SNOW-2346239: update GH action to use key pair auth (#3981)

Author: sfc-gh-yuwang

.github/scripts/decrypt_parameters.sh

@@ -1,4 +1,5 @@
 #!/usr/bin/env bash
 
-gpg --quiet --batch --yes --decrypt --passphrase="$PARAMETER_PASSWORD" --output tests/parameters.py .github/workflows/parameters/parameters_${CLOUD_PROVIDER}.py.gpg
+gpg --quiet --batch --yes --decrypt --passphrase="$PARAMETER_PASSWORD" .github/workflows/parameters/rsa_keys/rsa_key_${CLOUD_PROVIDER}.p8.gpg >> tests/rsa_key_${CLOUD_PROVIDER}.p8
+gpg --quiet --batch --yes --decrypt --passphrase="$PARAMETER_PASSWORD" .github/workflows/parameters/parameters_${CLOUD_PROVIDER}.py.gpg >> tests/parameters.py
 gpg --quiet --batch --yes --decrypt --passphrase="$PARAMETER_PASSWORD" .github/workflows/parameters/parameters_dbapi.py.gpg >> tests/parameters.py

.github/workflows/parameters/parameters_aws.py.gpg

@@ -1,3 +1,4 @@
-�	��cWhY�^���q
�"�a����n�D!��Ks���W
�V�t��
�#�u�/[v����D-������mÊ��6�M���h�u�t�'��yѫ��lwf��/���
�Ļ�Je�B|v7a�^�:�І�C�7�|,�|8�I���
-t�5�)g��2�y��~�&g�ι��KT�d��F�oH�I0ꕎ��b1�J8��0������w}
-��9��f�'{��NL�G�hX�~�%|�.����G��?+_A'�c.��V�j�>�����7�
��z�^��b+l�16ܜVA��8V
+�	l���r������
���`{����ű�W�Y�L�hT�k��ڭ����_�H�
+H�5{��쬋�ݙRS�2
�I�t�'N9�eMq@�����5H��WNJ����iE�zt��ы�X�X�LG�!,O��;�V9v���WIvEFx��%��0g��-��x��cm�N���mʼn���	&\���5C�'3���f�y����0�<;hp܌����4�<����8�;L���,�+oTv�2��'����X���)�ٖr��yF_����N�js����=��'��Z�A��s�u%��ִF�Y���d����"�FѲ�m`���f-
�X�
+�:'H��
+���`�^��%�;�{ZJYWl{3�:

.github/workflows/parameters/parameters_azure.py.gpg

@@ -21,9 +21,13 @@
 LOCAL_TESTING_MODE = False
 
 sys.path.append("tests/")
+# get the absolute path of rsa private key files
+params_file = os.path.abspath("tests/parameters.py")
 with open("tests/parameters.py", encoding="utf-8") as f:
-    exec(f.read(), globals())
-conn_params = globals()["CONNECTION_PARAMETERS"]
+    # inject rsa private key file path so that the connection parameters can access rsa private key file correctly
+    exec_globals = {"__file__": params_file}
+    exec(f.read(), exec_globals)
+conn_params = exec_globals["CONNECTION_PARAMETERS"]
 
 
 def pytest_addoption(parser):

.github/workflows/parameters/parameters_gcp.py.gpg

@@ -350,6 +350,13 @@ def session(
             session, db_parameters, unparser_jar
         )
 
+    # TODO: SNOW-2346239: Set parameter on user level instead of in config file
+    if not local_testing_mode:
+        session.sql(
+            "alter session set ENABLE_EXTRACTION_PUSHDOWN_EXTERNAL_PARQUET_FOR_COPY_PHASE_I='Track';"
+        ).collect()
+        session.sql("alter session set ENABLE_ROW_ACCESS_POLICY=true").collect()
+
     try:
         yield session