direct: Handle data_security_mode aliases for clusters (#3839)

## Changes
 Handle data_security_mode aliases for clusters

## Why
To be in line with TF provider behaviour, we skip diff if it's just a
change of the alias

https://github.com/databricks/terraform-provider-databricks/blob/main/clusters/resource_cluster.go#L109-L117

## Tests
Added an acceptance test

<!-- If your PR needs to be included in the release notes for next
release,
add a separate entry in NEXT_CHANGELOG.md as part of your PR. -->

Author: andrewnester

acceptance/bundle/resources/clusters/deploy/data_security_mode/out.direct.txt

@@ -1,4 +1,19 @@
 
+>>> [CLI] bundle deploy
+Uploading bundle files to /Workspace/Users/[USERNAME]/.bundle/[UNIQUE_NAME]/files...
+Deploying resources...
+Updating deployment state...
+Deployment complete!
+
+>>> [CLI] bundle plan
+Plan: 0 to add, 0 to change, 0 to delete, 1 unchanged
+
+>>> [CLI] bundle deploy
+Uploading bundle files to /Workspace/Users/[USERNAME]/.bundle/[UNIQUE_NAME]/files...
+Deploying resources...
+Updating deployment state...
+Deployment complete!
+
 >>> [CLI] bundle destroy --auto-approve
 The following resources will be deleted:
   delete cluster test_cluster

acceptance/bundle/resources/clusters/deploy/data_security_mode/out.plan.direct.txt

@@ -5,8 +5,6 @@ cleanup() {
 }
 trap cleanup EXIT
 
-trace $CLI bundle deploy > out.$DATABRICKS_BUNDLE_ENGINE.txt 2>&1
-
-trace $CLI bundle plan >> out.plan.$DATABRICKS_BUNDLE_ENGINE.txt 2>&1
-
-trace errcode $CLI bundle deploy >> out.$DATABRICKS_BUNDLE_ENGINE.txt 2>&1
+trace $CLI bundle deploy
+trace $CLI bundle plan
+trace $CLI bundle deploy

acceptance/bundle/resources/clusters/deploy/data_security_mode/out.plan.terraform.txt

@@ -120,13 +120,27 @@ func (r *ResourceCluster) DoDelete(ctx context.Context, id string) error {
 	return r.client.Clusters.PermanentDeleteByClusterId(ctx, id)
 }
 
-func (r *ResourceCluster) ClassifyChange(change structdiff.Change, remoteState *compute.ClusterDetails, _ bool) (deployplan.ActionType, error) {
+func (r *ResourceCluster) ClassifyChange(change structdiff.Change, remoteState *compute.ClusterDetails, isLocal bool) (deployplan.ActionType, error) {
+	changedPath := change.Path.String()
+	if changedPath == "data_security_mode" && !isLocal {
+		// We do change skip here in the same way TF provider does suppress diff if the alias is used.
+		// https://github.com/databricks/terraform-provider-databricks/blob/main/clusters/resource_cluster.go#L109-L117
+		if change.Old == compute.DataSecurityModeDataSecurityModeStandard && change.New == compute.DataSecurityModeUserIsolation {
+			return deployplan.ActionTypeSkip, nil
+		}
+		if change.Old == compute.DataSecurityModeDataSecurityModeDedicated && change.New == compute.DataSecurityModeSingleUser {
+			return deployplan.ActionTypeSkip, nil
+		}
+		if change.Old == compute.DataSecurityModeDataSecurityModeAuto && (change.New == compute.DataSecurityModeSingleUser || change.New == compute.DataSecurityModeUserIsolation) {
+			return deployplan.ActionTypeSkip, nil
+		}
+	}
+
 	// Always update if the cluster is not running.
 	if remoteState.State != compute.StateRunning {
 		return deployplan.ActionTypeUpdate, nil
 	}
 
-	changedPath := change.Path.String()
 	if changedPath == "num_workers" || strings.HasPrefix(changedPath, "autoscale") {
 		return deployplan.ActionTypeResize, nil
 	}