Snowflake

cd ~/.ssh
openssl genrsa 2048 | openssl pkcs8 -topk8 -inform PEM -out snowflake_filament_snow_key.p8 -nocrypt
openssl rsa -in snowflake_filament_snow_key.p8 -pubout -out snowflake_filament_snow_key.pub
chmod 600 snowflake_filament_snow_key.p8

grep -v '^-----' snowflake_filament_snow_key.pub | tr -d '\n'

-- Create the Filament role and place it beneath SYSADMIN.
USE ROLE SECURITYADMIN;

CREATE ROLE IF NOT EXISTS FILAMENT_ROLE;
GRANT ROLE FILAMENT_ROLE TO ROLE SYSADMIN;

-- Create the destination warehouse and database as SYSADMIN.
USE ROLE SYSADMIN;

CREATE WAREHOUSE IF NOT EXISTS FILAMENT_WAREHOUSE
    WAREHOUSE_SIZE = XSMALL
    WAREHOUSE_TYPE = STANDARD
    AUTO_SUSPEND = 60
    AUTO_RESUME = TRUE
    INITIALLY_SUSPENDED = TRUE;

CREATE DATABASE IF NOT EXISTS FILAMENT_DATABASE;

GRANT USAGE ON WAREHOUSE FILAMENT_WAREHOUSE TO ROLE FILAMENT_ROLE;
GRANT USAGE, CREATE SCHEMA ON DATABASE FILAMENT_DATABASE TO ROLE FILAMENT_ROLE;

-- PUBLIC already exists. These grants allow it to be selected as the
-- destination and allow Filament to create tables there.
GRANT USAGE, CREATE TABLE ON SCHEMA FILAMENT_DATABASE.PUBLIC TO ROLE FILAMENT_ROLE;

-- Create the non-interactive user and assign the public key.
USE ROLE SECURITYADMIN;

CREATE USER IF NOT EXISTS FILAMENT_USER
    TYPE = SERVICE
    DEFAULT_ROLE = FILAMENT_ROLE
    DEFAULT_WAREHOUSE = FILAMENT_WAREHOUSE;

GRANT ROLE FILAMENT_ROLE TO USER FILAMENT_USER;

ALTER USER FILAMENT_USER SET BINARY_INPUT_FORMAT = 'BASE64';
ALTER USER FILAMENT_USER SET TIMESTAMP_INPUT_FORMAT = 'AUTO';

ALTER USER FILAMENT_USER SET RSA_PUBLIC_KEY = '<PUBLIC_KEY_BODY>';