git actions to deploy dabs

karthikmani — Thu, 25 Sep 2025 19:57:50 GMT

HI All,

I am trying to create a dabs deployment via git actions. However I am getting below error constantly. Requesting your suggestion on what I am doing wrong here? Thanks.

Note we are using OIDC authentication from git. Our company has disabled tokens and also Service principal option.

git workflow.yaml

name: Databricks-Git-Deploy-km
on:
push:
branches:
- dabs_template

permissions:
id-token: write
contents: read

jobs:
deploy_dab:
name: Deploy Databricks Asset Bundle to Dev
runs-on: [self-hosted]
environment: dev
env:
ARM_TENANT_ID: ***
ARM_SUBSCRIPTION_ID: ***
ARM_CLIENT_ID: ***
ARM_USE_OIDC: true
DATABRICKS_HOST: https://adb-327758908287817.17.azuredatabricks.net
DATABRICKS_AUTH_TYPE: azure-cli

steps:
- name: Checkout code
uses: actions/checkout@v4

- name: Setup Databricks CLI
uses: databricks/setup-cli@v0.245.0

- name: Azure Login (OIDC)
uses: azure/login@v2
with:
client-id: ***
tenant-id: ***
subscription-id: ***

- name: Deploy Databricks bundle using OIDC
run: databricks bundle deploy --target dev --debug
env:
DATABRICKS_HOST: ***
DATABRICKS_AUTH_TYPE: oidc

databricks.yaml:

bundle:
name: dabs_testing
uuid: ***
databricks_cli_version: ">= 0.248.0"

env:
DATABRICKS_HOST: ***
DATABRICKS_AUTH_TYPE: github-oidc

experimental:
python:
venv_path: .venv

artifacts:
default:
type: whl
path: .
build: LOCAL_VERSION=$(date +%Y%m%d.%H%M%S) uv build

include:
- resources/*.yml
- resources/*/*.yml

targets:
dev:
mode: development
default: true
workspace:
host: ***
auth_type: github-oidc
root_path: /Workspace/Users/***/.bundle/${bundle.name}/${bundle.target}

resources:
jobs:
dabs_testing_job:
name: DABS Testing Job
tasks:
- task_key: move_file
spark_python_task:
python_file: ***/dabs_testing.py
existing_cluster_id: ***
description: "A simple notebook task"
run_as:
user_name: "***"

Error:
Error: failed during request visitor: default auth: cannot configure default credentials, please check https://docs.databricks.com/en/dev-tools/auth.html#databricks-client-unified-authentication to configure credentials for your preferred authentication method. Config: ***, azure_client_id=***, azure_tenant_id=***, actions_id_token_request_url=***, actions_id_token_request_token=*** Env: DATABRICKS_HOST, ARM_CLIENT_ID, ARM_TENANT_ID, ACTIONS_ID_TOKEN_REQUEST_URL, ACTIONS_ID_TOKEN_REQUEST_TOKEN

Re: git actions to deploy dabs

saurabh18cs — Fri, 26 Sep 2025 14:27:00 GMT

Hi @karthikmani

Databricks CLI is not able to find or use the right authentication method/environment variables for OIDC. can you try with this :

In your databricks.yaml, you have auth_type: github-oidc and in your workflow you use DATABRICKS_AUTH_TYPE: oidc and also DATABRICKS_AUTH_TYPE: github-oidc
For the CLI, use oidc (not github-oidc).
For the YAML, github-oidc is correct for bundle deployments.
DATABRICKS_AUTH_TYPE: oidc and Do not set DATABRICKS_AUTH_TYPE: azure-cli if you want OIDC.

topic git actions to deploy dabs in Data Engineering

git actions to deploy dabs

Re: git actions to deploy dabs