databricks · simonfaltum · Apr 17, 2026 · Apr 17, 2026 · Apr 17, 2026 · Apr 17, 2026
diff --git a/NEXT_CHANGELOG.md b/NEXT_CHANGELOG.md
@@ -8,6 +8,7 @@
 
 * Added `--limit` flag to all paginated list commands for client-side result capping ([#4984](https://github.com/databricks/cli/pull/4984)).
 * Accept `yes` in addition to `y` for confirmation prompts, and show `[y/N]` to indicate that no is the default.
+* Cache `/.well-known/databricks-config` lookups under `~/.cache/databricks/<version>/host-metadata/` so repeat CLI invocations against the same host skip the ~700ms discovery round trip.
 * Deprecated `auth env`. The command is hidden from help listings and prints a deprecation warning to stderr; it will be removed in a future release.
 
 ### Bundles

diff --git a/acceptance/auth/bundle_and_profile/output.txt b/acceptance/auth/bundle_and_profile/output.txt
@@ -13,7 +13,6 @@
 
 === Inside the bundle, profile flag not matching bundle host. Should use profile from the flag and not the bundle.
 >>> errcode [CLI] current-user me -p profile_name
-Warn: Failed to resolve host metadata: (redacted). Falling back to user config.
 Error: Get "https://non.existing.subdomain.databricks.com/api/2.0/preview/scim/v2/Me": (redacted)
 
 Exit code: 1
@@ -73,7 +72,6 @@ Validation OK!
 
 === Bundle commands load bundle configuration with -t and -p flag, validation not OK (profile host don't match bundle host)
 >>> errcode [CLI] bundle validate -t prod -p DEFAULT
-Warn: Failed to resolve host metadata: (redacted). Falling back to user config.
 Error: cannot resolve bundle auth configuration: the host in the profile ([DATABRICKS_TARGET]) doesn’t match the host configured in the bundle (https://bar.com)
 
 Name: test-auth

diff --git a/acceptance/auth/credentials/unified-host/out.requests.txt b/acceptance/auth/credentials/unified-host/out.requests.txt
@@ -22,15 +22,6 @@
   "method": "GET",
   "path": "/api/2.0/preview/scim/v2/Me"
 }
-{
-  "headers": {
-    "User-Agent": [
-      "cli/[DEV_VERSION] databricks-sdk-go/[SDK_VERSION] go/[GO_VERSION] os/[OS]"
-    ]
-  },
-  "method": "GET",
-  "path": "/.well-known/databricks-config"
-}
 {
   "headers": {
     "Authorization": [

diff --git a/acceptance/auth/host-metadata-cache/out.test.toml b/acceptance/auth/host-metadata-cache/out.test.toml
diff --git a/acceptance/auth/host-metadata-cache/output.txt b/acceptance/auth/host-metadata-cache/output.txt
@@ -0,0 +1,32 @@
+
+=== First invocation populates the cache
+{
+  "profiles": [
+    {
+      "name":"cached",
+      "host":"[DATABRICKS_URL]",
+      "cloud":"aws",
+      "auth_type":"",
+      "valid":false
+    }
+  ]
+}
+
+=== Second invocation should read from the cache
+{
+  "profiles": [
+    {
+      "name":"cached",
+      "host":"[DATABRICKS_URL]",
+      "cloud":"aws",
+      "auth_type":"",
+      "valid":false
+    }
+  ]
+}
+
+=== Only one /.well-known/databricks-config request recorded
+{
+  "method": "GET",
+  "path": "/.well-known/databricks-config"
+}
diff --git a/acceptance/auth/host-metadata-cache/script b/acceptance/auth/host-metadata-cache/script
@@ -0,0 +1,19 @@
+sethome "./home"
+export DATABRICKS_CACHE_DIR="$TEST_TMP_DIR/cache"
+
+# Point a profile at the mock server so auth profiles triggers a host metadata
+# fetch. Without a profile the command does nothing and the cache is never read.
+cat > "./home/.databrickscfg" <<EOF
+[cached]
+host = ${DATABRICKS_HOST}
+token = test-token
+EOF
+
+title "First invocation populates the cache\n"
+$CLI auth profiles --skip-validate --output json || true
+
+title "Second invocation should read from the cache\n"
+$CLI auth profiles --skip-validate --output json || true
+
+title "Only one /.well-known/databricks-config request recorded\n"
+print_requests.py //.well-known/databricks-config --get --sort
diff --git a/acceptance/auth/host-metadata-cache/test.toml b/acceptance/auth/host-metadata-cache/test.toml
@@ -0,0 +1,5 @@
+Ignore = [
+    "home",
+    "cache",
+]
+RecordRequests = true
diff --git a/acceptance/bundle/resources/volumes/change-schema-name/out.requests.txt b/acceptance/bundle/resources/volumes/change-schema-name/out.requests.txt
@@ -1,15 +1,7 @@
-{
-  "method": "GET",
-  "path": "/.well-known/databricks-config"
-}
 {
   "method": "GET",
   "path": "/api/2.1/unity-catalog/volumes/main.myschema.myvolume"
 }
-{
-  "method": "GET",
-  "path": "/.well-known/databricks-config"
-}
 {
   "method": "GET",
   "path": "/api/2.1/unity-catalog/volumes/main.myschema.mynewvolume"

