Version Control for Snowflake Semantic Views with Terraform

# This block specifies the required providers for our Terraform configuration.
# We're using the 'snowflake' provider from the Snowflake-Labs namespace.
terraform {
  required_providers {
    snowflake = {
      source = "snowflakedb/snowflake"
    }
  }

  # This is the Terraform Cloud backend configuration.
  # It tells Terraform to store the state file in your Terraform Cloud workspace.
  # Replace 'your-organization' and 'your-workspace-name' with your actual values.
  backend "remote" {
    hostname     = "app.terraform.io"
    organization = "ka_tf_org"
    workspaces {
      name = "snowflake_infrastructure"
    }
  }
}

# The provider block configures the Snowflake provider with your connection details.
# These variables are read directly from your Terraform Cloud workspace.
provider "snowflake" {
  organization_name = var.snowflake_organization_name 
  account_name      = var.snowflake_account_name
  user              = var.snowflake_user
  password          = var.snowflake_password
  role              = var.snowflake_role
  preview_features_enabled = [ "snowflake_table_resource", "snowflake_semantic_view_resource" ]
}

# Create a Snowflake warehouse
resource "snowflake_warehouse" "tf_warehouse" {
  name             = "TF_WAREHOUSE"
  warehouse_size   = "XSMALL"
  auto_suspend     = 600
  auto_resume      = true
  comment          = "Warehouse created with Terraform for a simple example."
}

# Create a Snowflake database
resource "snowflake_database" "tf_database" {
  name    = "TF_DATABASE"
  comment = "Database created with Terraform for a simple example."
}

# Create a Snowflake schema within the new database
resource "snowflake_schema" "tf_schema" {
  name     = "TF_SCHEMA"
  database = snowflake_database.tf_database.name
  comment  = "Schema created with Terraform."
}

# Create a simple table within the new schema
resource "snowflake_table" "tf_table" {
  database = snowflake_database.tf_database.name
  schema   = snowflake_schema.tf_schema.name
  name     = "TF_TABLE"
  comment  = "A simple table created with Terraform."

  # Define the columns for the table.
  column {
    name = "ID"
    type = "NUMBER(38,0)"
  }

  column {
    name = "PRODUCT_NAME"
    type = "VARCHAR(255)"
  }

  column {
    name = "PRICE"
    type = "NUMBER(10,2)"
  }

  column {
    name = "PRODUCT_CATEGORY"
    type = "VARCHAR(255)"
  }
}

# Create a Snowflake semantic view
resource "snowflake_semantic_view" "tf_semantic_view" {
  name     = "TF_SEMANTIC_VIEW"
  database = snowflake_database.tf_database.name
  schema   = snowflake_schema.tf_schema.name
  comment  = "A simple semantic view created with Terraform."

  tables {
    table_alias = "TF_TABLE"
    table_name  = "\"${snowflake_database.tf_database.name}\".\"${snowflake_schema.tf_schema.name}\".\"${snowflake_table.tf_table.name}\""
  }

  dimensions {
    qualified_expression_name = "\"TF_TABLE\".\"PRODUCT_CATEGORY\""
    sql_expression            = "\"TF_TABLE\".\"PRODUCT_CATEGORY\""
  }

  metrics {
    semantic_expression {
      qualified_expression_name = "\"TF_TABLE\".\"AVERAGE_PRICE\""
      sql_expression            = "AVG(\"TF_TABLE\".\"PRICE\")"
      synonym                   = ["Average Price"]
    }
  }
}

variable "snowflake_account_name" {
  type = string
}

variable "snowflake_user" {
  type = string
}

variable "snowflake_password" {
  type      = string
  sensitive = true
}

variable "snowflake_role" {
  type    = string
  default = "ACCOUNTADMIN"
}

variable "snowflake_organization_name" {
  type = string
}

# This is the name of your workflow, which will appear in the GitHub Actions tab.
name: "Terraform Snowflake CI/CD"

# This specifies when the workflow should run. It will run on any push to the 'main' branch.
on:
  push:
    branches:
      - main
      
# The jobs section defines the tasks that the workflow will execute.
jobs:
  terraform_apply:
    # This specifies the type of runner to use.
    runs-on: ubuntu-latest

    # This block defines an environment variable for the job, using the GitHub secret.
    env:
      TF_API_TOKEN: ${{ secrets.TF_API_TOKEN }}
      
    # This section lists the steps the job will take.
    steps:
      # Step 1: Checks out your repository's code.
      - name: Checkout repository
        uses: actions/checkout@v4

      # Step 2: Sets up Terraform on the runner and passes the API token for authentication.
      - name: Setup Terraform
        uses: hashicorp/setup-terraform@v3
        with:
          cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }}

      # Step 3: Initializes the Terraform project. This connects to your Terraform Cloud backend.
      - name: Terraform Init
        run: terraform init

      # Step 4: Creates a Terraform plan to show what changes will be applied.
      # This is a best practice to review changes before applying.
      - name: Terraform Plan
        run: terraform plan

      # Step 5: Applies the Terraform configuration. The plan and apply commands are
      # executed within Terraform Cloud's environment. The -auto-approve flag
      # is used to automatically confirm the changes, which is suitable for a CD pipeline.
      - name: Terraform Apply
        run: terraform apply -auto-approve

git add .
git commit -m "Configure Terraform Cloud and GitHub Actions"
git push origin main