Databricks¶
Databricks support is optional and outside the core dependency direction.
The executable readiness scenario is examples.databricks_agent:
It checks package and environment readiness without attempting the network.
Environment¶
Configure the values used by the integration path:
DATABRICKS_HOSTDATABRICKS_WAREHOUSE_IDDATABRICKS_TOKENor an approved Databricks SDK credential sourceDATABRICKS_VOLUME_URIwhen the application uses a Unity Catalog volumeDATABRICKS_APP_PORTandDATABRICKS_APP_NAMEinside Databricks Apps
Identity handling¶
workspace_client() binds a client to the current operation identity. A user principal requires
a forwarded Databricks access token and creates an operation-scoped client. User-scoped clients
are never cached across identities.
Application identities can use SDK credential discovery. SQL connections for an application identity may be reused behind a lock after a health check. User SQL connections are created and closed per operation.
Available helpers¶
Workspace service helpers list warehouses, build a serializable catalog tree, and trigger a job. SQL helpers query records, execute statements, and manage transactions. Unity Catalog helpers list catalogs, schemas, tables, schemas, and bounded table rows.
Pass SQL values as parameters. Catalog, schema, and table helpers quote identifiers, but dynamic identity and authorization decisions still belong to the application.
Qualification boundary¶
Offline tests validate identity isolation, input validation, serialization, SQL parameter handling, and missing-configuration failures with fake clients. A deployment must separately qualify credential-backed calls against its workspace, warehouse, Unity Catalog permissions, network policy, and audit requirements.