diff --git a/...ance/bundle/run/inline-script/databricks-cli/profile-is-passed/from_flag/out.requests.txt b/...ance/bundle/run/inline-script/databricks-cli/profile-is-passed/from_flag/out.requests.txt
@@ -16,10 +16,6 @@
   "path": "/oidc/v1/token",
   "raw_body": "grant_type=client_credentials\u0026scope=all-apis"
 }
-{
-  "method": "GET",
-  "path": "/.well-known/databricks-config"
-}
 {
   "method": "GET",
   "path": "/oidc/.well-known/oauth-authorization-server"

diff --git a/acceptance/bundle/run/inline-script/databricks-cli/target-is-passed/default/out.requests.txt b/acceptance/bundle/run/inline-script/databricks-cli/target-is-passed/default/out.requests.txt
@@ -2,10 +2,6 @@
   "method": "GET",
   "path": "/.well-known/databricks-config"
 }
-{
-  "method": "GET",
-  "path": "/.well-known/databricks-config"
-}
 {
   "headers": {
     "Authorization": [

diff --git a/...tance/bundle/run/inline-script/databricks-cli/target-is-passed/from_flag/out.requests.txt b/...tance/bundle/run/inline-script/databricks-cli/target-is-passed/from_flag/out.requests.txt
@@ -16,10 +16,6 @@
   "path": "/oidc/v1/token",
   "raw_body": "grant_type=client_credentials\u0026scope=all-apis"
 }
-{
-  "method": "GET",
-  "path": "/.well-known/databricks-config"
-}
 {
   "method": "GET",
   "path": "/oidc/.well-known/oauth-authorization-server"

diff --git a/acceptance/cache/clear/output.txt b/acceptance/cache/clear/output.txt
@@ -1,19 +1,25 @@
 
 === First call in a session is expected to be a cache miss:
 [DEBUG_TIMESTAMP] Debug: [Local Cache] using cache key: [SHA256_HASH]
-[DEBUG_TIMESTAMP] Debug: [Local Cache] failed to stat cache file: (redacted)
+[DEBUG_TIMESTAMP] Debug: [Local Cache] cache miss, computing
+[DEBUG_TIMESTAMP] Debug: [Local Cache] computed and stored result
+[DEBUG_TIMESTAMP] Debug: [Local Cache] using cache key: [SHA256_HASH]
 [DEBUG_TIMESTAMP] Debug: [Local Cache] cache miss, computing
 [DEBUG_TIMESTAMP] Debug: [Local Cache] computed and stored result
 
 === Second call in a session is expected to be a cache hit
 [DEBUG_TIMESTAMP] Debug: [Local Cache] using cache key: [SHA256_HASH]
 [DEBUG_TIMESTAMP] Debug: [Local Cache] cache hit
+[DEBUG_TIMESTAMP] Debug: [Local Cache] using cache key: [SHA256_HASH]
+[DEBUG_TIMESTAMP] Debug: [Local Cache] cache hit
 
