chore(server/tests/snowflake): use keypair auth (#2460)

* chore(server/tests/snowflake): use keypair auth

Signed-off-by: Luka Peschke <[email protected]>

* chore: add private key to CI

Signed-off-by: Luka Peschke <[email protected]>

---------

Signed-off-by: Luka Peschke <[email protected]>

Author: lukapeschke

.github/workflows/ci-server.yml

@@ -56,6 +56,7 @@ jobs:
         SNOWFLAKE_ACCOUNT: '${{ secrets.SNOWFLAKE_ACCOUNT}}'
         SNOWFLAKE_SCHEMA: '${{ secrets.SNOWFLAKE_SCHEMA}}'
         SNOWFLAKE_WAREHOUSE: '${{ secrets.SNOWFLAKE_WAREHOUSE}}'
+        SNOWFLAKE_PRIVATE_KEY: '${{ secrets.SNOWFLAKE_PRIVATE_KEY}}'
         # Redshift
         REDSHIFT_USER: '${{ secrets.REDSHIFT_USER }}'
         REDSHIFT_PASSWORD: '${{ secrets.REDSHIFT_PASSWORD }}'

.gitignore

@@ -7,3 +7,4 @@
 # Secrets
 bigquery-credentials.json
 .env
+snowflake_rsa_key.p8

server/tests/backends/sql_translator_integration_tests/test_sql_snowflake_translator_steps.py

@@ -3,10 +3,11 @@
 from io import StringIO
 from os import environ
 from typing import Any
-from urllib.parse import quote
 
 import pandas as pd
 import pytest
+from cryptography.hazmat.backends import default_backend
+from cryptography.hazmat.primitives import serialization
 from snowflake.sqlalchemy import URL
 from sqlalchemy import create_engine, text
 
@@ -21,14 +22,25 @@
 def engine():
     url = URL(
         user=environ["SNOWFLAKE_USER"],
-        password=quote(environ["SNOWFLAKE_PASSWORD"]),
         database=environ["SNOWFLAKE_DATABASE"],
         account=environ["SNOWFLAKE_ACCOUNT"],
         schema=environ["SNOWFLAKE_SCHEMA"],
         warehouse=environ["SNOWFLAKE_WAREHOUSE"],
     )
-    engine = create_engine(url)
+    pk_pem = environ["SNOWFLAKE_PRIVATE_KEY"].encode()
+    pk_password = environ["SNOWFLAKE_PASSWORD"]
+    private_key = serialization.load_pem_private_key(pk_pem, password=pk_password.encode(), backend=default_backend())
+
+    connect_args = {
+        "private_key": private_key.private_bytes(
+            encoding=serialization.Encoding.DER,
+            format=serialization.PrivateFormat.PKCS8,
+            encryption_algorithm=serialization.NoEncryption(),
+        )
+    }
+    engine = create_engine(url, connect_args=connect_args)
     connection = engine.connect()
+
     yield connection
     connection.close()