merge jul

.github/titleLint.yml

@@ -0,0 +1 @@
+regex: (feat|fix|docs|chore|style|refactor|perf|test): .*

.gitignore

@@ -21,4 +21,7 @@ terraform-provider-snowflake*
 crash.log
 .envrc
 bin
-dist
+dist
+
+# JetBrains
+.idea/

README.md

@@ -110,6 +110,8 @@ If you are using the Standard Snowflake plan, it's recommended you also set up t
 
 **Note: releases can only be done by those with keybase pgp keys allowed in the terraform registry.**
 
+Releases will be performed once a week on **Monday around 11am PST**. If your change is more urgent and you need to use it sooner, use the commit hash.
+
 Releases are done by [goreleaser](https://goreleaser.com/) and run by our make files. There two goreleaser configs, `.goreleaser.yml` for regular releases and `.goreleaser.prerelease.yml` for doing prereleases (for testing).
 
 Releases are [published to the terraform registry](https://registry.terraform.io/providers/chanzuckerberg/snowflake/latest), which requires that releases by signed.

VERSION

@@ -1 +1 @@
-0.25.0
+0.25.12

docs/data-sources/current_account.md

@@ -0,0 +1,38 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "snowflake_current_account Data Source - terraform-provider-snowflake"
+subcategory: ""
+description: |-
+
+---
+
+# snowflake_current_account (Data Source)
+
+
+
+## Example Usage
+
+```terraform
+data "snowflake_current_account" "this" {}
+
+resource "aws_ssm_parameter" "snowflake_account_url" {
+  name  = "/snowflake/account_url"
+  type  = "String"
+  value = data.snowflake_current_account.this.url
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Optional
+
+- **id** (String) The ID of this resource.
+
+### Read-Only
+
+- **account** (String) The Snowflake Account ID; as returned by CURRENT_ACCOUNT().
+- **region** (String) The Snowflake Region; as returned by CURRENT_REGION()
+- **url** (String) The Snowflake URL.
+
+

docs/data-sources/system_generate_scim_access_token.md

@@ -0,0 +1,36 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "snowflake_system_generate_scim_access_token Data Source - terraform-provider-snowflake"
+subcategory: ""
+description: |-
+
+---
+
+# snowflake_system_generate_scim_access_token (Data Source)
+
+
+
+## Example Usage
+
+```terraform
+data "snowflake_system_generate_scim_access_token" "scim" {
+	integration_name = "AAD_PROVISIONING"
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- **integration_name** (String) SCIM Integration Name
+
+### Optional
+
+- **id** (String) The ID of this resource.
+
+### Read-Only
+
+- **access_token** (String) SCIM Access Token
+
+

