terraform-provider-snowflakeをv0.88.0からv2.0.0にアップグレードしてみた

.
├── README.md
├── cfn
│   └── create_state_gha_resources.yaml
├── environments
│   ├── dev
│   │   ├── backend.tf
│   │   ├── main.tf
│   │   ├── output.tf
│   │   ├── terraform.tfvars
│   │   ├── variables.tf
│   │   └── versions.tf
│   └── prod
│       ├── backend.tf
│       ├── main.tf
│       ├── output.tf
│       ├── terraform.tfvars
│       ├── variables.tf
│       └── versions.tf
└── modules
    ├── access_role_and_database
    │   ├── main.tf
    │   ├── output.tf
    │   ├── variables.tf
    │   └── versions.tf
    ├── access_role_and_schema
    │   ├── main.tf
    │   ├── output.tf
    │   ├── variables.tf
    │   └── versions.tf
    ├── access_role_and_warehouse
    │   ├── main.tf
    │   ├── output.tf
    │   ├── variables.tf
    │   └── versions.tf
    ├── functional_role
    │   ├── main.tf
    │   ├── output.tf
    │   ├── variables.tf
    │   └── versions.tf
    └── user
        ├── main.tf
        ├── output.tf
        ├── variables.tf
        └── versions.tf

# module.bbb_develop_wh.snowflake_warehouse.this will be updated in-place
  ~ resource "snowflake_warehouse" "this" {
      ~ enable_query_acceleration           = "false" -> "default"
        id                                  = "BBB_DEVELOP_WH"
      ~ max_concurrency_level               = 8 -> (known after apply)
        name                                = "BBB_DEVELOP_WH"
      ~ query_acceleration_max_scale_factor = 8 -> -1
      - scaling_policy                      = "STANDARD" -> null
      ~ show_output                         = [
          - {
              - auto_resume                         = true
              - auto_suspend                        = 60
              - available                           = 0
              - comment                             = "Warehouse for develop of BBB projects"
              - created_on                          = "2025-04-10 17:03:45.405 -0700 PDT"
              - enable_query_acceleration           = false
              - is_current                          = false
              - is_default                          = false
              - max_cluster_count                   = 1
              - min_cluster_count                   = 1
              - name                                = "BBB_DEVELOP_WH"
              - other                               = 0
              - owner                               = "TERRAFORM"
              - owner_role_type                     = "ROLE"
              - provisioning                        = 0
              - query_acceleration_max_scale_factor = 8
              - queued                              = 0
              - quiescing                           = 0
              - resumed_on                          = "2025-04-10 17:03:45.405 -0700 PDT"
              - running                             = 0
              - scaling_policy                      = "STANDARD"
              - size                                = "XSMALL"
              - started_clusters                    = 0
              - state                               = "SUSPENDED"
              - type                                = "STANDARD"
              - updated_on                          = "2025-04-10 17:03:45.429 -0700 PDT"
                # (1 unchanged attribute hidden)
            },
        ] -> (known after apply)
      ~ statement_queued_timeout_in_seconds = 0 -> (known after apply)
      ~ statement_timeout_in_seconds        = 172800 -> (known after apply)
        # (9 unchanged attributes hidden)

│ Error: Unsupported argument
│ 
│   on ../../modules/access_role_and_schema/main.tf line 6, in resource "snowflake_schema" "this":
│    6:   data_retention_days = var.data_retention_days
│ 
│ An argument named "data_retention_days" is not expected here.
╵
╷
│ Error: Unsupported argument
│ 
│   on ../../modules/access_role_and_schema/main.tf line 8, in resource "snowflake_schema" "this":
│    8:   is_managed   = var.is_managed
│ 
│ An argument named "is_managed" is not expected here.

find . -type f -name "*.tf" -exec sed -i 's/data_retention_days/data_retention_time_in_days/g' {} +
find . -type f -name "*.tf" -exec sed -i 's/is_managed/with_managed_access/g' {} +

╷
│ Warning: Deprecated Resource
│ 
│   with module.aaa_develop_wh.snowflake_role.usage_ar,
│   on ../../modules/access_role_and_warehouse/main.tf line 23, in resource "snowflake_role" "usage_ar":
│   23: resource "snowflake_role" "usage_ar" {
│ 
│ This resource is deprecated and will be removed in a future major version release. Please use
│ snowflake_account_role instead.
│ 
│ (and 23 more similar warnings elsewhere)

terraform state list | grep snowflake_role

find . -type f -name "*.tf" -exec sed -i 's/snowflake_role/snowflake_account_role/g' {} +

# module：functional_roleの場合
module "aaa_developer_fr" {
  source = "../../modules/functional_role"
  providers = {
    snowflake = snowflake.terraform
  }

  role_name = "AAA_DEVELOPER_FR"
  grant_user_set = [
    module.developer_sagara.name
  ]
  comment = "Functional Role for develop in Project AAA"
}

removed {
  from = module.aaa_developer_fr.snowflake_role.this
  lifecycle {
    destroy = false
  }
}
import {
  to = module.aaa_developer_fr.snowflake_account_role.this
  id = "AAA_DEVELOPER_FR"
}