 >>> [CLI] cache clear
 Cache cleared successfully from [TEST_TMP_DIR]/.cache
 
 === First call after a clear is expected to be a cache miss:
 [DEBUG_TIMESTAMP] Debug: [Local Cache] using cache key: [SHA256_HASH]
-[DEBUG_TIMESTAMP] Debug: [Local Cache] failed to stat cache file: (redacted)
+[DEBUG_TIMESTAMP] Debug: [Local Cache] cache miss, computing
+[DEBUG_TIMESTAMP] Debug: [Local Cache] computed and stored result
+[DEBUG_TIMESTAMP] Debug: [Local Cache] using cache key: [SHA256_HASH]
 [DEBUG_TIMESTAMP] Debug: [Local Cache] cache miss, computing
 [DEBUG_TIMESTAMP] Debug: [Local Cache] computed and stored result
diff --git a/acceptance/cache/simple/output.txt b/acceptance/cache/simple/output.txt
@@ -1,13 +1,17 @@
 
 === First call in a session is expected to be a cache miss:
 [DEBUG_TIMESTAMP] Debug: [Local Cache] using cache key: [SHA256_HASH]
-[DEBUG_TIMESTAMP] Debug: [Local Cache] failed to stat cache file: (redacted)
+[DEBUG_TIMESTAMP] Debug: [Local Cache] cache miss, computing
+[DEBUG_TIMESTAMP] Debug: [Local Cache] computed and stored result
+[DEBUG_TIMESTAMP] Debug: [Local Cache] using cache key: [SHA256_HASH]
 [DEBUG_TIMESTAMP] Debug: [Local Cache] cache miss, computing
 [DEBUG_TIMESTAMP] Debug: [Local Cache] computed and stored result
 
 === Second call in a session is expected to be a cache hit
 [DEBUG_TIMESTAMP] Debug: [Local Cache] using cache key: [SHA256_HASH]
 [DEBUG_TIMESTAMP] Debug: [Local Cache] cache hit
+[DEBUG_TIMESTAMP] Debug: [Local Cache] using cache key: [SHA256_HASH]
+[DEBUG_TIMESTAMP] Debug: [Local Cache] cache hit
 
 === Bundle deploy should send telemetry values
 

diff --git a/acceptance/cmd/auth/profiles/output.txt b/acceptance/cmd/auth/profiles/output.txt
@@ -1,6 +1,5 @@
 
 === Profiles with workspace_id (JSON output)
-Warn: Failed to resolve host metadata: fetching host metadata from "https://test.cloud.databricks.com/.well-known/databricks-config": Get "https://test.cloud.databricks.com/.well-known/databricks-config": dial tcp: lookup test.cloud.databricks.com: no such host. Falling back to user config.
 {
   "profiles": [
     {

diff --git a/acceptance/cmd/workspace/apps/out.requests.txt b/acceptance/cmd/workspace/apps/out.requests.txt
@@ -25,10 +25,6 @@
   "method": "GET",
   "path": "/api/2.0/apps/test-name"
 }
-{
-  "method": "GET",
-  "path": "/.well-known/databricks-config"
-}
 {
   "method": "PATCH",
   "path": "/api/2.0/apps/test-name",

diff --git a/acceptance/telemetry/failure/output.txt b/acceptance/telemetry/failure/output.txt
@@ -1,12 +1,15 @@
 
 >>> [CLI] selftest send-telemetry --debug
 HH:MM:SS Info: start pid=PID version=[DEV_VERSION] args="[CLI], selftest, send-telemetry, --debug"
+HH:MM:SS Debug: [Local Cache] using cache key: [SHA256_HASH] pid=PID
+HH:MM:SS Debug: [Local Cache] cache miss, computing pid=PID
 HH:MM:SS Debug: GET /.well-known/databricks-config
 < HTTP/1.1 200 OK
 < {
 <   "oidc_endpoint": "[DATABRICKS_URL]/oidc",
 <   "workspace_id": "[NUMID]"
 < } pid=PID sdk=true
+HH:MM:SS Debug: [Local Cache] computed and stored result pid=PID
 HH:MM:SS Debug: Resolved workspace_id from host metadata: "[NUMID]" pid=PID sdk=true
 HH:MM:SS Debug: Resolved cloud from hostname: "AWS" pid=PID sdk=true
 HH:MM:SS Debug: Resolved discovery_url from host metadata: "[DATABRICKS_URL]/oidc/.well-known/oauth-authorization-server" pid=PID sdk=true

diff --git a/acceptance/telemetry/partial-success/output.txt b/acceptance/telemetry/partial-success/output.txt
@@ -1,12 +1,15 @@
 
