Consolidate workspace folder ACL logic and add a writability check by pietern · Pull Request #5948 · databricks/cli

pietern · 2026-07-16T16:04:50Z

Why

Reading bundle validate's remote-path handling (#5528) surfaced that we have no read-only way to tell a user, early, that they likely can't write to their workspace.file_path. Today that only fails at deploy. Reasoning about folder permissions was also split: folder_permissions.go owned the ancestor-walk traversal while bundle/permissions owned the ACL model. This lands one place for it and the reusable core for a follow-up writability warning.

What

Consolidate the traversal and ACL model into bundle/permissions as FolderACL (walks up to the closest existing ancestor for a not-yet-created folder).
CanWrite(user): CAN_EDIT+ directly or via a known group; conservative for admins and unknown group membership.
CheckWritable(...): three-valued (writable / not-writable / unknown), since reading a folder ACL itself requires manage access, so "cannot write" usually surfaces as a 403 on the read.

Groundwork only: no validator is wired up yet (the consuming validator is a follow-up, alongside #5528), and existing behavior is unchanged. ValidateFolderPermissions now calls ResolveFolderACL but produces the same diagnostics. Confined to bundle/permissions.

This pull request and its description were written by Isaac.

The logic for reasoning about a workspace folder's access control was split across two places: folder_permissions.go owned the traversal that walks up to the closest existing ancestor, while bundle/permissions owned the ACL model (WorkspacePathPermissions, ObjectAclToResourcePermissions). Bring them together in bundle/permissions as FolderACL, so there is one place that resolves and reasons about folder permissions. Add a writability check with two entry points: - FolderACL.CanWrite inspects a readable ACL: does the user hold CAN_EDIT or higher, directly or via a known group. It is conservative, assuming write access for workspace admins (who bypass the folder ACL) and when group membership is not known here. - CheckWritable resolves the ACL and returns a three-valued result. This is necessary because reading a folder ACL itself requires manage access: verified against a live workspace, GET permissions returns 403 for folders the caller cannot manage, so the common "cannot write" case surfaces as a permission error on the read, not as a readable ACL that omits the user. CheckWritable maps that 403 to WritabilityNotWritable, a readable ACL to writable/not-writable, and anything else to unknown. Tests use ACLs that mirror the shape of real workspace folder permissions (a home dir with direct CAN_MANAGE; a shared dir with CAN_MANAGE via a group the user belongs to) to confirm CanWrite agrees with those grants. This is the reusable core for a future read-only "remote file path may not be writable" validation. No validator is wired up yet and existing behavior is unchanged: folder_permissions now calls ResolveFolderACL but produces the same diagnostics. Co-authored-by: Isaac

Cite the workspace ACL model (managing permissions is exclusive to CAN_MANAGE) so the next reader can trace why CheckWritable treats a permission-denied error on the permissions GET as a definite "not writable" without re-probing the API. Co-authored-by: Isaac

eng-dev-ecosystem-bot · 2026-07-16T16:43:25Z

Integration test report

Commit: f1c3824

Run: 29514807918

	Env	🔄flaky	💚RECOVERED	🙈SKIP	✅pass	🙈skip	Time
🔄	aws linux	2	4	4	225	1119	4:58
💚	aws windows		4	4	229	1117	8:37
💚	aws-ucws linux		4	4	316	1035	5:59
💚	aws-ucws windows		4	4	318	1033	7:35
💚	azure linux		4	4	227	1118	4:46
💚	azure windows		4	4	229	1116	6:36
💚	azure-ucws linux		4	4	318	1032	6:19
💚	azure-ucws windows		4	4	320	1030	8:53
💚	gcp linux		4	4	226	1120	4:38
💚	gcp windows		4	4	228	1118	6:45

10 interesting tests: 4 RECOVERED, 4 SKIP, 2 flaky

	Test Name	aws linux	aws windows	aws-ucws linux	aws-ucws windows	azure linux	azure windows	azure-ucws linux	azure-ucws windows	gcp linux	gcp windows
💚	TestAccept	💚R	💚R	💚R	💚R	💚R	💚R	💚R	💚R	💚R	💚R
🙈	TestAccept/bundle/invariant/no_drift	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S
🙈	TestAccept/bundle/resources/vector_search_endpoints/drift/recreated_same_name	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S
🙈	TestAccept/bundle/resources/vector_search_indexes/recreate/embedding_dimension	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S
🙈	TestAccept/ssh/connection	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S	🙈S
🔄	TestFilerWorkspaceNotebook	🔄f	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p
🔄	TestFilerWorkspaceNotebook/scalaNb.scala	🔄f	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p
💚	TestFetchRepositoryInfoAPI_FromRepo	💚R	💚R	💚R	💚R	💚R	💚R	💚R	💚R	💚R	💚R
💚	TestFetchRepositoryInfoAPI_FromRepo/root	💚R	💚R	💚R	💚R	💚R	💚R	💚R	💚R	💚R	💚R
💚	TestFetchRepositoryInfoAPI_FromRepo/subdir	💚R	💚R	💚R	💚R	💚R	💚R	💚R	💚R	💚R	💚R

Top 10 slowest tests (at least 2 minutes):

duration	env	testname
8:12	aws windows	TestAccept
7:20	azure-ucws windows	TestAccept
6:34	aws-ucws windows	TestAccept
6:21	gcp windows	TestAccept
6:12	azure windows	TestAccept
2:55	azure linux	TestAccept
2:53	azure-ucws linux	TestAccept
2:51	aws linux	TestAccept
2:50	gcp linux	TestAccept
2:44	aws-ucws linux	TestAccept

andrewnester · 2026-07-16T18:16:27Z

+// "does not have Manage permissions" otherwise), so a 403 means the user cannot
+// manage, and therefore cannot write to, the folder.
+// See https://docs.databricks.com/aws/en/security/auth/access-control/
+func CheckWritable(ctx context.Context, w workspace.WorkspaceInterface, folderPath string, user *iam.User) Writability {


It's not called right now, is it expected for it to be called somewhere else later?

Yes, this is prep for #5528 not performing the mkdir, but still having a writability check on validate.

eng-dev-ecosystem-bot · 2026-07-17T08:09:51Z

Integration test report

Commit: 54c75fc

Run: 29559236296

	Env	❌FAIL	🟨KNOWN	🔄flaky	💚RECOVERED	🙈SKIP	✅pass	🙈skip	Time
❌	aws linux	6	1		3	4	520	1048	45:18
❌	aws windows	1		4	4	4	478	1061	61:00
🔄	aws-ucws linux			5	4	2	1000	857	83:37
🔄	aws-ucws windows			3	4	2	944	875	104:03
💚	azure linux				4	4	520	1049	43:07
💚	azure windows				4	4	477	1062	53:59
🔄	azure-ucws linux			4	5	2	895	892	84:43
🔄	azure-ucws windows			2	6	2	838	910	99:36
❌	gcp linux	507	2			4	28	1019	3:22
❌	gcp windows	464	2			4	28	1032	6:31

