diff --git a/README.md b/README.md index 9ab8537..b55e771 100644 --- a/README.md +++ b/README.md @@ -106,7 +106,7 @@ For more information, refer to [variables.tf](variables.tf), list of inputs belo | [name](#input\_name) | ID element. Usually the component or solution name, e.g. 'app' or 'jenkins'.
This is the only ID element not also included as a `tag`.
The "name" tag is set to the full `id` string. There is no tag with the value of the `name` input. | `string` | `null` | no | | [namespace](#input\_namespace) | ID element. Usually an abbreviation of your organization name, e.g. 'eg' or 'cp', to help ensure generated IDs are globally unique | `string` | `null` | no | | [regex\_replace\_chars](#input\_regex\_replace\_chars) | Terraform regular expression (regex) string.
Characters matching the regex will be removed from the ID elements.
If not set, `"/[^a-zA-Z0-9-]/"` is used to remove all characters other than hyphens, letters and digits. | `string` | `null` | no | -| [roles](#input\_roles) | Database roles created in the stage scope |
map(object({
enabled = optional(bool, true)
with_grant_option = optional(bool)
granted_to_roles = optional(list(string))
granted_to_database_roles = optional(list(string))
granted_database_roles = optional(list(string))
stage_grants = optional(list(string))
all_privileges = optional(bool)
on_all = optional(bool, false)
schema_name = optional(string)
on_future = optional(bool, false)
}))
| `{}` | no | +| [roles](#input\_roles) | Database roles created in the stage scope |
map(object({
enabled = optional(bool, true)
with_grant_option = optional(bool)
granted_to_roles = optional(list(string))
granted_to_database_roles = optional(list(string))
granted_database_roles = optional(list(string))
stage_grants = optional(list(string))
all_privileges = optional(bool)
}))
| `{}` | no | | [schema](#input\_schema) | The schema in which to create the stage | `string` | n/a | yes | | [snowflake\_iam\_user](#input\_snowflake\_iam\_user) | Specifies the Snowflake IAM user | `string` | `null` | no | | [stage](#input\_stage) | ID element. Usually used to indicate role, e.g. 'prod', 'staging', 'source', 'build', 'test', 'deploy', 'release' | `string` | `null` | no | diff --git a/main.tf b/main.tf index 8eec488..e9153af 100644 --- a/main.tf +++ b/main.tf @@ -103,8 +103,6 @@ module "snowflake_custom_role" { privileges = lookup(each.value, "stage_grants", null) all_privileges = lookup(each.value, "all_privileges", null) with_grant_option = lookup(each.value, "with_grant_option", false) - on_future = lookup(each.value, "on_future", false) - on_all = lookup(each.value, "on_all", false) object_name = (lookup(each.value, "on_future", false) || lookup(each.value, "on_all", false)) ? null : one(snowflake_stage.this[*].name) schema_name = one(snowflake_stage.this[*].schema) } diff --git a/variables.tf b/variables.tf index 230b513..99c6ea1 100644 --- a/variables.tf +++ b/variables.tf @@ -90,9 +90,6 @@ variable "roles" { granted_database_roles = optional(list(string)) stage_grants = optional(list(string)) all_privileges = optional(bool) - on_all = optional(bool, false) - schema_name = optional(string) - on_future = optional(bool, false) })) default = {} }