docs/data-sources/system_get_privatelink_config.md

@@ -0,0 +1,85 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "snowflake_system_get_privatelink_config Data Source - terraform-provider-snowflake"
+subcategory: ""
+description: |-
+
+---
+
+# snowflake_system_get_privatelink_config (Data Source)
+
+
+
+## Example Usage
+
+```terraform
+data "snowflake_system_get_privatelink_config" "snowflake_private_link" {}
+
+resource "aws_security_group" "snowflake_private_link" {
+  vpc_id = var.vpc_id
+
+  ingress {
+    from_port   = 80
+    to_port     = 80
+    cidr_blocks = var.vpc_cidr
+    protocol    = "tcp"
+  }
+
+  ingress {
+    from_port   = 443
+    to_port     = 443
+    cidr_blocks = var.vpc_cidr
+    protocol    = "tcp"
+  }
+}
+
+resource "aws_vpc_endpoint" "snowflake_private_link" {
+  vpc_id              = var.vpc_id
+  service_name        = data.snowflake_system_get_privatelink_config.snowflake_private_link.aws_vpce_id
+  vpc_endpoint_type   = "Interface"
+  security_group_ids  = [aws_security_group.snowflake_private_link.id]
+  subnet_ids          = var.subnet_ids
+  private_dns_enabled = false
+}
+
+resource "aws_route53_zone" "snowflake_private_link" {
+  name = "privatelink.snowflakecomputing.com"
+
+  vpc {
+    vpc_id = var.vpc_id
+  }
+}
+
+resource "aws_route53_record" "snowflake_private_link_url" {
+  zone_id = aws_route53_zone.snowflake_private_link.zone_id
+  name    = data.snowflake_system_get_privatelink_config.snowflake_private_link.account_url
+  type    = "CNAME"
+  ttl     = "300"
+  records = [aws_vpc_endpoint.snowflake_private_link.dns_entry[0]["dns_name"]]
+}
+
+resource "aws_route53_record" "snowflake_private_link_oscp_url" {
+  zone_id = aws_route53_zone.snowflake_private_link_url.zone_id
+  name    = data.snowflake_system_get_privatelink_config.snowflake_private_link.oscp_url
+  type    = "CNAME"
+  ttl     = "300"
+  records = [aws_vpc_endpoint.snowflake_private_link.dns_entry[0]["dns_name"]]
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Optional
+
+- **id** (String) The ID of this resource.
+
+### Read-Only
+
+- **account_name** (String) The name of your Snowflake account.
+- **account_url** (String) The URL used to connect to Snowflake through AWS PrivateLink or Azure Private Link.
+- **aws_vpce_id** (String) The AWS VPCE ID for your account.
+- **azure_pls_id** (String) The Azure Private Link Service ID for your account.
+- **oscp_url** (String) The OCSP URL corresponding to your Snowflake account that uses AWS PrivateLink or Azure Private Link.
+
+

docs/data-sources/system_get_snowflake_platform_info.md

@@ -0,0 +1,27 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "snowflake_system_get_snowflake_platform_info Data Source - terraform-provider-snowflake"
+subcategory: ""
+description: |-
+
+---
+
+# snowflake_system_get_snowflake_platform_info (Data Source)
+
+
+
+
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Optional
+
+- **id** (String) The ID of this resource.
+
+### Read-Only
+
+- **aws_vpc_ids** (List of String) Snowflake AWS Virtual Private Cloud IDs
+- **azure_vnet_subnet_ids** (List of String) Snowflake Azure Virtual Network Subnet IDs
+
+

docs/index.md

@@ -19,9 +19,15 @@ provider snowflake {
   region   = "..."
 
   // optional, at exactly one must be set
-  password           = "..."
-  oauth_access_token = "..."
-  private_key_path   = "..."
+  password              = "..."
+  oauth_access_token    = "..."
+  private_key_path      = "..."
+  private_key           = "..."
+  oauth_refresh_token   = "..."
+  oauth_client_id       = "..."
+  oauth_client_secret   = "..."
+  oauth_endpoint        = "..."
+  oauth_redirect_url    = "..."
 
   // optional
   role = "..."
@@ -44,6 +50,11 @@ provider snowflake {
 
 - **browser_auth** (Boolean)
 - **oauth_access_token** (String, Sensitive)
+- **oauth_client_id** (String, Sensitive)
+- **oauth_client_secret** (String, Sensitive)
+- **oauth_endpoint** (String, Sensitive)
+- **oauth_redirect_url** (String, Sensitive)
+- **oauth_refresh_token** (String, Sensitive)
 - **password** (String, Sensitive)
 - **private_key** (String, Sensitive)
 - **private_key_path** (String, Sensitive)
@@ -56,6 +67,7 @@ The Snowflake provider support multiple ways to authenticate:
 
 * Password
 * OAuth Access Token
+* OAuth Refresh Token
 * Browser Auth
 * Private Key
 
@@ -90,6 +102,20 @@ export SNOWFLAKE_OAUTH_ACCESS_TOKEN='...'
 
 Note that once this access token expires, you'll need to request a new one through an external application.
 
