diff --git a/CHANGELOG.md b/CHANGELOG.md index 89e044f01..0c944ebfd 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,7 @@ ## Unreleased +FEATURES: + * Update `vault_database_secret_backend_connection`to support `password_authentication` for PostgreSQL, allowing to encrypt password before being passed to PostgreSQL ([#2371](https://github.com/hashicorp/terraform-provider-vault/pull/2371)) ## 4.5.0 (Nov 19, 2024) diff --git a/website/docs/r/database_secret_backend_connection.md b/website/docs/r/database_secret_backend_connection.md index f8658fe7e..eaf6bccbd 100644 --- a/website/docs/r/database_secret_backend_connection.md +++ b/website/docs/r/database_secret_backend_connection.md @@ -340,7 +340,7 @@ See the [Vault * `password_authentication` - (Optional) When set to `scram-sha-256`, passwords will be hashed by Vault before being sent to PostgreSQL. See the [Vault docs](https://www.vaultproject.io/api-docs/secret/databases/postgresql.html#sample-payload) - for an example. + for an example. Requires Vault 1.14+. * `private_key` - (Optional) The secret key used for the x509 client certificate. Must be PEM encoded.