Individual skill
databricks-bundle-medic
Fix the deploy-time foot-guns of Databricks Asset Bundles (DAB) and the infrastructure operations around them: the bundle-bind gap for UC catalogs and external locations, the "unexpected EOF reading terraform.tfstate" redeploy failure, the schema-GRANT-ordering bug that fails the first deploy, customer-managed-key (CMK) rotation that requires draining the whole workspace, and the PrivateLink cost leak where S3/STS/Kinesis still traverse the NAT. Includes a PreToolUse hook that backs up and validates the bundle's terraform state before every deploy, and a PostToolUse hook that recognises the transient GRANT-ordering failure and recommends a single retry. Use when a databricks bundle deploy fails, before rotating a CMK, when a UC resource cannot be bound to a bundle, or when auditing PrivateLink networking cost. Trigger with "bundle deploy failed", "unexpected EOF terraform.tfstate", "bundle bind external location", "User does not have CREATE TABLE on Schema", "rotate CMK", "privatelink still using NAT".
skills/.curated/databricks-bundle-medic/SKILL.md
Source commit 0500b275e963c027f6b410e8c49c0446945c574e
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 12, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 2,916
- Repository last updated
- Nov 12, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- ai Repository topic
- automation Repository topic
- claude-code Repository topic
- devops Repository topic
- mcp Repository topic
- ai-agents Repository topic
- anthropic Repository topic
- claude-code-plugins Repository topic
- developer-tools Repository topic
- llm Repository topic
- saas Declared skill tag
- databricks Declared skill tag
- asset-bundles Declared skill tag
- deploy Declared skill tag
- infrastructure Declared skill tag
- devops Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 12,635 bytesSKILL.mdcore · 12,635 bytesSKILL.mdcore · 12,635 bytesSKILL.mdcore · 12,635 bytesSKILL.mdcore · 12,635 bytesSKILL.mdcore · 12,635 bytesSKILL.mdcore · 12,635 bytesSKILL.mdcore · 12,635 bytescommands/audit-bundle-network.mddoc · 1,215 bytescommands/recover-bundle-state.mddoc · 1,120 bytescommands/rotate-cmk.mddoc · 1,233 bytesdocs/ADR.mddoc · 11,207 bytesdocs/ONE-PAGER.mddoc · 5,884 bytesdocs/PRD.mddoc · 13,691 byteseval-spec.yamlasset · 7,530 byteshooks/bundle-deploy-guard.pyruns · 6,766 byteshooks/bundle-grant-retry.pyruns · 4,559 bytesreferences/bundle-engine-tradeoffs.mddoc · 14,292 bytesreferences/cmk-rotation-by-cloud.mddoc · 18,519 bytesreferences/cost-leak-map.mddoc · 14,059 bytesreferences/uc-resource-binding-workarounds.mddoc · 14,054 bytesscripts/audit-vpc-endpoints.pyruns · 6,041 bytesscripts/drain-workspace.pyruns · 7,285 bytesscripts/import-uc-resource-to-bundle.pyruns · 5,935 bytes
Read excerpt
# Databricks Bundle Medic
The deploy + infrastructure spine of the pack. Databricks Asset Bundles (DAB) is
immature tooling — the replacement for the deprecated `dbx`, with a moving bug list
across CLI versions — and the infrastructure operations around a deploy (encryption
keys, networking, workspace config) bite production platform teams hardest. This skill
turns the five worst deploy-time foot-guns into deterministic, reversible operations.
## Overview
Five pains, all from the pack's deploy-ops research:
**Asset Bundles (DAB).** D4 — `databricks bundle bind` does NOT yet support UC catalogs
or external locations (databricks/cli#4842), so existing UC resources cannot come under