Postgres roles without passwords in Terraform state
The PlanetScale Terraform provider v1.3.0 adds planetscale_postgres_redacted_branch_role, a Postgres-only resource that works like planetscale_postgres_branch_role but does not store the plaintext password in Terraform state.
Use it when you want Terraform to manage the role itself while keeping the password in your own secret manager. After creating the role, reset its password through the API or PlanetScale dashboard to generate a new credential and store it outside of Terraform.