Use restricted environment for gh actions (#347)

Author: fjakobs

.github/workflows/tests.yml

@@ -20,6 +20,8 @@ jobs:
     test-sdk:
         name: Test Databricks SDK
         runs-on: ${{ inputs.os }}
+        environment:
+            name: azure-prod-usr
 
         defaults:
             run:

packages/databricks-sdk-js/src/services/WorkflowRun.integ.ts

@@ -19,7 +19,7 @@ describe(__filename, function () {
         );
 
         const dbfsApi = new DbfsService(integSetup.client);
-        const jobPath = `/tmp/sdk-js-integ-${integSetup.testRunId}.py`;
+        const jobPath = `/tmp/js-sdk-jobs-tests/sdk-js-integ-${integSetup.testRunId}.py`;
 
         await dbfsApi.put({
             path: jobPath,
@@ -58,10 +58,10 @@ describe(__filename, function () {
             integSetup.cluster.id
         );
 
-        const jobPath = `/tmp/sdk-js-integ-${integSetup.testRunId}.py`;
+        const jobPath = `/tmp/js-sdk-jobs-tests/sdk-js-integ-${integSetup.testRunId}.py`;
         const workspaceService = new WorkspaceService(integSetup.client);
 
-        await workspaceService.mkdirs({path: "/tmp"});
+        await workspaceService.mkdirs({path: "/tmp/js-sdk-jobs-tests"});
 
         await workspaceService.import({
             path: jobPath,
@@ -108,10 +108,10 @@ describe(__filename, function () {
             integSetup.cluster.id
         );
 
-        const jobPath = `/tmp/sdk-js-integ-${integSetup.testRunId}.py`;
+        const jobPath = `/tmp/js-sdk-jobs-tests/sdk-js-integ-${integSetup.testRunId}.py`;
         const workspaceService = new WorkspaceService(integSetup.client);
 
-        await workspaceService.mkdirs({path: "/tmp"});
+        await workspaceService.mkdirs({path: "/tmp/js-sdk-jobs-tests"});
 
         await workspaceService.import({
             path: jobPath,

packages/databricks-sdk-js/src/services/WorkspaceConf.integ.ts

@@ -8,8 +8,20 @@ describe(__filename, function () {
 
     this.timeout(10 * 60 * 1000);
 
-    before(async () => {
+    before(async function () {
         integSetup = await IntegrationTestSetup.getInstance();
+        try {
+            const wsConf = new WorkspaceConf(integSetup.client);
+            await wsConf.getStatus(["enableProjectTypeInWorkspace"]);
+        } catch (e: any) {
+            if (e.code === 403) {
+                // eslint-disable-next-line no-console
+                console.log(
+                    "Workspace conf tests require administrator permissions"
+                );
+                this.skip();
+            }
+        }
     });
 
     it("should read configuration properties", async () => {