[FEATURE]: Create spn secret if it does not exist

[nkvuong]

Is there an existing issue for this?

• I have searched the existing issues

Problem statement

When migrating Azure SPNs to UC storage credentials, SPNs without client secrets are not migrated

Related issues:

• [FEATURE]: Migrate Azure Service Principals that access storage to Managed Identity based UC Storage Credentials #875
• Migrate Azure Service Principals that access storage to UC Storage Credentials #339
• Migrate Azure Service Principals with secrete stored in Databricks Secret to UC Storage Credentials #874
• Migrate Azure Service Principals that access storage to UC Storage Credentials #339

Proposed Solution

Attempt to create a short-lived secret for SPNs without client secrets. Log any that errors

Relevant issue: #339

Additional Context

No response

[nfx]

@nkvuong shouldn't we just create Managed Identity with access connector instead?

[qziyuan]

Agree, we should create access connector in this case.

[JCZuurmond]

@nfx : I think we can close this issue and resolve it as follows:

Create a small (0.1 pw) new issue to warn users if we find SP without secrets to:

1. Rerun SP migration and chose to use access connectors instead
2. Add SP secrets in a place where ucx can find them.

See discussion in #1770