terraform 1.0, and use iam token to create db

Author: l2fprod

terraform/create-database.sh

@@ -0,0 +1,12 @@
+# create a database
+set -e
+
+echo "Retrieving IAM tokens for Cloudant API key..."
+IAM_TOKENS=$(curl -X POST 'https://iam.cloud.ibm.com/identity/token' \
+  -H 'Content-Type: application/x-www-form-urlencoded' \
+  -d "grant_type=urn:ibm:params:oauth:grant-type:apikey&apikey=$CLOUDANT_IAM_APIKEY")
+
+API_BEARER_TOKEN=$(echo $IAM_TOKENS | jq -r .access_token)
+
+echo "Creating database..."
+curl -f -H "Authorization: Bearer $API_BEARER_TOKEN" -X PUT "$CLOUDANT_URL/$CLOUDANT_DATABASE"

terraform/main.tf

@@ -115,11 +115,15 @@ resource "ibm_resource_key" "RKcloudantManager" {
 
   # create the database
   provisioner "local-exec" {
-    command = "curl -X PUT ${ibm_resource_key.RKcloudantManager.credentials.url}/secure-file-storage-metadata"
+    command = "./create-database.sh"
+    environment = {
+      CLOUDANT_IAM_APIKEY = nonsensitive(ibm_resource_key.RKcloudantManager.credentials.apikey)
+      CLOUDANT_URL        = nonsensitive(ibm_resource_key.RKcloudantManager.credentials.url)
+      CLOUDANT_DATABASE   = "secure-file-storage-metadata"
+    }
   }
 }
 
-
 # service access key for AppID
 resource "ibm_resource_key" "RKappid" {
   name                 = "${var.basename}-accKey-appid"

terraform/workspace.json

@@ -1,7 +1,7 @@
 {
     "name": "schematics_secure-file-storage",
     "type": [
-      "terraform_v0.14"
+      "terraform_v1.0"
     ],
     "description": "Deploy services for solution tutorial on applying e2e security (secure file storage)",
     "tags": [
@@ -14,7 +14,7 @@
     },
     "template_data": [{
       "folder": ".",
-      "type": "terraform_v0.14",
+      "type": "terraform_v1.0",
       "variablestore": [{
           "name": "project_name",
           "value": "secure-file-storage",