528 interesting tests: 515 FAIL, 6 flaky, 3 RECOVERED, 2 KNOWN, 2 SKIP

	Test Name	aws linux	aws windows	aws-ucws linux	aws-ucws windows	azure linux	azure windows	azure-ucws linux	azure-ucws windows	gcp linux	gcp windows
🟨	TestAccept	🟨K	💚R	🔄f	🔄f	💚R	💚R	💚R	💚R	🟨K	🟨K
❌	TestAccept/bundle/apps/compute_size	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/apps/compute_size/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/apps/compute_size/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/config-remote-sync/cli_defaults	✅p	🙈s	✅p	🙈s	✅p	🙈s	✅p	🙈s	❌F	🙈s
❌	TestAccept/bundle/config-remote-sync/cli_defaults/DATABRICKS_BUNDLE_ENGINE=direct	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/cli_defaults/DATABRICKS_BUNDLE_ENGINE=terraform	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/config_edits	✅p	🙈s	✅p	🙈s	✅p	🙈s	✅p	🙈s	❌F	🙈s
❌	TestAccept/bundle/config-remote-sync/config_edits/DATABRICKS_BUNDLE_ENGINE=direct	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/config_edits/DATABRICKS_BUNDLE_ENGINE=terraform	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/dashboard_etag	✅p	🙈s	✅p	🙈s	✅p	🙈s	✅p	🙈s	❌F	🙈s
❌	TestAccept/bundle/config-remote-sync/dashboard_etag/DATABRICKS_BUNDLE_ENGINE=direct	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/dashboard_etag/DATABRICKS_BUNDLE_ENGINE=terraform	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/flushed_cache	✅p	🙈s	✅p	🙈s	✅p	🙈s	✅p	🙈s	❌F	🙈s
❌	TestAccept/bundle/config-remote-sync/flushed_cache/DATABRICKS_BUNDLE_ENGINE=direct	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/flushed_cache/DATABRICKS_BUNDLE_ENGINE=terraform	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/formatting_preserved	✅p	🙈s	✅p	🙈s	✅p	🙈s	✅p	🙈s	❌F	🙈s
❌	TestAccept/bundle/config-remote-sync/formatting_preserved/DATABRICKS_BUNDLE_ENGINE=direct	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/formatting_preserved/DATABRICKS_BUNDLE_ENGINE=terraform	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/job_multiple_tasks	✅p	🙈s	✅p	🙈s	✅p	🙈s	✅p	🙈s	❌F	🙈s
❌	TestAccept/bundle/config-remote-sync/job_multiple_tasks/DATABRICKS_BUNDLE_ENGINE=direct	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/job_multiple_tasks/DATABRICKS_BUNDLE_ENGINE=terraform	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/job_pipeline_task	✅p	🙈s	✅p	🙈s	✅p	🙈s	✅p	🙈s	❌F	🙈s
❌	TestAccept/bundle/config-remote-sync/job_pipeline_task/DATABRICKS_BUNDLE_ENGINE=direct	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/job_pipeline_task/DATABRICKS_BUNDLE_ENGINE=terraform	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/multiple_files	✅p	🙈s	✅p	🙈s	✅p	🙈s	✅p	🙈s	❌F	🙈s
❌	TestAccept/bundle/config-remote-sync/multiple_files/DATABRICKS_BUNDLE_ENGINE=direct	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/multiple_files/DATABRICKS_BUNDLE_ENGINE=terraform	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/output_json	✅p	🙈s	✅p	🙈s	✅p	🙈s	✅p	🙈s	❌F	🙈s
❌	TestAccept/bundle/config-remote-sync/output_json/DATABRICKS_BUNDLE_ENGINE=direct	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/output_json/DATABRICKS_BUNDLE_ENGINE=terraform	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/output_no_changes	✅p	🙈s	✅p	🙈s	✅p	🙈s	✅p	🙈s	❌F	🙈s
❌	TestAccept/bundle/config-remote-sync/output_no_changes/DATABRICKS_BUNDLE_ENGINE=direct	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/output_no_changes/DATABRICKS_BUNDLE_ENGINE=terraform	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/policy_injected_cluster_fields	✅p	🙈s	✅p	🙈s	✅p	🙈s	✅p	🙈s	❌F	🙈s
❌	TestAccept/bundle/config-remote-sync/policy_injected_cluster_fields/DATABRICKS_BUNDLE_ENGINE=direct	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/policy_injected_cluster_fields/DATABRICKS_BUNDLE_ENGINE=terraform	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/select_basic	✅p	🙈s	✅p	🙈s	✅p	🙈s	✅p	🙈s	❌F	🙈s
❌	TestAccept/bundle/config-remote-sync/select_basic/DATABRICKS_BUNDLE_ENGINE=direct	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/select_basic/DATABRICKS_BUNDLE_ENGINE=terraform	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/select_multiple	✅p	🙈s	✅p	🙈s	✅p	🙈s	✅p	🙈s	❌F	🙈s
❌	TestAccept/bundle/config-remote-sync/select_multiple/DATABRICKS_BUNDLE_ENGINE=direct	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/select_multiple/DATABRICKS_BUNDLE_ENGINE=terraform	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/target_override	✅p	🙈s	✅p	🙈s	✅p	🙈s	✅p	🙈s	❌F	🙈s
❌	TestAccept/bundle/config-remote-sync/target_override/DATABRICKS_BUNDLE_ENGINE=direct	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/target_override/DATABRICKS_BUNDLE_ENGINE=terraform	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/task_rename_revert	✅p	🙈s	✅p	🙈s	✅p	🙈s	✅p	🙈s	❌F	🙈s
❌	TestAccept/bundle/config-remote-sync/task_rename_revert/DATABRICKS_BUNDLE_ENGINE=direct	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/config-remote-sync/task_rename_revert/DATABRICKS_BUNDLE_ENGINE=terraform	✅p		✅p		✅p		✅p		❌F
❌	TestAccept/bundle/deploy/empty-bundle	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deploy/empty-bundle/DATABRICKS_BUNDLE_ENABLE_EXPERIMENTAL_YAML_SYNC=/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deploy/empty-bundle/DATABRICKS_BUNDLE_ENABLE_EXPERIMENTAL_YAML_SYNC=/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deploy/empty-bundle/DATABRICKS_BUNDLE_ENABLE_EXPERIMENTAL_YAML_SYNC=true/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deploy/empty-bundle/DATABRICKS_BUNDLE_ENABLE_EXPERIMENTAL_YAML_SYNC=true/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deploy/files/no-snapshot-sync	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deploy/files/no-snapshot-sync/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deploy/files/no-snapshot-sync/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deploy/snapshot-comparison	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deploy/snapshot-comparison/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deploy/spark-jar-task	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deploy/spark-jar-task/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deploy/spark-jar-task/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/alert	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/alert/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/alert/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/cluster	