[Feature]: OCSP_CACHE_REGIONLESS Data Source not available on Terraform

Snowflake-Labs / terraform-provider-snowflake

Terraform provider for managing Snowflake accounts

https://registry.terraform.io/providers/Snowflake-Labs/snowflake/latest

MIT License

541 stars 416 forks source link

[Feature]: OCSP_CACHE_REGIONLESS Data Source not available on Terraform #2831

Open ravisingh27 opened 4 months ago

ravisingh27 commented 4 months ago

Use Cases or Problem Statement

OCSP_CACHE_REGIONLESS Data Source is not available on Terraform. We use both OCSP_CACHE and OCSP_CACHE_REGIONLESS in our environment, as of now we can get the OCSP_CACHE dynamically as we have the data source on terraform but couldn't find the OCSP_CACHE_REGIONLESS is there a way to get this dynamically through terraform data source.

Object type(s)

data_source:system_get_privatelink_config

Proposal

Please include OCSP_CACHE_REGIONLESS as a terraform data source. data "snowflake_system_get_privatelink_config" "snowflake_private_link" {}

How much impact is this issue causing?

Medium

Additional Information

No response

Would you like to implement a fix?

[X] Yeah, I'll take it 😎

sfc-gh-asawicki commented 4 months ago

Hey @ravisingh27. Thanks for reaching out to us.

Are you talking about making a datasource out of system$allowlist_privatelink or which other existing SQL statement?

ravisingh27 commented 4 months ago

Hi @sfc-gh-asawicki Yes- for OCSP_CACHE_REGIONLESS Ex. ocsp.vnb92357.us-east-2.privatelink.snowflakecomputing.com -> We can get this URL ocsp.lseg-snoxxxxxxtprod.privatelink.snowflakecomputing.com -> Unable to get this URL

sfc-gh-asawicki commented 4 months ago

We did not plan to add such datasources before the V1 (consult https://github.com/Snowflake-Labs/terraform-provider-snowflake/blob/main/ROADMAP.md#current-expected-midlate-this-year). We had, however, planned to create a generic datasource capable of invoking any snowflake system$ function (we have to first squeeze it in, design it, and discuss it in detail).

So we have a few options here:

you can use https://registry.terraform.io/providers/Snowflake-Labs/snowflake/latest/docs/resources/unsafe_execute to run any arbitrary statement
you can wait for the generic datasource
you can design and implement a datasource just for the system$ function needed with our help, that will be later replaced with the aforementioned generic one

What do you think?

sfc-gh-asawicki commented 3 months ago

Hey @ravisingh27. Did you think about the options above? ;)