 >>> [CLI] selftest send-telemetry --debug
 HH:MM:SS Info: start pid=PID version=[DEV_VERSION] args="[CLI], selftest, send-telemetry, --debug"
+HH:MM:SS Debug: [Local Cache] using cache key: [SHA256_HASH] pid=PID
+HH:MM:SS Debug: [Local Cache] cache miss, computing pid=PID
 HH:MM:SS Debug: GET /.well-known/databricks-config
 < HTTP/1.1 200 OK
 < {
 <   "oidc_endpoint": "[DATABRICKS_URL]/oidc",
 <   "workspace_id": "[NUMID]"
 < } pid=PID sdk=true
+HH:MM:SS Debug: [Local Cache] computed and stored result pid=PID
 HH:MM:SS Debug: Resolved workspace_id from host metadata: "[NUMID]" pid=PID sdk=true
 HH:MM:SS Debug: Resolved cloud from hostname: "AWS" pid=PID sdk=true
 HH:MM:SS Debug: Resolved discovery_url from host metadata: "[DATABRICKS_URL]/oidc/.well-known/oauth-authorization-server" pid=PID sdk=true

diff --git a/acceptance/telemetry/skipped/output.txt b/acceptance/telemetry/skipped/output.txt
@@ -1,12 +1,15 @@
 
 >>> [CLI] selftest send-telemetry --debug
 HH:MM:SS Info: start pid=PID version=[DEV_VERSION] args="[CLI], selftest, send-telemetry, --debug"
+HH:MM:SS Debug: [Local Cache] using cache key: [SHA256_HASH] pid=PID
+HH:MM:SS Debug: [Local Cache] cache miss, computing pid=PID
 HH:MM:SS Debug: GET /.well-known/databricks-config
 < HTTP/1.1 200 OK
 < {
 <   "oidc_endpoint": "[DATABRICKS_URL]/oidc",
 <   "workspace_id": "[NUMID]"
 < } pid=PID sdk=true
+HH:MM:SS Debug: [Local Cache] computed and stored result pid=PID
 HH:MM:SS Debug: Resolved workspace_id from host metadata: "[NUMID]" pid=PID sdk=true
 HH:MM:SS Debug: Resolved cloud from hostname: "AWS" pid=PID sdk=true
 HH:MM:SS Debug: Resolved discovery_url from host metadata: "[DATABRICKS_URL]/oidc/.well-known/oauth-authorization-server" pid=PID sdk=true

diff --git a/acceptance/telemetry/success/output.txt b/acceptance/telemetry/success/output.txt
@@ -1,12 +1,15 @@
 
 >>> [CLI] selftest send-telemetry --debug
 HH:MM:SS Info: start pid=PID version=[DEV_VERSION] args="[CLI], selftest, send-telemetry, --debug"
+HH:MM:SS Debug: [Local Cache] using cache key: [SHA256_HASH] pid=PID
+HH:MM:SS Debug: [Local Cache] cache miss, computing pid=PID
 HH:MM:SS Debug: GET /.well-known/databricks-config
 < HTTP/1.1 200 OK
 < {
 <   "oidc_endpoint": "[DATABRICKS_URL]/oidc",
 <   "workspace_id": "[NUMID]"
 < } pid=PID sdk=true
+HH:MM:SS Debug: [Local Cache] computed and stored result pid=PID
 HH:MM:SS Debug: Resolved workspace_id from host metadata: "[NUMID]" pid=PID sdk=true
 HH:MM:SS Debug: Resolved cloud from hostname: "AWS" pid=PID sdk=true
 HH:MM:SS Debug: Resolved discovery_url from host metadata: "[DATABRICKS_URL]/oidc/.well-known/oauth-authorization-server" pid=PID sdk=true

diff --git a/acceptance/telemetry/test.toml b/acceptance/telemetry/test.toml
@@ -36,3 +36,11 @@ New = "pid=PID"
 [[Repls]]
 Old = "\\([0-9]+ more bytes\\)"
 New = "(N more bytes)"
+
+# Host metadata cache keys vary per-test because the mock server URL changes.
+# Normalize them so the golden output is stable across runs.
+# Order=1 so it runs before the parent's `\d{14,}` → `[NUMID]` replacement.
+[[Repls]]
+Old = '[a-f0-9]{64}'
+New = "[SHA256_HASH]"
+Order = 1
diff --git a/acceptance/telemetry/timeout/output.txt b/acceptance/telemetry/timeout/output.txt
@@ -1,12 +1,15 @@
 
