From 7af89bd26a3e4ca9268999ddaea4c4db04907115 Mon Sep 17 00:00:00 2001
From: Herve Commowick <herve.commowick@sundayapp.com>
Date: Thu, 31 Aug 2023 13:44:44 +0200
Subject: [PATCH] feat: Allow for inlining client cert

It is useful when you are using Google Cloud SQL and don't want to
be forced to use temporary files to load certificate
---
 postgresql/config.go   | 4 ++++
 postgresql/provider.go | 6 ++++++
 2 files changed, 10 insertions(+)

diff --git a/postgresql/config.go b/postgresql/config.go
index 82a5a9a5..10094128 100644
--- a/postgresql/config.go
+++ b/postgresql/config.go
@@ -149,6 +149,7 @@ func (db *DBConnection) isSuperuser() (bool, error) {
 type ClientCertificateConfig struct {
 	CertificatePath string
 	KeyPath         string
+	SSLInline       bool
 }
 
 // Config - provider config
@@ -215,6 +216,9 @@ func (c *Config) connParams() []string {
 	if c.SSLClientCert != nil {
 		params["sslcert"] = c.SSLClientCert.CertificatePath
 		params["sslkey"] = c.SSLClientCert.KeyPath
+		if c.SSLClientCert.SSLInline {
+			params["sslinline"] = strconv.FormatBool(c.SSLClientCert.SSLInline)
+		}
 	}
 
 	if c.SSLRootCertPath != "" {
diff --git a/postgresql/provider.go b/postgresql/provider.go
index 1ceba01d..702efc94 100644
--- a/postgresql/provider.go
+++ b/postgresql/provider.go
@@ -130,6 +130,11 @@ func Provider() *schema.Provider {
 							Description: "The SSL client certificate private key file path. The file must contain PEM encoded data.",
 							Required:    true,
 						},
+						"sslinline": {
+							Type:        schema.TypeBool,
+							Description: "Must be set to true if you are inlining the cert/key instead of using a file path.",
+							Optional:    true,
+						},
 					},
 				},
 				MaxItems: 1,
@@ -296,6 +301,7 @@ func providerConfigure(d *schema.ResourceData) (interface{}, error) {
 			config.SSLClientCert = &ClientCertificateConfig{
 				CertificatePath: spec["cert"].(string),
 				KeyPath:         spec["key"].(string),
+				SSLInline:       spec["sslinline"].(bool),
 			}
 		}
 	}