How to generate a pre-hashed sha2 password

[msilveirabr]

Hi.
How can we use a pre-generated hash password to use with this combination:

- name: MySQL | Ensure MySQL users are present
  mysql_user:
    plugin: caching_sha2_password
    name: "{{ mysql_username }}"
    host: "{{ mysql_host }}"
    # password: cleartext_insecure_password
    plugin_auth_string: "HOW_DO_I_GENERATE_THIS????"
    priv: "{{  mysql_priv | default(['*.*:USAGE']) | join('/') }}"

The closest content to an answer I could find was this : hashcat/hashcat#2305

But I have no idea (yet) on how to accomplish this...
BTW is it really necessary to create the hash as described in the mentioned url?

[markuman]

have you tried to use select sha2('secret', 256); with the mysql_query module, register the output, and pass it into the mysql_user task?

[markuman]

ah foregt it....

it must be something like that CREATE USER 'username'@'localhost' IDENTIFIED WITH 'caching_sha2_password' BY 'your_password';

[dpbrewerton]

plugin_auth_string for caching_sha2_password takes in a cleartext password, at least in my experience. Use ansible-vault or another plugin and provide the password from outside the playbook as a variable so it's not sitting in plaintext on the playbook.