# module：access_role_and_warehouseの場合
module "aaa_develop_wh" {
  source = "../../modules/access_role_and_warehouse"
  providers = {
    snowflake = snowflake.terraform
  }

  warehouse_name = "AAA_DEVELOP_WH"
  warehouse_size = "XSMALL"
  comment        = "Warehouse for develop of AAA projects"

  grant_admin_ar_to_fr_set = [
    module.aaa_developer_fr.name
  ]
}

removed {
  from = module.aaa_develop_wh.snowflake_role.usage_ar
  lifecycle {
    destroy = false
  }
}
import {
  to = module.aaa_develop_wh.snowflake_account_role.usage_ar
  id = "_WAREHOUSE_AAA_DEVELOP_WH_USAGE_AR"
}
removed {
  from = module.aaa_develop_wh.snowflake_role.admin_ar
  lifecycle {
    destroy = false
  }
}
import {
  to = module.aaa_develop_wh.snowflake_account_role.admin_ar
  id = "_WAREHOUSE_AAA_DEVELOP_WH_ADMIN_AR"
}

╷
│ Error: Unsupported argument
│ 
│   on ../../modules/user/main.tf line 13, in resource "snowflake_user" "this":
│   13:   default_secondary_roles = var.default_secondary_roles
│ 
│ An argument named "default_secondary_roles" is not expected here.
╵

find . -type f -name "*.tf" -exec sed -i 's/default_secondary_roles/default_secondary_roles_option/g' {} +

variable "default_secondary_roles_option" {
  description = "Specifies the set of secondary roles that are active for the user’s session upon login. Currently only [ALL] value is supported"
  type        = string
  default     = "NONE"
}

╷
│ Error: sql: Scan error on column index 14, name "default_namespace": converting NULL to string is unsupported
│ 
│   with module.analyst_sagara.snowflake_user.this,
│   on ../../modules/user/main.tf line 1, in resource "snowflake_user" "this":
│    1: resource "snowflake_user" "this" {
│ 
╵

╷
│ Error: expected [{{} disabled}] to be one of ["true" "false"], got 
│ 
│   with module.developer_sagara.snowflake_user.this,
│   on ../../modules/user/main.tf line 6, in resource "snowflake_user" "this":
│    6:   disabled     = var.disabled
│ 
╵

variable "disabled" {
  description = "If true, the target user will not be deleted but deactivated"
  type        = bool
  default     = false
}

╷
│ Warning: Argument is deprecated
│ 
│   with provider["registry.terraform.io/snowflakedb/snowflake"].terraform,
│   on versions.tf line 13, in provider "snowflake":
│   13:   account       = var.environment == "prod" ? var.snowflake_prod_account : var.snowflake_dev_account
│ 
│ Use `account_name` and `organization_name` instead of `account`
╵

# prodアカウント名は環境変数「TF_VAR_snowflake_prod_account_name」で定義する
variable "snowflake_prod_account_name" {
  description = "Snowflakeのprodアカウント名 (例: xy123)"
  type        = string
}

# devアカウント名は環境変数「TF_VAR_snowflake_dev_account_name」で定義する
variable "snowflake_dev_account_name" {
  description = "Snowflakeのdevアカウント名 (例: ab456)"
  type        = string
}

# prodアカウントの組織名は環境変数「TF_VAR_snowflake_prod_org_name」で定義する
variable "snowflake_prod_org_name" {
  description = "Snowflakeのprod組織名 (例: abc)"
  type        = string
}

# devアカウントの組織名は環境変数「TF_VAR_snowflake_dev_org_name」で定義する
variable "snowflake_dev_org_name" {
  description = "Snowflakeのdev組織名 (例: def)"
  type        = string
} 

export TF_VAR_snowflake_dev_account_name="AAA_DEV"      # devアカウント名
export TF_VAR_snowflake_prod_account_name="AAA_PROD"     # prodアカウント名
export TF_VAR_snowflake_dev_org_name="BBB"            # dev組織名
export TF_VAR_snowflake_prod_org_name="CCC"           # prod組織名

env:

  # Snowflake
  TF_VAR_snowflake_dev_account_name: ${{ secrets.TF_VAR_SNOWFLAKE_DEV_ACCOUNT_NAME }}
  TF_VAR_snowflake_prod_account_name: ${{ secrets.TF_VAR_SNOWFLAKE_PROD_ACCOUNT_NAME }}
  TF_VAR_snowflake_dev_org_name: ${{ secrets.TF_VAR_SNOWFLAKE_DEV_ORG_NAME }}
  TF_VAR_snowflake_prod_org_name: ${{ secrets.TF_VAR_SNOWFLAKE_PROD_ORG_NAME }}

╷
│ Error: invalid authenticator type: JWT
│ 
│   with provider["registry.terraform.io/snowflakedb/snowflake"].terraform,
│   on versions.tf line 16, in provider "snowflake":
│   16:   authenticator     = "JWT"
│ 
╵