From 75fd2bf7512bc1edfea12a1abadb0b141803eba6 Mon Sep 17 00:00:00 2001
From: Andrew Nester <andrew.nester@databricks.com>
Date: Thu, 3 Sep 2026 10:55:01 +0200
Subject: [PATCH] acc: Clean up secrets in cloud tests

---
 .../resources/secrets/remove-expire-time/output.txt       | 8 ++++++++
 .../bundle/resources/secrets/remove-expire-time/script    | 6 ++++++
 .../resources/secrets/update-expire-time/output.txt       | 8 ++++++++
 .../bundle/resources/secrets/update-expire-time/script    | 6 ++++++
 4 files changed, 28 insertions(+)

diff --git a/acceptance/bundle/resources/secrets/remove-expire-time/output.txt b/acceptance/bundle/resources/secrets/remove-expire-time/output.txt
index 7d497d3ca61..23454ffc288 100644
--- a/acceptance/bundle/resources/secrets/remove-expire-time/output.txt
+++ b/acceptance/bundle/resources/secrets/remove-expire-time/output.txt
@@ -58,3 +58,11 @@ update secrets.secret1
 Plan: 0 to add, 1 to change, 0 to delete, 0 unchanged
 
 >>> [CLI] bundle plan --var secret_value=secret-value -o json
+
+>>> [CLI] bundle destroy --auto-approve --var secret_value=initial-secret-value
+The following resources will be deleted:
+  delete resources.secrets.secret1
+
+All files and directories at the following location will be deleted: /Workspace/Users/[USERNAME]/.bundle/test-bundle-[UNIQUE_NAME]/default
+
+Destroy: 1 deleted
diff --git a/acceptance/bundle/resources/secrets/remove-expire-time/script b/acceptance/bundle/resources/secrets/remove-expire-time/script
index 5f507f1f39a..4941b93422d 100644
--- a/acceptance/bundle/resources/secrets/remove-expire-time/script
+++ b/acceptance/bundle/resources/secrets/remove-expire-time/script
@@ -1,5 +1,11 @@
 envsubst < databricks.yml.tmpl > databricks.yml
 
+cleanup() {
+    trace $CLI bundle destroy --auto-approve --var secret_value=initial-secret-value
+    rm out.requests.txt
+}
+trap cleanup EXIT
+
 trace $CLI bundle deploy --var secret_value=secret-value
 trace print_requests.py //unity-catalog
 read_state.py secrets secret1 name expire_time
diff --git a/acceptance/bundle/resources/secrets/update-expire-time/output.txt b/acceptance/bundle/resources/secrets/update-expire-time/output.txt
index 6089851ba91..60ad63187fc 100644
--- a/acceptance/bundle/resources/secrets/update-expire-time/output.txt
+++ b/acceptance/bundle/resources/secrets/update-expire-time/output.txt
@@ -51,3 +51,11 @@ Resources: 0 created, 1 changed, 0 deleted, 0 unchanged
   }
 }
 secrets secret1 name='test_secret_[UNIQUE_NAME]' expire_time='[EXPIRE_TIME_AFTER]'
+
+>>> [CLI] bundle destroy --auto-approve --var secret_value=initial-secret-value
+The following resources will be deleted:
+  delete resources.secrets.secret1
+
+All files and directories at the following location will be deleted: /Workspace/Users/[USERNAME]/.bundle/test-bundle-[UNIQUE_NAME]/default
+
+Destroy: 1 deleted
diff --git a/acceptance/bundle/resources/secrets/update-expire-time/script b/acceptance/bundle/resources/secrets/update-expire-time/script
index 9b915b11936..1228b8d62df 100644
--- a/acceptance/bundle/resources/secrets/update-expire-time/script
+++ b/acceptance/bundle/resources/secrets/update-expire-time/script
@@ -1,5 +1,11 @@
 envsubst < databricks.yml.tmpl > databricks.yml
 
+cleanup() {
+    trace $CLI bundle destroy --auto-approve --var secret_value=initial-secret-value
+    rm out.requests.txt
+}
+trap cleanup EXIT
+
 trace $CLI bundle deploy --var secret_value=secret-value
 trace print_requests.py //unity-catalog
 read_state.py secrets secret1 name expire_time