Error: 5 or 6 fields allowed (using snowflake_role_grants)

[alexsanderp]

Provider Version
0.28.6

Terraform Version
1.1.7

Describe the bug

Error: 5 or 6 fields allowed (using snowflake_role_grants)

Expected behavior

In version 0.27.0 it works normally

Code samples and commands

resource "snowflake_role_grants" "dadosfera" {
  role_name = snowflake_role.dadosfera.name

  users = [
    snowflake_user.dadosfera.name
  ]
}

Additional context

[jiangok-open]

FYI, 0.28.6 darwin amd64 flavor works fine on my MAC.

0.26.3 darwin amd64 flavor works fine on my MAC but the linux amd64 throws the same error above.

[alexsanderp]

Here it works on any release below 0.27.0

[daniepett]

There's a fix coming in 0.28.7 from this PR #923

[jaeglee0416]

See comment: #923 (comment)

I wonder if the fix should have been >= 1 on number of fields (for role grants to other roles).

https://registry.terraform.io/providers/chanzuckerberg/snowflake/latest/docs/resources/role_grants

There is only one "required" field role_name.
We're now running into issues with 4 to 6 fields allowed in ID

[daniepett]

The original code prior to #824

Allowed a 4 or 5 length pipe delimited ID, because the grant privilege isn’t always included. It now allows 4,5 or 6 values. It seems like role grants is a special resource, should’ve picked that up. I’ll revert the changes to that resource.

[ChrisIsidora]

@daniepett Do you know when will you be squaring this off?

[nickperrott]

Does anybody know of a work-around for this issue while we wait for the next release?

[nickperrott]

Answered my own question setting replace_on_changes=["users"] in the ResourceOptions seems to be a good workaround. I am using the provider via Pulumi though, but I guess Terraform has this option also.

[ChrisIsidora]

@nickperrott there is no option like that in terraform

[extdponomarchuk]

Got the same issue
│ Error: 4 to 6 fields allowed in ID │ │ with snowflake_role_grants.role_grants["QA_SHAREADMIN"], │ on grants.tf line 125, in resource "snowflake_role_grants" "role_grants": │ 125: resource "snowflake_role_grants" "role_grants" {

So, rolled back to version "0.25.36"

[daniepett]

I’ll fix the role grants over the weekend

[ChrisIsidora]

I created a rollback of the changes @daniepett @alldoami