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/cluster/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/cluster/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/dashboard	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/dashboard/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/dashboard/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/dashboard/recreation	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/dashboard/recreation/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/dashboard/recreation/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/experiment	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/experiment/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/experiment/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/job/generate-and-bind	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/job/generate-and-bind/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/job/generate-and-bind/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/job/job-abort-bind	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/job/job-abort-bind/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/job/job-abort-bind/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/job/job-spark-python-task	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/job/job-spark-python-task/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/job/job-spark-python-task/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/model-serving-endpoint	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/model-serving-endpoint/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/model-serving-endpoint/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/pipelines/recreate	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/pipelines/recreate/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/bind/pipelines/recreate/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/unbind/permissions	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/unbind/permissions/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/deployment/unbind/permissions/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/destroy/jobs-and-pipeline	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/destroy/jobs-and-pipeline/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/destroy/jobs-and-pipeline/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/generate/alert	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/generate/alert/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/generate/alert/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/generate/auto-bind	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/generate/auto-bind/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/generate/pipeline_and_deploy	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/generate/pipeline_and_deploy/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/generate/pipeline_and_deploy/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/generate/python_job_and_deploy	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/generate/python_job_and_deploy/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/generate/python_job_and_deploy/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
💚	TestAccept/bundle/invariant/no_drift	🙈S	🙈S	💚R	💚R	🙈S	🙈S	💚R	💚R	🙈S	🙈S
❌	TestAccept/bundle/local_state_staleness	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/local_state_staleness/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/local_state_staleness/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/alerts/basic	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/alerts/basic/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/alerts/basic/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/alerts/with_file	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/alerts/with_file/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/alerts/with_file/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/apps/inline_config	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/apps/inline_config/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/apps/inline_config/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/apps/lifecycle-started	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/apps/lifecycle-started-omitted	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/apps/lifecycle-started-omitted/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/apps/lifecycle-started-terraform-error	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/apps/lifecycle-started-terraform-error/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/apps/lifecycle-started-toggle	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/apps/lifecycle-started-toggle/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/apps/lifecycle-started/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/clusters/deploy/data_security_mode	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/clusters/deploy/data_security_mode/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/clusters/deploy/data_security_mode/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/clusters/deploy/local_ssd_count	🙈s	🙈s	🙈s	🙈s	🙈s	🙈s	🙈s	🙈s	❌F	❌F
❌	TestAccept/bundle/resources/clusters/deploy/local_ssd_count/DATABRICKS_BUNDLE_ENGINE=direct									❌F	❌F
❌	TestAccept/bundle/resources/clusters/deploy/local_ssd_count/DATABRICKS_BUNDLE_ENGINE=terraform									❌F	❌F
❌	TestAccept/bundle/resources/clusters/deploy/simple	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/clusters/deploy/simple/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/clusters/deploy/simple/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/clusters/deploy/update-after-create	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/clusters/deploy/update-after-create/DATABRICKS_BUNDLE_ENGINE=direct	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/clusters/deploy/update-after-create/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/clusters/lifecycle-started	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/clusters/lifecycle-started-terraform-error	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F
❌	TestAccept/bundle/resources/clusters/lifecycle-started-terraform-error/DATABRICKS_BUNDLE_ENGINE=terraform	✅p	✅p	✅p	✅p	✅p	✅p	✅p	✅p	❌F	❌F

