Using external auth with ~/.snowflake/config

[erikallmer]

Provider Version
Tested on 0.67.0, 0.73.0 and 0.74.0

Terraform Version
1.2.9

Describe the bug
I'm trying to use the ~/.snowflake/config file instead of using a tfvars file to provide auth settings. However, I was hoping to use browser auth which I have not managed to get working.

My ~/.snowflake/config file looks like this:

[default]
account = "<our Snowflake account name>"
user = "<my email>"
authenticator = "EXTERNALBROWSER"
role = "ACCOUNTADMIN"

With Terraform debug information I see the following error (0.67.0):
[DEBUG] error unmarshalling config file: toml: cannot store TOML string into a Go int

With 0.73.0 this error is instead:
[DEBUG] error unmarshalling config file: toml: cannot decode TOML string into struct field gosnowflake.Config.Authenticator of type gosnowflake.AuthType

Removing the authenticator line also removes this error from the log - however then it obviously complains that a password is not set, which is what I'm trying to avoid.

Expected behavior
The Terraform provider reads my config file and allows me to authenticate using the browser.

Would greatly appreciate any pointers/help!
Thank you!

[imre-kerr-sb1]

I'm not a Go expert, but I did a bit of digging. It seems like this provider tries to use go-toml to directly parse the config file into a gosnowflake.Config.

terraform-provider-snowflake/pkg/sdk/config.go

Lines 90 to 106 in 1aaf417

	func loadConfigFile() (map[string]*gosnowflake.Config, error) {
	path, err := configFile()
	if err != nil {
	return nil, err
	}
	dat, err := os.ReadFile(path)
	if err != nil {
	return nil, err
	}
	var s map[string]*gosnowflake.Config
	err = toml.Unmarshal(dat, &s)
	if err != nil {
	log.Printf("[DEBUG] error unmarshalling config file: %v\n", err)
	return nil, nil
	}
	return s, nil
	}

Since the authenticator field is an enum (i.e. an int), a string value like "externalbrowser" or "oauth" (which we would like to use) isn't usable.

I don't know if you could use some custom unmarshaling with TextUnmarshaler, or if you would have to parse into an intermediate type that could be converted into a gosnowflake.Config

[sfc-gh-asawicki]

Hey @imre-kerr-sb1. The reason for such behavior is

terraform-provider-snowflake/pkg/sdk/config.go

Line 50 in 1aaf417

func MergeConfig(baseConfig *gosnowflake.Config, mergeConfig *gosnowflake.Config) *gosnowflake.Config {

(params should be already translated correctly but they are not used in the merging func).

For now, only a handful of parameters are allowed in the config. We will address this in the upcoming https://github.com/Snowflake-Labs/terraform-provider-snowflake/blob/main/ROADMAP.md#providers-configuration-rework.

[sfc-gh-jmichalak]

Hi @erikallmer 👋

We've released a new v0.98.0 version (release, migration guide) with reworked config, which now supports setting authenticator in a TOML file. Please migrate to this version and adjust your configuration files.

[erikallmer]

Hi @sfc-gh-jmichalak! Thank you! I'm no longer working at the workplace where we had this issue so can't try it out myself 😊 but I'll forward it to my former team!

[sfc-gh-jmichalak]

Closing due to inactivity.