feat: Role aware ucode configure for mcp, skills, spend-tiers subcommands - #418
Open
tt-le wants to merge 3 commits into
Open
feat: Role aware ucode configure for mcp, skills, spend-tiers subcommands #418tt-le wants to merge 3 commits into
tt-le wants to merge 3 commits into
Conversation
Move the managed-config section authoring from `ucode setup <section>` onto the role-aware `ucode configure`, so it survives the `ucode setup` removal (AIGTWY-4342) and matches the ug IA (admin authoring stays in the CLI only temporarily, until the Databricks UI/REST/TF surfaces land). - `ucode configure spend-tiers`: new admin-only command wrapping setup_budget_policy_command (no developer form, so it always authors). - `ucode configure mcp` / `ucode configure skills`: now role-aware, mirroring bare `ucode configure`. A workspace admin (with ENABLE_MANAGED_AGENT_CONFIG set) authors the managed config's MCP servers / skills; a developer configures their own tools. Gated by the flag, so with it off these stay developer-only exactly as before. Admins wanting personal MCP servers use `ucode mcp add`/`remove`. - Repoint the authoring flow's "Next steps" list at the `ucode configure` section commands. `ucode setup <section>` still works; its removal is the separate AIGTWY-4342 deprecation. Co-authored-by: Isaac <no-reply@databricks.com>
…strings The old name described how the result is used, not what the function checks; it's a predicate for "is the caller a workspace admin (with the feature on)". Also tighten its docstring and configure_spend_tiers' to state behavior rather than caller context. Co-authored-by: Isaac <no-reply@databricks.com>
`ucode configure mcp`/`skills` authenticate once in `_is_managed_config_admin` to pick the admin-vs-developer branch, then the chosen branch authenticates again — printing "Databricks auth already available" twice. Pass quiet=True to the pre-check's ensure_databricks_auth (as setup_command already does) so only the branch reports it. A real login is never silenced by quiet. Co-authored-by: Isaac <no-reply@databricks.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Added role aware subcommands:
Workspace admin
Non workspace admin
Blocking admin only command:
ucode configure mcps, skills are still routing to the dev version when the user is not an admin.