From 2362e79e4ed0273a11f15e1a31aba0e5eddc7774 Mon Sep 17 00:00:00 2001
From: owensmallwood <owen.smallwood@grafana.com>
Date: Tue, 30 Jul 2024 11:24:28 -0600
Subject: [PATCH] Unified Storage: Configure client to use tls=preferred
 (#91162)

* optionally set tls=preferred in the mysql connection string from env var
---
 pkg/storage/unified/sql/db/dbimpl/dbEngine.go | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/pkg/storage/unified/sql/db/dbimpl/dbEngine.go b/pkg/storage/unified/sql/db/dbimpl/dbEngine.go
index 557daa4d76c..1d67274f0da 100644
--- a/pkg/storage/unified/sql/db/dbimpl/dbEngine.go
+++ b/pkg/storage/unified/sql/db/dbimpl/dbEngine.go
@@ -24,6 +24,10 @@ func getEngineMySQL(getter *sectionGetter, _ trace.Tracer) (*xorm.Engine, error)
 		// See: https://dev.mysql.com/doc/refman/en/sql-mode.html
 		"@@SESSION.sql_mode": "ANSI",
 	}
+	tls := getter.String("db_tls")
+	if tls != "" {
+		config.Params["tls"] = tls
+	}
 	config.Collation = "utf8mb4_unicode_ci"
 	config.Loc = time.UTC
 	config.AllowNativePasswords = true