 >>> [CLI] selftest send-telemetry --debug
 HH:MM:SS Info: start pid=PID version=[DEV_VERSION] args="[CLI], selftest, send-telemetry, --debug"
+HH:MM:SS Debug: [Local Cache] using cache key: [SHA256_HASH] pid=PID
+HH:MM:SS Debug: [Local Cache] cache miss, computing pid=PID
 HH:MM:SS Debug: GET /.well-known/databricks-config
 < HTTP/1.1 200 OK
 < {
 <   "oidc_endpoint": "[DATABRICKS_URL]/oidc",
 <   "workspace_id": "[NUMID]"
 < } pid=PID sdk=true
+HH:MM:SS Debug: [Local Cache] computed and stored result pid=PID
 HH:MM:SS Debug: Resolved workspace_id from host metadata: "[NUMID]" pid=PID sdk=true
 HH:MM:SS Debug: Resolved cloud from hostname: "AWS" pid=PID sdk=true
 HH:MM:SS Debug: Resolved discovery_url from host metadata: "[DATABRICKS_URL]/oidc/.well-known/oauth-authorization-server" pid=PID sdk=true

diff --git a/acceptance/workspace/lakeview/publish/out.requests.txt b/acceptance/workspace/lakeview/publish/out.requests.txt
@@ -9,10 +9,6 @@
     "path": "/Users/[USERNAME]"
   }
 }
-{
-  "method": "GET",
-  "path": "/.well-known/databricks-config"
-}
 {
   "method": "POST",
   "path": "/api/2.0/lakeview/dashboards",
@@ -22,10 +18,6 @@
     "warehouse_id": "test-warehouse"
   }
 }
-{
-  "method": "GET",
-  "path": "/.well-known/databricks-config"
-}
 {
   "method": "POST",
   "path": "/api/2.0/lakeview/dashboards/[DASHBOARD_ID]/published",

diff --git a/acceptance/workspace/repos/create_with_provider/out.requests.txt b/acceptance/workspace/repos/create_with_provider/out.requests.txt
@@ -11,18 +11,10 @@
     "url": "https://github.com/databricks/databricks-empty-ide-project.git"
   }
 }
-{
-  "method": "GET",
-  "path": "/.well-known/databricks-config"
-}
 {
   "method": "GET",
   "path": "/api/2.0/repos/[NUMID]"
 }
-{
-  "method": "GET",
-  "path": "/.well-known/databricks-config"
-}
 {
   "method": "GET",
   "path": "/api/2.0/workspace/get-status",
@@ -34,10 +26,6 @@
   "method": "GET",
   "path": "/api/2.0/repos/[NUMID]"
 }
-{
-  "method": "GET",
-  "path": "/.well-known/databricks-config"
-}
 {
   "method": "DELETE",
   "path": "/api/2.0/repos/[NUMID]"

diff --git a/acceptance/workspace/repos/delete_by_path/out.requests.txt b/acceptance/workspace/repos/delete_by_path/out.requests.txt
@@ -11,10 +11,6 @@
     "url": "https://github.com/databricks/databricks-empty-ide-project.git"
   }
 }
-{
-  "method": "GET",
-  "path": "/.well-known/databricks-config"
-}
 {
   "method": "GET",
   "path": "/api/2.0/workspace/get-status",
@@ -26,10 +22,6 @@
   "method": "GET",
   "path": "/api/2.0/repos/[NUMID]"
 }
-{
-  "method": "GET",
-  "path": "/.well-known/databricks-config"
-}
 {
   "method": "GET",
   "path": "/api/2.0/workspace/get-status",
@@ -41,10 +33,6 @@
   "method": "DELETE",
   "path": "/api/2.0/repos/[NUMID]"
 }
-{
-  "method": "GET",
-  "path": "/.well-known/databricks-config"
-}
 {
   "method": "GET",
   "path": "/api/2.0/workspace/get-status",