[Feature]: OCSP_CACHE_REGIONLESS Data Source not available on Terraform

[ravisingh27]

Use Cases or Problem Statement

OCSP_CACHE_REGIONLESS Data Source is not available on Terraform.
We use both OCSP_CACHE and OCSP_CACHE_REGIONLESS in our environment, as of now we can get the OCSP_CACHE dynamically as we have the data source on terraform but couldn't find the OCSP_CACHE_REGIONLESS is there a way to get this dynamically through terraform data source.

Category

category:data_source

Object type(s)

data_source:system_get_privatelink_config

Proposal

Please include OCSP_CACHE_REGIONLESS as a terraform data source.
data "snowflake_system_get_privatelink_config" "snowflake_private_link" {}

How much impact is this issue causing?

Medium

Additional Information

No response

Would you like to implement a fix?

• Yeah, I'll take it 😎

[sfc-gh-asawicki]

Hey @ravisingh27. Thanks for reaching out to us.

Are you talking about making a datasource out of system$allowlist_privatelink or which other existing SQL statement?

[ravisingh27]

Hi @sfc-gh-asawicki Yes- for OCSP_CACHE_REGIONLESS
Ex.
ocsp.vnb92357.us-east-2.privatelink.snowflakecomputing.com -> We can get this URL
ocsp.lseg-snoxxxxxxtprod.privatelink.snowflakecomputing.com -> Unable to get this URL

[sfc-gh-asawicki]

We did not plan to add such datasources before the V1 (consult https://github.com/Snowflake-Labs/terraform-provider-snowflake/blob/main/ROADMAP.md#current-expected-midlate-this-year). We had, however, planned to create a generic datasource capable of invoking any snowflake system$ function (we have to first squeeze it in, design it, and discuss it in detail).

So we have a few options here:

• you can use https://registry.terraform.io/providers/Snowflake-Labs/snowflake/latest/docs/resources/unsafe_execute to run any arbitrary statement
• you can wait for the generic datasource
• you can design and implement a datasource just for the system$ function needed with our help, that will be later replaced with the aforementioned generic one

What do you think?

[sfc-gh-asawicki]

Hey @ravisingh27. Did you think about the options above? ;)