Top 50 slowest tests (at least 2 minutes):

duration	env	testname
12:55	aws-ucws windows	TestAccept/bundle/resources/clusters/lifecycle-started/DATABRICKS_BUNDLE_ENGINE=direct
12:55	aws linux	TestAccept/bundle/resources/clusters/lifecycle-started/DATABRICKS_BUNDLE_ENGINE=direct
12:36	azure-ucws linux	TestAccept/bundle/resources/clusters/lifecycle-started/DATABRICKS_BUNDLE_ENGINE=direct
10:37	aws linux	TestAccept/bundle/resources/clusters/lifecycle-started-toggle/DATABRICKS_BUNDLE_ENGINE=direct
8:46	aws linux	TestAccept/bundle/resources/apps/lifecycle-started/DATABRICKS_BUNDLE_ENGINE=direct
8:45	azure-ucws linux	TestAccept/bundle/config-remote-sync/multiple_resources/DATABRICKS_BUNDLE_ENGINE=direct
8:44	azure linux	TestAccept/bundle/resources/clusters/lifecycle-started-toggle/DATABRICKS_BUNDLE_ENGINE=direct
8:37	aws-ucws linux	TestAccept/bundle/resources/apps/lifecycle-started/DATABRICKS_BUNDLE_ENGINE=direct
8:18	aws-ucws windows	TestAccept/bundle/resources/apps/lifecycle-started/DATABRICKS_BUNDLE_ENGINE=direct
7:51	aws windows	TestAccept/bundle/resources/apps/lifecycle-started/DATABRICKS_BUNDLE_ENGINE=direct
7:46	aws windows	TestAccept/bundle/resources/clusters/lifecycle-started/DATABRICKS_BUNDLE_ENGINE=direct
7:23	azure windows	TestAccept/bundle/resources/apps/lifecycle-started/DATABRICKS_BUNDLE_ENGINE=direct
7:21	aws linux	TestAccept/bundle/resources/clusters/deploy/update-after-create/DATABRICKS_BUNDLE_ENGINE=terraform
7:19	azure-ucws windows	TestAccept/bundle/resources/apps/lifecycle-started/DATABRICKS_BUNDLE_ENGINE=direct
7:18	azure-ucws linux	TestAccept/bundle/resources/apps/lifecycle-started/DATABRICKS_BUNDLE_ENGINE=direct
7:03	aws-ucws linux	TestAccept/bundle/resources/clusters/lifecycle-started/DATABRICKS_BUNDLE_ENGINE=direct
7:02	azure-ucws linux	TestAccept/bundle/config-remote-sync/multiple_resources/DATABRICKS_BUNDLE_ENGINE=terraform
7:01	azure linux	TestAccept/bundle/resources/apps/lifecycle-started/DATABRICKS_BUNDLE_ENGINE=direct
6:50	aws-ucws windows	TestAccept/bundle/resources/clusters/deploy/data_security_mode/DATABRICKS_BUNDLE_ENGINE=direct
6:49	aws linux	TestAccept/bundle/resources/clusters/deploy/update-after-create/DATABRICKS_BUNDLE_ENGINE=direct
6:40	azure linux	TestAccept/bundle/resources/clusters/lifecycle-started/DATABRICKS_BUNDLE_ENGINE=direct
6:30	azure linux	TestAccept/bundle/resources/clusters/deploy/simple/DATABRICKS_BUNDLE_ENGINE=direct
6:25	azure windows	TestAccept
6:25	azure-ucws linux	TestAccept/bundle/resources/clusters/deploy/update-after-create/DATABRICKS_BUNDLE_ENGINE=terraform
6:23	azure-ucws windows	TestAccept/bundle/resources/clusters/lifecycle-started/DATABRICKS_BUNDLE_ENGINE=direct
6:22	azure-ucws linux	TestAccept/bundle/resources/clusters/deploy/data_security_mode/DATABRICKS_BUNDLE_ENGINE=direct
6:19	azure-ucws linux	TestAccept/bundle/resources/clusters/deploy/update-after-create/DATABRICKS_BUNDLE_ENGINE=direct
6:13	aws-ucws windows	TestAccept/bundle/resources/clusters/lifecycle-started-toggle/DATABRICKS_BUNDLE_ENGINE=direct
6:04	azure linux	TestAccept/bundle/resources/clusters/deploy/update-after-create/DATABRICKS_BUNDLE_ENGINE=terraform
5:32	azure windows	TestAccept/bundle/resources/clusters/lifecycle-started/DATABRICKS_BUNDLE_ENGINE=direct
5:31	azure windows	TestAccept/bundle/resources/clusters/lifecycle-started-toggle/DATABRICKS_BUNDLE_ENGINE=direct
5:20	aws linux	TestAccept/bundle/deploy/spark-jar-task/DATABRICKS_BUNDLE_ENGINE=terraform
5:18	aws-ucws linux	TestAccept/bundle/deploy/spark-jar-task/DATABRICKS_BUNDLE_ENGINE=terraform
5:13	aws-ucws linux	TestAccept/bundle/config-remote-sync/multiple_resources/DATABRICKS_BUNDLE_ENGINE=terraform
5:10	aws windows	TestAccept/bundle/resources/clusters/lifecycle-started-toggle/DATABRICKS_BUNDLE_ENGINE=direct
5:00	aws-ucws linux	TestAccept/bundle/resources/clusters/lifecycle-started-toggle/DATABRICKS_BUNDLE_ENGINE=direct
4:53	aws-ucws linux	TestAccept/bundle/deploy/spark-jar-task/DATABRICKS_BUNDLE_ENGINE=direct
4:46	aws linux	TestAccept/bundle/deploy/spark-jar-task/DATABRICKS_BUNDLE_ENGINE=direct
4:36	azure windows	TestAccept/bundle/deploy/spark-jar-task/DATABRICKS_BUNDLE_ENGINE=terraform
4:32	azure-ucws windows	TestAccept/bundle/invariant/no_drift/DATABRICKS_BUNDLE_ENGINE=direct/INPUT_CONFIG=cluster.yml.tmpl/READPLAN=1
4:32	azure-ucws windows	TestAccept/bundle/resources/clusters/lifecycle-started-toggle/DATABRICKS_BUNDLE_ENGINE=direct
4:27	azure linux	TestAccept/bundle/deploy/spark-jar-task/DATABRICKS_BUNDLE_ENGINE=terraform
4:25	aws windows	TestAccept/bundle/deploy/spark-jar-task/DATABRICKS_BUNDLE_ENGINE=direct
4:16	azure-ucws linux	TestAccept/bundle/deploy/spark-jar-task/DATABRICKS_BUNDLE_ENGINE=terraform
4:08	azure-ucws linux	TestAccept/bundle/deploy/spark-jar-task/DATABRICKS_BUNDLE_ENGINE=direct
4:00	azure linux	TestAccept/bundle/deploy/spark-jar-task/DATABRICKS_BUNDLE_ENGINE=direct
3:57	azure-ucws linux	TestAccept/bundle/resources/clusters/lifecycle-started-toggle/DATABRICKS_BUNDLE_ENGINE=direct
3:56	azure windows	TestAccept/bundle/deploy/spark-jar-task/DATABRICKS_BUNDLE_ENGINE=direct
3:52	azure-ucws windows	TestAccept/bundle/invariant/no_drift/DATABRICKS_BUNDLE_ENGINE=direct/INPUT_CONFIG=cluster.yml.tmpl/READPLAN=
3:33	azure linux	TestAccept/bundle/resources/apps/inline_config/DATABRICKS_BUNDLE_ENGINE=direct

