_permissions" "sql_endpoint" {
@@ -38,6 +45,13 @@ resource "databricks_permissions" "sql_endpoint" {
3845
permission_level = access_control.value.permission_level
3946
}
4047
}
48+
49+
lifecycle {
50+
precondition {
51+
condition = alltrue([for i in each.value.permissions : contains(var.iam_account_groups[*].group_name, i.group_name)])
52+
error_message = "Incorrect group_name set for permission cluster settings"
53+
}
54+
}
4155
}
4256

4357
resource "databricks_secret_acl" "this" {
@@ -46,4 +60,11 @@ resource "databricks_secret_acl" "this" {
4660
scope = databricks_secret_scope.this[each.value.scope].name
4761
principal = length(var.iam_account_groups) != 0 ? data.databricks_group.account_groups[each.value.principal].display_name : databricks_group.this[each.value.principal].display_name
4862
permission = each.value.permission
63+
64+
lifecycle {
65+
precondition {
66+
condition = alltrue([for i in each.value.permissions : contains(var.iam_account_groups[*].group_name, i.group_name)])
67+
error_message = "Incorrect group_name set for permission cluster settings"
68+
}
69+
}
4970
}

0 commit comments

Comments
 (0)