+### OAuth Refresh Token
+
+If you have an OAuth Refresh token, export these credentials as environment variables:
+
+```shell
+export SNOWFLAKE_OAUTH_REFRESH_TOKEN='...'
+export SNOWFLAKE_OAUTH_CLIENT_ID='...'
+export SNOWFLAKE_OAUTH_CLIENT_SECRET='...'
+export SNOWFLAKE_OAUTH_ENDPOINT='...'
+export SNOWFLAKE_OAUTH_REDIRECT_URL='https://localhost.com'
+```
+
+Note because access token have a short life; typically 10 minutes, by passing refresh token new access token will be generated.
+
 ### Username and Password Environment Variables
 
 If you choose to use Username and Password Authentication, export these credentials:
@@ -113,10 +139,24 @@ In addition to [generic `provider` arguments](https://www.terraform.io/docs/conf
 * `password` - (optional) Password for username+password auth. Cannot be used with `browser_auth` or
   `private_key_path`. Can be source from `SNOWFLAKE_PASSWORD` environment variable.
 * `oauth_access_token` - (optional) Token for use with OAuth. Generating the token is left to other
-  tools. Cannot be used with `browser_auth`, `private_key_path` or `password`. Can be source from
-  `SNOWFLAKE_OAUTH_ACCESS_TOKEN` environment variable.
+  tools. Cannot be used with `browser_auth`, `private_key_path`, `oauth_refresh_token` or `password`. 
+  Can be sourced from `SNOWFLAKE_OAUTH_ACCESS_TOKEN` environment variable.
+* `oauth_refresh_token` - (optional) Token for use with OAuth. Setup and generation of the token is 
+  left to other tools. Should be used in conjunction with `oauth_client_id`, `oauth_client_secret`, 
+  `oauth_endpoint`, `oauth_redirect_url`. Cannot be used with `browser_auth`, `private_key_path`, 
+  `oauth_access_token` or `password`. Can be sourced from `SNOWFLAKE_OAUTH_REFRESH_TOKEN` environment 
+  variable.
+* `oauth_client_id` - (optional) Required when `oauth_refresh_token` is used. Can be sourced from 
+  `SNOWFLAKE_OAUTH_CLIENT_ID` environment variable.
+* `oauth_client_secret` - (optional) Required when `oauth_refresh_token` is used. Can be sourced from 
+  `SNOWFLAKE_OAUTH_CLIENT_SECRET` environment variable.
+* `oauth_endpoint` - (optional) Required when `oauth_refresh_token` is used. Can be sourced from 
+  `SNOWFLAKE_OAUTH_ENDPOINT` environment variable.
+* `oauth_redirect_url` - (optional) Required when `oauth_refresh_token` is used. Can be sourced from 
+  `SNOWFLAKE_OAUTH_REDIRECT_URL` environment variable. 
 * `private_key_path` - (optional) Path to a private key for using keypair authentication.. Cannot be
   used with `browser_auth`, `oauth_access_token` or `password`. Can be source from
   `SNOWFLAKE_PRIVATE_KEY_PATH` environment variable.
 * `role` - (optional) Snowflake role to use for operations. If left unset, default role for user
   will be used. Can come from the `SNOWFLAKE_ROLE` environment variable.
+

docs/resources/account_grant.md

@@ -35,6 +35,6 @@ resource snowflake_account_grant grant {
 Import is supported using the following syntax:
 
 ```shell
-# format is account name | privilege | true/false for with_grant_option
-terraform import snowflake_account_grant.example 'accountName|USAGE|true'
+# format is account name | | | privilege | true/false for with_grant_option
+terraform import snowflake_account_grant.example 'accountName|||USAGE|true'
 ```

