luxolus/open-vault
2
0
Fork 0
Code Issues 1 Pull requests Releases Activity
open-vault/vendor/github.com/hashicorp/vault-plugin-database-snowflake
History
Lauren Voswinkel 5794c4e91e
Updating snowflake plugin to 0.1.1 (#10709)
2021-01-20 12:56:36 -08:00
..
.gitignore Updating snowflake plugin to 0.1.1 (#10709) 2021-01-20 12:56:36 -08:00
go.mod Updating snowflake plugin to 0.1.1 (#10709) 2021-01-20 12:56:36 -08:00
go.sum Adding snowflake as a bundled database secrets plugin (#10603) 2021-01-07 09:30:24 -08:00
LICENSE Adding snowflake as a bundled database secrets plugin (#10603) 2021-01-07 09:30:24 -08:00
README.md Adding snowflake as a bundled database secrets plugin (#10603) 2021-01-07 09:30:24 -08:00
snowflake.go Updating snowflake plugin to 0.1.1 (#10709) 2021-01-20 12:56:36 -08:00

README.md

vault-plugin-database-snowflake

A Vault plugin for Snowflake. It is one of the supported plugins for the HashiCorp Vault Database Secrets Engine and allows for the programmatic generation of unique, ephemeral Snowflake Database User credentials in a Snowflake account.

This project uses the database plugin interface introduced in Vault version 1.6.0.

This plugin will be included in version 1.7 of Vault.

Bugs and Feature Requests

Bugs should be filed under the Issues section of this repo.

Feature requests can be submitted in the Issues section as well.

Quick Links

Please note: HashiCorp takes Vault's security and their users' trust very seriously.

If you believe you have found a security issue in Vault or with this plugin, please responsibly disclose by contacting HashiCorp at security@hashicorp.com.

Acceptance Testing

In order to perform acceptance testing, you need to set the environment variable VAULT_ACC=1 as well as provide all of the necessary information to connect to a Snowflake Project. All SNOWFLAKE_* environment variables must be provided in order for the acceptance tests to run properly. A cluster must be available during the test. A 30-day trial account can be provisioned manually to test.

Environment Variable Description
SNOWFLAKE_ACCOUNT The account string for your snowflake instance. If you are using a non-AWS provider, or a region that isn't us-west-1 for AWS, region and provider should be included here. (example: ec#####.east-us-2.azure)
SNOWFLAKE_USER The accountadmin level user that you are using with Vault
SNOWFLAKE_PASSWORD The password associated with the provided user
SNOWFLAKE_DB optional: The DB you are restricting the connection to
SNOWFLAKE_SCHEMA optional: The schema you are restricting the connection to
SNOWFLAKE_WAREHOUSE optional: The warehouse you are restricting the connection to