Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow DBaaS Operator to specify user authentication method on creation #56

Open
tobybellwood opened this issue Aug 11, 2023 · 0 comments

Comments

@tobybellwood
Copy link
Member

tobybellwood commented Aug 11, 2023

In MySQL 8.0, the default authentication method changes from mysql_native_password to caching_sha2_password which requires additional libraries to support client-side https://dev.mysql.com/doc/refman/8.0/en/caching-sha2-pluggable-authentication.html

image

We should consider being able to specify the desired authentication plugin to use for created accounts to minimise potential impact to users CREATE USER xxx IDENTIFIED WITH mysql_native_password BY 'password';

createUser = fmt.Sprintf("CREATE USER IF NOT EXISTS `%s`@'%%' IDENTIFIED BY '%s';", consumer.Spec.Consumer.Username, consumer.Spec.Consumer.Password)

Noting that currently RDS Aurora and Google Cloud still default to mysql_native_password, but others (notably DigitalOcean) may not
https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.AuroraMySQL.Compare-80-v3.html
https://cloud.google.com/sql/docs/mysql/features#mysql8-authentication

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant