support changing the user's authentication plugin for databases

Author: C24-AK

manifests/db.pp

@@ -5,6 +5,7 @@
 #   mysql::db { 'mydb':
 #     user     => 'myuser',
 #     password => 'mypass',
+#     plugin   => 'caching_sha2_password',
 #     host     => 'localhost',
 #     grant    => ['SELECT', 'UPDATE'],
 #   }
@@ -19,6 +20,8 @@
 #   The user for the database you're creating.
 # @param password
 #   The password for $user for the database you're creating.
+# @param plugin
+#   The authentication plugin for $user for the database you're creating. Defaults to 'mysql_native_password'.
 # @param tls_options
 #   The tls_options for $user for the database you're creating.
 # @param dbname
@@ -47,21 +50,22 @@
 #   Specify the path in which mysql has been installed if done in the non-standard bin/sbin path.   
 #
 define mysql::db (
-  String[1]                                      $user,
-  Variant[String, Sensitive[String]]             $password,
-  Optional[Array[String[1]]]                     $tls_options     = undef,
-  String                                         $dbname          = $name,
-  String[1]                                      $charset         = 'utf8',
-  String[1]                                      $collate         = 'utf8_general_ci',
-  String[1]                                      $host            = 'localhost',
-  Variant[String[1], Array[String[1]]]           $grant           = 'ALL',
-  Optional[Variant[String[1], Array[String[1]]]] $grant_options   = undef,
-  Optional[Array]                                $sql             = undef,
-  Boolean                                        $enforce_sql     = false,
-  Enum['absent', 'present']                      $ensure          = 'present',
-  Integer                                        $import_timeout  = 300,
-  Enum['cat', 'zcat', 'bzcat']                   $import_cat_cmd  = 'cat',
-  Optional[String]                               $mysql_exec_path = undef,
+  String[1]                                              $user,
+  Variant[String, Sensitive[String]]                     $password,
+  String[1]                                              $plugin          ='mysql_native_password',
+  Optional[Array[String[1]]]                             $tls_options     = undef,
+  String                                                 $dbname          = $name,
+  String[1]                                              $charset         = 'utf8',
+  String[1]                                              $collate         = 'utf8_general_ci',
+  String[1]                                              $host            = 'localhost',
+  Variant[String[1], Array[String[1]]]                   $grant           = 'ALL',
+  Optional[Variant[String[1], Array[String[1]]]]         $grant_options   = undef,
+  Optional[Array]                                        $sql             = undef,
+  Boolean                                                $enforce_sql     = false,
+  Enum['absent', 'present']                              $ensure          = 'present',
+  Integer                                                $import_timeout  = 300,
+  Enum['cat', 'zcat', 'bzcat']                           $import_cat_cmd  = 'cat',
+  Optional[String]                                       $mysql_exec_path = undef,
 ) {
   include 'mysql::client'
 
@@ -103,6 +107,7 @@
   $user_resource = {
     ensure        => $ensure,
     password_hash => Deferred('mysql::password', [$password]),
+    plugin        => $plugin,
     tls_options   => $tls_options,
   }
   ensure_resource('mysql_user', "${user}@${host}", $user_resource)