Put Secret using AAD Authentication about azure.databricks.cicd.tools HOT 11 OPEN

Connect-Databricks -Region <LOCATION> -ApplicationId <APPLICATION_ID> -Secret <SECRET> -ResourceGroupName <RESOURCE_GROUP_NAME> -SubscriptionId <SUBSCRIPTION_ID> -WorkspaceName <DATABRICKS_NAME> -TenantId <TENANT_ID>

$token = New-DatabricksBearerToken -LifetimeSeconds 3600 -Comment "Secret Scope Creation"

Add-DatabricksSecretScope -Bearer $token -Region $location -ScopeName <SCOPE_NAME>  -AllUserAccess

Connect-Databricks -Region <LOCATION> -ApplicationId <APPLICATION_ID> -Secret <SECRET> -ResourceGroupName <RESOURCE_GROUP_NAME> -SubscriptionId <SUBSCRIPTION_ID> -WorkspaceName <DATABRICKS_NAME> -TenantId <TENANT_ID>

$token = New-DatabricksBearerToken -LifetimeSeconds 3600 -Comment "Secret Scope Creation"

Add-DatabricksSecretScope -Bearer $token.token_value -Region $location -ScopeName <SCOPE_NAME>  -AllUserAccess

$TenantId=""
$ApplicationId=""
$Secret=""
$ResourceGroupName=""
$SubscriptionId=""
$WorkspaceName=""
$BaseURL = ""

$URI = "https://login.microsoftonline.com/$TenantId/oauth2/token"
$BodyText="grant_type=client_credentials&client_id=$ApplicationId&resource=2ff814a6-3304-4ab8-85cb-cd0e6f879c1d&client_secret=$Secret"
$DatabricksToken = Invoke-RestMethod -Method GET -Body $BodyText -Uri $URI -ContentType application/x-www-form-urlencoded

$URI = "https://login.microsoftonline.com/$TenantId/oauth2/token"
$BodyText="grant_type=client_credentials&client_id=$ApplicationId&resource=https://management.core.windows.net/&client_secret=$Secret"
$ManagementToken = Invoke-RestMethod -Method GET -Body $BodyText -Uri $URI -ContentType application/x-www-form-urlencoded

$Headers = @{
    "Authorization" = "Bearer $($DatabricksToken.access_token)"
    "X-Databricks-Azure-SP-Management-Token" = "$($ManagementToken.access_token)"
    "X-Databricks-Azure-Workspace-Resource-Id" = "/subscriptions/$SubscriptionId/resourceGroups/$ResourceGroupName/providers/Microsoft.Databricks/workspaces/$WorkspaceName"
}

# List Clusters works
Invoke-RestMethod -Method GET -URI "https://$BaseURL/api/2.0/clusters/list" -Headers $Headers

# List Secret Scopes works
Invoke-RestMethod -Method GET -URI "https://$BaseURL/api/2.0/secrets/scopes/list" -Headers $Headers


## Add a Secret Scope as per: https://docs.microsoft.com/en-us/azure/databricks/dev-tools/api/latest/secrets#create-a-databricks-backed-secret-scope
# Returns  {"message":"Authentication is temporarily unavailable. Please try again later.","error_code":"TEMPORARILY_UNAVAILABLE"}
$body = @{}
$body['scope'] = $ScopeName
$body['initial_manage_principal'] = "users"
$BodyText = $Body | ConvertTo-Json -Depth 10
Invoke-RestMethod -Method POST -Body $BodyText -Uri "$BaseURL/api/2.0/secrets/scopes/create" -Headers $Headers