Associating a Git Credential with a Service Principal using Terraform Provider (AWS)

[Kinger]

I am attempting to create a Databrick Repo in a workspace via Terraform. I would like the Repo and the associated Git Credential to be associated with a Service Principal. 

In my initial run, the Terraform provider is associated with the user defined in the .databrickscfg file and when resources were created, the user had a link to the created Git Credential. This causes issues if that particular user already had a git credential (since there can only be 1 git credential associated with a user).

To avoid the Git Credential getting associated with the user, I would like to

- Create a Service Principal

- Create a git credential associated with that Service Provider

- Have the repo creation be done using that git credential. Basically, create the repo using the created Service Principal

I have not found a way to get the git credential associated with the SP and associate the SP with the Repo creation in terraform. I have seen some threads saying you can associate an SP for repo creation but they seem to be on Azure or just via the CLI? Can this be done in the databricks terraform provider?

Thank you.

[Kaniz_Fatma]

Hi @Kinger, The Databricks Terraform provider does not support creating a git credential associated with a Service Principal (SP) and associating the SP with the Repo creation.
• However, you can create a Service Principal and associate it with a git credential using Databricks APIs.
• This process cannot be performed via the user interface and requires tools like curl, Postman, or Terraform to call the APIs.
• The general process involves creating a Service Principal using the Service Principals API and adding Git provider credentials to the workspace using the Git Credentials API.
• After creating and associating the Service Principal with the git credential, it can be used for repo creation and other operations.
• The user token in the .databrickscfg file should be replaced with the token of the Service Principal when performing operations as the Service Principal.

[Debi-Moha]

Hello, could you attach any reference post/article around this? I'm also trying to associate an SP with a Git Credential, so that I can set the SP as "run_as" in the Databricks Job config. I have AWS as the cloud.