Skip to content

Allow DBaaS Operator to specify user authentication method on creation #56

@tobybellwood

Description

@tobybellwood

In MySQL 8.0, the default authentication method changes from mysql_native_password to caching_sha2_password which requires additional libraries to support client-side https://dev.mysql.com/doc/refman/8.0/en/caching-sha2-pluggable-authentication.html

image

We should consider being able to specify the desired authentication plugin to use for created accounts to minimise potential impact to users CREATE USER xxx IDENTIFIED WITH mysql_native_password BY 'password';

createUser = fmt.Sprintf("CREATE USER IF NOT EXISTS `%s`@'%%' IDENTIFIED BY '%s';", consumer.Spec.Consumer.Username, consumer.Spec.Consumer.Password)

Noting that currently RDS Aurora and Google Cloud still default to mysql_native_password, but others (notably DigitalOcean) may not
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.AuroraMySQL.Compare-80-v3.html
https://cloud.google.com/sql/docs/mysql/features#mysql8-authentication

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions