Files
doczyai-pipelines/snowsql-cicd.sh
T
2024-06-21 17:28:32 +02:00

46 lines
1.7 KiB
Bash
Executable File

#!/usr/bin/env bash
set -euo pipefail
ENV_GROUP=$1
readonly SCRIPT_DIR="$( cd "$( dirname "$0" )" && pwd )"
#echo "SNOWFLAKE_ACCOUNT=${SNOWFLAKE_ACCOUNT}, SNOWFLAKE_DATABASE=${SNOWFLAKE_DATABASE}, SNOWFLAKE_ROLE=${SNOWFLAKE_ROLE}"
#
#export GIT_ROOT=$(git rev-parse --show-toplevel)
#if [ "$(type -t changes)" != 'function' ]; then
# source "${GIT_ROOT}/infra/scripts/bootstrap-diff-changes.sh"
#fi
#
#if is_deploy_module "streamlit"; then
# echo -e "${GREEN}# Streamlit module changes have been detected. Executing the upload command...${NC}"
#else
# echo -e "${YELLOW}# There are no Streamlit module changes. Skipping the upload command...${NC}"
# exit 0
#fi
echo "# Getting snowflake creds from AWS Secret Manager..."
snowflake_secret_name="doczy-${ENV_GROUP}-db-svc-acc"
snowflake_secret_value=$(aws secretsmanager get-secret-value --secret-id "$snowflake_secret_name" --query 'SecretString' --output text)
SNOWFLAKE_ACCOUNT=$(echo $snowflake_secret_value | jq -r '.account_locator')
SNOWFLAKE_DATABASE=$(echo $snowflake_secret_value | jq -r '.database')
SNOWFLAKE_USER=$(echo $snowflake_secret_value | jq -r '.user')
SNOWFLAKE_ROLE=$(echo $snowflake_secret_value | jq -r '.role')
SNOWFLAKE_PASSWORD=$(echo $snowflake_secret_value | jq -r '.password')
#SNOWFLAKE_ACCOUNT=OQ11564.us-east-2.aws
#SNOWFLAKE_DATABASE=DOCZY_DEV
#SNOWFLAKE_USER=aws_svc_account
#SNOWFLAKE_ROLE=DEVADMIN
echo "SNOWFLAKE_ACCOUNT=${SNOWFLAKE_ACCOUNT}"
echo "SNOWFLAKE_DATABASE=${SNOWFLAKE_DATABASE}"
echo "SNOWFLAKE_USER=${SNOWFLAKE_USER}"
echo "SNOWFLAKE_ROLE=${SNOWFLAKE_ROLE}"
export SNOWSQL_PWD=${SNOWFLAKE_PASSWORD}
snowsql -a "${SNOWFLAKE_ACCOUNT}" -u "${SNOWFLAKE_USER}" -d "${SNOWFLAKE_DATABASE}" -r "${SNOWFLAKE_ROLE}" -o exit_on_error=true -f "${SCRIPT_DIR}/snowsql-query.sql"