From 4f0a6ca19574f663dd95dbbfd01895624d179c87 Mon Sep 17 00:00:00 2001
From: Will Scullin <willscullin@google.com>
Date: Wed, 17 Apr 2024 08:57:23 -0700
Subject: [PATCH] Switch to snowflake connection file (#1724)

---
 .github/workflows/db-snowflake.yaml | 12 +++---------
 .github/workflows/prerelease.yaml   |  3 +--
 .github/workflows/release.yaml      |  3 +--
 .github/workflows/run-tests.yaml    |  3 +--
 scripts/gen-snowflake-auth.sh       |  5 +++++
 5 files changed, 11 insertions(+), 15 deletions(-)
 create mode 100755 scripts/gen-snowflake-auth.sh

diff --git a/.github/workflows/db-snowflake.yaml b/.github/workflows/db-snowflake.yaml
index e4649bf26..3ac9095aa 100644
--- a/.github/workflows/db-snowflake.yaml
+++ b/.github/workflows/db-snowflake.yaml
@@ -4,9 +4,7 @@ on:
   pull_request:
   workflow_call:
     secrets:
-      SNOWFLAKE_USER:
-        required: true
-      SNOWFLAKE_PASSWORD:
+      SNOWFLAKE_CONNECTION:
         required: true
 
 jobs:
@@ -29,13 +27,9 @@ jobs:
         run: |
           npm ci --loglevel error
           npm run build
+          ./scripts/gen-snowflake-auth.sh
           npm run test-silent -- -- test packages/malloy-db-snowflake
         env:
           CI: true
           MALLOY_DATABASES: snowflake
-          SNOWFLAKE_ACCOUNT: pt58362-rx92781
-          SNOWFLAKE_USER: ${{ secrets.SNOWFLAKE_USER }}
-          SNOWFLAKE_PASSWORD: ${{ secrets.SNOWFLAKE_PASSWORD }}
-          SNOWFLAKE_WAREHOUSE: LOOKER_WH
-          SNOWFLAKE_DATABASE: MALLOYTEST
-          SNOWFLAKE_SCHEMA: PUBLIC
+          SNOWFLAKE_CONNECTION: ${{ secrets.SNOWFLAKE_CONNECTION }}
diff --git a/.github/workflows/prerelease.yaml b/.github/workflows/prerelease.yaml
index ad4f097b1..673910737 100644
--- a/.github/workflows/prerelease.yaml
+++ b/.github/workflows/prerelease.yaml
@@ -19,8 +19,7 @@ jobs:
   db-snowflake:
     uses: './.github/workflows/db-snowflake.yaml'
     secrets:
-      SNOWFLAKE_USER: ${{ secrets.SNOWFLAKE_USER }}
-      SNOWFLAKE_PASSWORD: ${{ secrets.SNOWFLAKE_PASSWORD }}
+      SNOWFLAKE_CONNECTION: ${{ secrets.SNOWFLAKE_CONNECTION }}
   main:
     uses: './.github/workflows/main.yaml'
 
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index d8cad8c1e..3f6cb4803 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -16,8 +16,7 @@ jobs:
   db-snowflake:
     uses: './.github/workflows/db-snowflake.yaml'
     secrets:
-      SNOWFLAKE_USER: ${{ secrets.SNOWFLAKE_USER }}
-      SNOWFLAKE_PASSWORD: ${{ secrets.SNOWFLAKE_PASSWORD }}
+      SNOWFLAKE_CONNECTION: ${{ secrets.SNOWFLAKE_CONNECTION }}
   main:
     uses: './.github/workflows/main.yaml'
 
diff --git a/.github/workflows/run-tests.yaml b/.github/workflows/run-tests.yaml
index 5ab68fece..ed8f93b30 100644
--- a/.github/workflows/run-tests.yaml
+++ b/.github/workflows/run-tests.yaml
@@ -16,8 +16,7 @@ jobs:
   db-snowflake:
     uses: './.github/workflows/db-snowflake.yaml'
     secrets:
-      SNOWFLAKE_USER: ${{ secrets.SNOWFLAKE_USER }}
-      SNOWFLAKE_PASSWORD: ${{ secrets.SNOWFLAKE_PASSWORD }}
+      SNOWFLAKE_CONNECTION: ${{ secrets.SNOWFLAKE_CONNECTION }}
   main:
     uses: './.github/workflows/main.yaml'
 
diff --git a/scripts/gen-snowflake-auth.sh b/scripts/gen-snowflake-auth.sh
new file mode 100755
index 000000000..e844c9db4
--- /dev/null
+++ b/scripts/gen-snowflake-auth.sh
@@ -0,0 +1,5 @@
+#!/bin/bash
+
+mkdir $HOME/.snowflake
+echo "$SNOWFLAKE_CONNECTION" > $HOME/.snowflake/connections.toml
+chmod 0600 $HOME/.snowflake/connections.toml