databricks cli cheatsheet for managing secrets

databricks-cli-secrets.md

Databricks CLI Cheatsheet - managing secrets

(optional) install cli into a virtual python env

virtualenv -p /usr/bin/python2.7 databrickscli
source databrickscli/bin/activate
pip install databricks-cli

Alternatively just install natively

pip install databricks-cli

Obtain a user token, and then connect to workspace and test

databricks configure --token
databricks clusters list
databricks workspace list

Manage scopes

databricks secrets list-scopes
databricks secrets list --scope keyvault         # Azure KeyVault backed scope - see ref below for details

databricks secrets create-scope --scope myscope  # needs premium workspace for admin owner
databricks secrets create-scope --scope myscope --initial-manage-principal-users

Manage secrets

databricks secrets put --scope adbscope --key my-storage-account-pk

Further Reading

• Set up an Azure Keyvault-backed secret scope https://docs.microsoft.com/en-us/azure/databricks/security/secrets/secret-scopes#--create-an-azure-key-vault-backed-secret-scope
• Secret Access Control: https://docs.microsoft.com/en-us/azure/databricks/security/access-control/secret-acl
• Databricks cli - Access Tokens: https://docs.microsoft.com/en-us/azure/databricks/dev-tools/api/latest/authentication