feat: add module to fetch primary_metadata_region

modules/get_primary_metadata_region/README.md

@@ -0,0 +1 @@
+# Metrics Router module

modules/get_primary_metadata_region/main.tf

@@ -0,0 +1,20 @@
+########################################################################
+# IBM Cloud Metric Routing
+#########################################################################
+
+resource "time_sleep" "wait_iam_token" {
+  create_duration = "5s"
+}
+
+data "external" "get_primary_metadata_region" {
+  depends_on = [time_sleep.wait_iam_token]
+  program    = ["bash", "${path.module}/scripts/get_primary_metadata_region.sh"]
+
+  query = {
+    IBM_API_KEY          = var.ibmcloud_api_key
+    region               = var.region
+    use_private_endpoint = var.use_private_endpoint
+  }
+}
+
+

modules/get_primary_metadata_region/outputs.tf

@@ -0,0 +1,8 @@
+########################################################################
+# Metric Routing Account Settings
+#########################################################################
+
+output "primary_metadata_region" {
+  value       = nonsensitive(data.external.get_primary_metadata_region.result.primary_metadata_region)
+  description = "Primary metadata region for IBM Cloud Metrics Router"
+}

modules/get_primary_metadata_region/provider.tf

@@ -0,0 +1,4 @@
+provider "ibm" {
+  ibmcloud_api_key = var.ibmcloud_api_key
+  region           = var.region
+}

modules/get_primary_metadata_region/scripts/get_primary_metadata_region.sh

@@ -0,0 +1,59 @@
+#!/bin/bash
+set -euo pipefail
+
+input=$(cat)
+IBM_API_KEY=$(echo "$input" | jq -r '.IBM_API_KEY')
+REGION=$(echo "$input" | jq -r '.region')
+USE_PRIVATE_ENDPOINT=$(echo "$input" | jq -r '.use_private_endpoint')
+
+
+if [[ -z "$IBM_API_KEY" || "$IBM_API_KEY" == "null" ]]; then
+  echo "Error: IBM_API_KEY is missing" >&2
+  exit 1
+fi
+
+if [[ -z "$REGION" || "$REGION" == "null" ]]; then
+  echo "Error: region is missing" >&2
+  exit 1
+fi
+
+IAM_TOKEN=$(curl -s -X POST "https://iam.cloud.ibm.com/identity/token" \
+  -H "Content-Type: application/x-www-form-urlencoded" \
+  -d "grant_type=urn:ibm:params:oauth:grant-type:apikey&apikey=${IBM_API_KEY}" \
+  | jq -r '.access_token')
+
+if [[ -z "$IAM_TOKEN" || "$IAM_TOKEN" == "null" ]]; then
+  echo "Error: Failed to obtain IAM token" >&2
+  exit 1
+fi
+
+if [[ "$USE_PRIVATE_ENDPOINT" == "true" ]]; then
+  BASE_URL="https://${REGION}.metrics-router.private.cloud.ibm.com"
+else
+  BASE_URL="https://${REGION}.metrics-router.cloud.ibm.com"
+fi
+
+URL="${BASE_URL}/api/v3/settings"
+
+max_retries=5
+retry_delay=3
+
+for ((i=1; i<=max_retries; i++)); do
+  response=$(curl -s -X GET "$URL" -H "Authorization: Bearer ${IAM_TOKEN}" || true)
+  if echo "$response" | jq -e '.primary_metadata_region' >/dev/null; then
+    break
+  fi
+  echo "Attempt $i failed, retrying in ${retry_delay}s..." >&2
+  sleep "$retry_delay"
+done
+
+# Extract region value
+primary_region=$(echo "$response" | jq -r '.primary_metadata_region // empty')
+
+if [[ -z "$primary_region" ]]; then
+  echo "Error: primary_metadata_region not found in response" >&2
+  exit 1
+fi
+
+# Output valid JSON for Terraform
+jq -n --arg primary_region "$primary_region" '{primary_metadata_region: $primary_region}'

modules/get_primary_metadata_region/variables.tf

@@ -0,0 +1,21 @@
+##############################################################################
+# Input Variables
+##############################################################################
+
+variable "ibmcloud_api_key" {
+  description = "The IBM Cloud API Key."
+  type        = string
+  sensitive   = true
+}
+
+variable "region" {
+  description = "The IBM Cloud region."
+  type        = string
+  default     = "us-south"
+}
+
+variable "use_private_endpoint" {
+  type        = bool
+  description = "Make true to hit the private endpoint."
+  default     = false
+}

modules/get_primary_metadata_region/version.tf

@@ -0,0 +1,21 @@
+terraform {
+  required_version = ">= 1.9.0"
+  required_providers {
+    time = {
+      source  = "hashicorp/time"
+      version = ">= 0.9.1, < 1.0.0"
+    }
+    external = {
+      source  = "hashicorp/external"
+      version = "2.3.5"
+    }
+    ibm = {
+      source  = "ibm-cloud/ibm"
+      version = ">= 1.78.2, < 2.0.0"
+    }
+    null = {
+      source  = "hashicorp/null"
+      version = ">= 3.2.1, < 4.0.0"
+    }
+  }
+}

solutions/fully-configurable/main.tf

@@ -72,5 +72,12 @@ module "metrics_routing" {
   ]
 
   metrics_router_routes   = length(var.metrics_router_routes) != 0 ? var.metrics_router_routes : local.default_metrics_router_route
-  metrics_router_settings = var.enable_primary_metadata_region ? { primary_metadata_region = var.region } : null
+  metrics_router_settings = module.primary_metadata_region.primary_metadata_region != null ? null : { primary_metadata_region = var.region }
+}
+
+module "primary_metadata_region" {
+  source               = "../../modules/get_primary_metadata_region"
+  ibmcloud_api_key     = var.ibmcloud_api_key
+  region               = var.region
+  use_private_endpoint = var.use_private_endpoint
 }

solutions/fully-configurable/variables.tf

@@ -120,6 +120,12 @@ variable "enable_platform_metrics" {
 # Metrics Routing
 ########################################################################################################################
 
+variable "use_private_endpoint" {
+  type        = bool
+  description = "Make true to hit the private endpoint."
+  default     = false
+}
+
 variable "metrics_routing_target_name" {
   type        = string
   description = "The name of the IBM Cloud Metrics Routing target where metrics are collected. If the prefix variable is passed, the name of the target is prefixed to the value in the `<prefix>-value` format."