Merge pull request petoju#105 from Amri91/master

feat: 🎸 enable setting allow cleartext password flag

mysql/provider.go

@@ -18,6 +18,11 @@ import (
 	"golang.org/x/net/proxy"
 )
 
+const (
+	cleartextPasswords = "cleartext"
+	nativePasswords    = "native"
+)
+
 type MySQLConfiguration struct {
 	Config          *mysql.Config
 	MaxConnLifetime time.Duration
@@ -73,6 +78,13 @@ func Provider() terraform.ResourceProvider {
 				Type:     schema.TypeInt,
 				Optional: true,
 			},
+
+			"authentication_plugin": {
+				Type:         schema.TypeString,
+				Optional:     true,
+				Default:      nativePasswords,
+				ValidateFunc: validation.StringInSlice([]string{cleartextPasswords, nativePasswords}, true),
+			},
 		},
 
 		ResourcesMap: map[string]*schema.Resource{
@@ -97,12 +109,13 @@ func providerConfigure(d *schema.ResourceData) (interface{}, error) {
 	}
 
 	conf := mysql.Config{
-		User:                 d.Get("username").(string),
-		Passwd:               d.Get("password").(string),
-		Net:                  proto,
-		Addr:                 endpoint,
-		TLSConfig:            d.Get("tls").(string),
-		AllowNativePasswords: true,
+		User:                    d.Get("username").(string),
+		Passwd:                  d.Get("password").(string),
+		Net:                     proto,
+		Addr:                    endpoint,
+		TLSConfig:               d.Get("tls").(string),
+		AllowNativePasswords:    d.Get("authentication_plugin").(string) == nativePasswords,
+		AllowCleartextPasswords: d.Get("authentication_plugin").(string) == cleartextPasswords,
 	}
 
 	dialer := proxy.FromEnvironment()

website/docs/index.html.markdown

@@ -82,3 +82,4 @@ The following arguments are supported:
 * `tls` - (Optional) The TLS configuration. One of `false`, `true`, or `skip-verify`. Defaults to `false`. Can also be sourced from the `MYSQL_TLS_CONFIG` environment variable.
 * `max_conn_lifetime_sec` - (Optional) Sets the maximum amount of time a connection may be reused. If d <= 0, connections are reused forever.
 * `max_open_conns` - (Optional) Sets the maximum number of open connections to the database. If n <= 0, then there is no limit on the number of open connections.
+* `authentication_plugin` - (Optional) Sets the authentication plugin, it can be one of the following: `native` or `cleartext`. Defaults to `native`.