docs/resources/file_format.md

@@ -0,0 +1,77 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "snowflake_file_format Resource - terraform-provider-snowflake"
+subcategory: ""
+description: |-
+
+---
+
+# snowflake_file_format (Resource)
+
+
+
+## Example Usage
+
+```terraform
+resource "snowflake_file_format" "example_file_format" {
+  name        = "EXAMPLE_FILE_FORMAT"
+  database    = "EXAMPLE_DB"
+  schema      = "EXAMPLE_SCHEMA"
+  format_type = "CSV"
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- **database** (String) The database in which to create the file format.
+- **format_type** (String) Specifies the format of the input files (for data loading) or output files (for data unloading).
+- **name** (String) Specifies the identifier for the file format; must be unique for the database and schema in which the file format is created.
+- **schema** (String) The schema in which to create the file format.
+
+### Optional
+
+- **allow_duplicate** (Boolean) Boolean that specifies to allow duplicate object field names (only the last one will be preserved).
+- **binary_as_text** (Boolean) Boolean that specifies whether to interpret columns with no defined logical data type as UTF-8 text.
+- **binary_format** (String) Defines the encoding format for binary input or output.
+- **comment** (String) Specifies a comment for the file format.
+- **compression** (String) Specifies the current compression algorithm for the data file.
+- **date_format** (String) Defines the format of date values in the data files (data loading) or table (data unloading).
+- **disable_auto_convert** (Boolean) Boolean that specifies whether the XML parser disables automatic conversion of numeric and Boolean values from text to native representation.
+- **disable_snowflake_data** (Boolean) Boolean that specifies whether the XML parser disables recognition of Snowflake semi-structured data tags.
+- **empty_field_as_null** (Boolean) Specifies whether to insert SQL NULL for empty fields in an input file, which are represented by two successive delimiters.
+- **enable_octal** (Boolean) Boolean that enables parsing of octal numbers.
+- **encoding** (String) String (constant) that specifies the character set of the source data when loading data into a table.
+- **error_on_column_count_mismatch** (Boolean) Boolean that specifies whether to generate a parsing error if the number of delimited columns (i.e. fields) in an input file does not match the number of columns in the corresponding table.
+- **escape** (String) Single character string used as the escape character for field values.
+- **escape_unenclosed_field** (String) Single character string used as the escape character for unenclosed field values only.
+- **field_delimiter** (String) Specifies one or more singlebyte or multibyte characters that separate fields in an input file (data loading) or unloaded file (data unloading).
+- **field_optionally_enclosed_by** (String) Character used to enclose strings.
+- **file_extension** (String) Specifies the extension for files unloaded to a stage.
+- **id** (String) The ID of this resource.
+- **ignore_utf8_errors** (Boolean) Boolean that specifies whether UTF-8 encoding errors produce error conditions.
+- **null_if** (List of String) String used to convert to and from SQL NULL.
+- **preserve_space** (Boolean) Boolean that specifies whether the XML parser preserves leading and trailing spaces in element content.
+- **record_delimiter** (String) Specifies one or more singlebyte or multibyte characters that separate records in an input file (data loading) or unloaded file (data unloading).
+- **replace_invalid_characters** (Boolean) Boolean that specifies whether to replace invalid UTF-8 characters with the Unicode replacement character (�).
+- **skip_blank_lines** (Boolean) Boolean that specifies to skip any blank lines encountered in the data files.
+- **skip_byte_order_mark** (Boolean) Boolean that specifies whether to skip the BOM (byte order mark), if present in a data file.
+- **skip_header** (Number) Number of lines at the start of the file to skip.
+- **strip_null_values** (Boolean) Boolean that instructs the JSON parser to remove object fields or array elements containing null values.
+- **strip_outer_array** (Boolean) Boolean that instructs the JSON parser to remove outer brackets.
+- **strip_outer_element** (Boolean) Boolean that specifies whether the XML parser strips out the outer XML element, exposing 2nd level elements as separate documents.
+- **time_format** (String) Defines the format of time values in the data files (data loading) or table (data unloading).
+- **timestamp_format** (String) Defines the format of timestamp values in the data files (data loading) or table (data unloading).
+- **trim_space** (Boolean) Boolean that specifies whether to remove white space from fields.
+- **validate_utf8** (Boolean) Boolean that specifies whether to validate UTF-8 character encoding in string column data.
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+# format is database name | schema name | file format name
+terraform import snowflake_file_format.example 'dbName|schemaName|fileFormatName'
+```