(383 table rows omitted to keep the report under 60000 bytes)

pietern added 2 commits July 16, 2026 15:47

pietern requested review from andrewnester and janniklasrose July 16, 2026 16:16

andrewnester approved these changes Jul 16, 2026

View reviewed changes

andrewnester reviewed Jul 16, 2026

View reviewed changes

pietern added this pull request to the merge queue Jul 17, 2026

Merged via the queue into main with commit 54c75fc Jul 17, 2026
29 checks passed

pietern deleted the validate-writable-file-path branch July 17, 2026 06:08

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Consolidate workspace folder ACL logic and add a writability check#5948

Consolidate workspace folder ACL logic and add a writability check#5948
pietern merged 2 commits into
mainfrom
validate-writable-file-path

pietern commented Jul 16, 2026

Uh oh!

eng-dev-ecosystem-bot commented Jul 16, 2026

Uh oh!

andrewnester Jul 16, 2026

Uh oh!

pietern Jul 17, 2026

Uh oh!

Uh oh!

eng-dev-ecosystem-bot commented Jul 17, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

pietern commented Jul 16, 2026

Why

What

Uh oh!

eng-dev-ecosystem-bot commented Jul 16, 2026

Integration test report

Uh oh!

andrewnester Jul 16, 2026

Choose a reason for hiding this comment

Uh oh!

pietern Jul 17, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

eng-dev-ecosystem-bot commented Jul 17, 2026

Integration test report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants