diff --git a/.secrets.baseline b/.secrets.baseline
index e72e0cdb..af25d937 100644
--- a/.secrets.baseline
+++ b/.secrets.baseline
@@ -3,7 +3,7 @@
     "files": "^.secrets.baseline$",
     "lines": null
   },
-  "generated_at": "2025-06-19T07:38:57Z",
+  "generated_at": "2025-09-17T10:23:03Z",
   "plugins_used": [
     {
       "name": "AWSKeyDetector"
@@ -102,6 +102,126 @@
         "type": "Secret Keyword",
         "verified_result": null
       }
+    ],
+    "tools/minimal-demo-prod-scripts/README.md": [
+      {
+        "hashed_secret": "89a6cfe2a229151e8055abee107d45ed087bbb4f",
+        "is_secret": true,
+        "is_verified": false,
+        "line_number": 36,
+        "type": "Secret Keyword",
+        "verified_result": null
+      },
+      {
+        "hashed_secret": "365b78d42089abe4583503eded60fa7c1b3e1cd0",
+        "is_secret": true,
+        "is_verified": false,
+        "line_number": 56,
+        "type": "Secret Keyword",
+        "verified_result": null
+      }
+    ],
+    "tools/minimal-demo-prod-scripts/catalog_values_demo_deployment.json": [
+      {
+        "hashed_secret": "216168000275f83a7bc3599e708c5bafab959783",
+        "is_secret": true,
+        "is_verified": false,
+        "line_number": 2,
+        "type": "Secret Keyword",
+        "verified_result": null
+      },
+      {
+        "hashed_secret": "55aac310878e11ce14b29027f77e58cb7c4fe7a4",
+        "is_secret": true,
+        "is_verified": false,
+        "line_number": 8,
+        "type": "Secret Keyword",
+        "verified_result": null
+      },
+      {
+        "hashed_secret": "1f5e25be9b575e9f5d39c82dfd1d9f4d73f1975c",
+        "is_secret": true,
+        "is_verified": false,
+        "line_number": 56,
+        "type": "Secret Keyword",
+        "verified_result": null
+      },
+      {
+        "hashed_secret": "b295b04949a98dc50ba65adcddd588077b93ab3c",
+        "is_secret": true,
+        "is_verified": false,
+        "line_number": 65,
+        "type": "Secret Keyword",
+        "verified_result": null
+      }
+    ],
+    "tools/minimal-demo-prod-scripts/catalog_values_minimal_deployment.json": [
+      {
+        "hashed_secret": "216168000275f83a7bc3599e708c5bafab959783",
+        "is_secret": true,
+        "is_verified": false,
+        "line_number": 2,
+        "type": "Secret Keyword",
+        "verified_result": null
+      },
+      {
+        "hashed_secret": "55aac310878e11ce14b29027f77e58cb7c4fe7a4",
+        "is_secret": true,
+        "is_verified": false,
+        "line_number": 8,
+        "type": "Secret Keyword",
+        "verified_result": null
+      },
+      {
+        "hashed_secret": "1f5e25be9b575e9f5d39c82dfd1d9f4d73f1975c",
+        "is_secret": true,
+        "is_verified": false,
+        "line_number": 56,
+        "type": "Secret Keyword",
+        "verified_result": null
+      },
+      {
+        "hashed_secret": "b295b04949a98dc50ba65adcddd588077b93ab3c",
+        "is_secret": true,
+        "is_verified": false,
+        "line_number": 65,
+        "type": "Secret Keyword",
+        "verified_result": null
+      }
+    ],
+    "tools/minimal-demo-prod-scripts/catalog_values_production_deployment.json": [
+      {
+        "hashed_secret": "216168000275f83a7bc3599e708c5bafab959783",
+        "is_secret": true,
+        "is_verified": false,
+        "line_number": 2,
+        "type": "Secret Keyword",
+        "verified_result": null
+      },
+      {
+        "hashed_secret": "55aac310878e11ce14b29027f77e58cb7c4fe7a4",
+        "is_secret": true,
+        "is_verified": false,
+        "line_number": 8,
+        "type": "Secret Keyword",
+        "verified_result": null
+      },
+      {
+        "hashed_secret": "1f5e25be9b575e9f5d39c82dfd1d9f4d73f1975c",
+        "is_secret": true,
+        "is_verified": false,
+        "line_number": 56,
+        "type": "Secret Keyword",
+        "verified_result": null
+      },
+      {
+        "hashed_secret": "b295b04949a98dc50ba65adcddd588077b93ab3c",
+        "is_secret": true,
+        "is_verified": false,
+        "line_number": 65,
+        "type": "Secret Keyword",
+        "verified_result": null
+      }
     ]
   },
   "version": "0.13.1+ibm.62.dss",
diff --git a/common-dev-assets b/common-dev-assets
index 6739b3a0..325cfd0d 160000
--- a/common-dev-assets
+++ b/common-dev-assets
@@ -1 +1 @@
-Subproject commit 6739b3a089aa08a072dd83c8b594311e42fc96d4
+Subproject commit 325cfd0d91902e08079644092bbf298c4872f388
diff --git a/ibm_catalog.json b/ibm_catalog.json
index 8bd5af3e..adb3b716 100644
--- a/ibm_catalog.json
+++ b/ibm_catalog.json
@@ -48,6 +48,7 @@
           "name": "Cluster-with-LSF",
           "install_type": "fullstack",
           "working_directory": "solutions/lsf",
+          "terraform_version": "1.10.5",
           "compliance": {
             "authority": "scc-v3",
             "profiles": [
diff --git a/samples/configs/hpc_catalog_values.json b/samples/configs/hpc_catalog_values.json
index f9ad780b..18346e99 100644
--- a/samples/configs/hpc_catalog_values.json
+++ b/samples/configs/hpc_catalog_values.json
@@ -6,9 +6,9 @@
     "ssh_keys": "[\"Please fill here\"]",
     "remote_allowed_ips": "[\"Please fill here\"]",
     "app_center_gui_password": "Please fill here",
-    "lsf_version": "Fixpack_15",
+    "lsf_version": "fixpack_15",
     "vpc_name": "__NULL__",
-    "cluster_subnet_id": "[]",
+    "cluster_subnet_id": "__NULL__",
     "login_subnet_id": "__NULL__",
     "vpc_cidr": "10.241.0.0/18",
     "vpc_cluster_private_subnets_cidr_blocks": "10.241.0.0/20",
@@ -30,8 +30,8 @@
     "enable_vpc_flow_logs": "false",
     "enable_ldap": "false",
     "ldap_basedns": "lsf.com",
-    "ldap_server": "null",
-    "ldap_server_cert": "null",
+    "ldap_server": "__NULL__",
+    "ldap_server_cert": "__NULL__",
     "ldap_admin_password": "",
     "ldap_user_name": "",
     "ldap_user_password": "",
@@ -51,7 +51,7 @@
     "observability_logs_enable_for_compute": "false",
     "observability_enable_platform_logs": "false",
     "observability_enable_metrics_routing": "false",
-    "observability_logs_retention_period": "false",
+    "observability_logs_retention_period": "7",
     "observability_monitoring_on_compute_nodes_enable": "false",
     "observability_monitoring_plan": "graduated-tier",
     "existing_bastion_instance_name": "__NULL__",
diff --git a/tools/access-management/README.md b/tools/access-management/README.md
new file mode 100644
index 00000000..6f1ca6f6
--- /dev/null
+++ b/tools/access-management/README.md
@@ -0,0 +1,13 @@
+# IAM Permissions Assignment for LSF Deployment
+
+### Before deploying an IBM Cloud LSF cluster, specific IAM permissions must be assigned to either a user or an access group. This script automates that process.
+
+How to run:
+
+```
+ibmcloud login --apikey <YOUR_API_KEY> -g <RESOURCE_GROUP>
+
+chmod +x permissions.sh
+
+./permissions.sh
+```
diff --git a/tools/access-management/permissions.sh b/tools/access-management/permissions.sh
new file mode 100755
index 00000000..60666e40
--- /dev/null
+++ b/tools/access-management/permissions.sh
@@ -0,0 +1,239 @@
+#!/usr/bin/env bash
+set -e
+
+#####################################
+# 1. Prompt for required inputs
+#####################################
+echo "🔧 IBM Cloud Permissions Assignment Script (Interactive Mode)"
+
+read -rp "Enter admin email (your IBMid): " ADMIN_EMAIL
+if [ -z "$ADMIN_EMAIL" ]; then
+  echo "❌ ADMIN_EMAIL is required."
+  exit 1
+fi
+
+read -rp "Enter Resource Group ID: " RESOURCE_GROUP_ID
+if [ -z "$RESOURCE_GROUP_ID" ]; then
+  echo "❌ RESOURCE_GROUP_ID is required."
+  exit 1
+fi
+
+read -rp "Enter Account ID: " ACCOUNT_ID
+if [ -z "$ACCOUNT_ID" ]; then
+  echo "❌ ACCOUNT_ID is required."
+  exit 1
+fi
+
+echo "Do you want to assign roles to an Access Group or a User?"
+select target_type in "Access Group" "User"; do
+  case $target_type in
+    "Access Group")
+      read -rp "Enter Access Group Name: " ACCESS_GROUP
+      break
+      ;;
+    "User")
+      read -rp "Enter target User Email: " USER_EMAIL
+      break
+      ;;
+    *)
+      echo "❗ Invalid selection. Choose 1 or 2."
+      ;;
+  esac
+done
+
+#####################################
+# 2. Check IAM Administrator rights
+#####################################
+echo "🔍 Checking if $ADMIN_EMAIL can assign IAM permissions..."
+has_permission=false
+
+check_policies() {
+  local policies="$1"
+
+  # Check Administrator role for serviceType=service
+  local has_admin
+  has_admin=$(echo "$policies" | jq -e '
+    .[] |
+    select(.roles? != null) |
+    select(any(.roles[]?.display_name; . == "Administrator")) |
+    select(any(.resources[].attributes[]?; .name == "accountId")) |
+    select(any(.resources[].attributes[]?; .name == "serviceType" and .value == "service"))
+  ' >/dev/null 2>&1 && echo "true" || echo "false")
+
+  # Check role for serviceType=platform_service (Viewer, Editor, or Administrator)
+  local has_platform_role
+  has_platform_role=$(echo "$policies" | jq -e '
+    .[] |
+    select(.roles? != null) |
+    select(any(.roles[]?.display_name; . == "Viewer" or . == "Editor" or . == "Administrator")) |
+    select(any(.resources[].attributes[]?; .name == "accountId")) |
+    select(any(.resources[].attributes[]?; .name == "serviceType" and .value == "platform_service"))
+  ' >/dev/null 2>&1 && echo "true" || echo "false")
+
+  # Return true only if both checks pass
+  [[ "$has_admin" == "true" && "$has_platform_role" == "true" ]]
+}
+
+USER_POLICIES=$(ibmcloud iam user-policies "$ADMIN_EMAIL" --output json 2>/dev/null || echo "[]")
+if echo "$USER_POLICIES" | jq empty 2>/dev/null; then
+  if check_policies "$USER_POLICIES"; then
+    has_permission=true
+  fi
+fi
+
+if [ "$has_permission" != true ]; then
+  ACCESS_GROUPS_FOR_ADMIN=$(ibmcloud iam access-groups -u "$ADMIN_EMAIL" --output json 2>/dev/null || echo "[]")
+
+  # Collect all policies from all access groups into a single array
+  ALL_GROUP_POLICIES="[]"
+  while IFS= read -r GROUP_NAME; do
+    GROUP_POLICIES=$(ibmcloud iam access-group-policies "$GROUP_NAME" --output json 2>/dev/null || echo "[]")
+    ALL_GROUP_POLICIES=$(echo "$ALL_GROUP_POLICIES $GROUP_POLICIES" | jq -s 'add')
+  done < <(echo "$ACCESS_GROUPS_FOR_ADMIN" | jq -r '.[].name // empty')
+  # Check all group policies at once
+  if check_policies "$ALL_GROUP_POLICIES"; then
+    has_permission=true
+  fi
+fi
+
+if [ "$has_permission" != true ]; then
+  echo "❌ $ADMIN_EMAIL does NOT have account-level Administrator rights — cannot assign permissions."
+  exit 1
+fi
+
+echo "✅ $ADMIN_EMAIL has account-level Administrator rights — proceeding."
+
+#####################################
+# 3. Role assignment definitions
+#####################################
+PERMISSIONS_LIST="apprapp|Administrator|Manager
+cloud-object-storage|Service Configuration Reader|Writer
+dns-svcs|Editor|Manager
+sysdig-monitor|Administrator|Manager
+kms|Service Configuration Reader|Manager
+secrets-manager|Administrator|Manager
+sysdig-secure|Administrator|
+is|Editor|"
+
+# New friendly names list (service|friendly name)
+FRIENDLY_NAMES="apprapp|App Configuration
+cloud-object-storage|Cloud Object Storage
+dns-svcs|DNS Services
+sysdig-monitor|Cloud Monitoring
+kms|Key Protect
+secrets-manager|Secrets Manager
+sysdig-secure|Security and Compliance Center Workload Protection
+is|VPC Infrastructure Services"
+
+get_friendly_name() {
+  local service="$1"
+  echo "$FRIENDLY_NAMES" | while IFS='|' read -r svc fname; do
+    if [ "$svc" = "$service" ]; then
+      echo "$fname"
+      return
+    fi
+  done
+}
+
+#####################################
+# 4. Helper to check if policy exists
+#####################################
+policy_exists() {
+  local SERVICE="$1"
+  local ROLES="$2"
+  local RG_ID="$3"
+  local ACCOUNT_ID="$4"
+
+  local existing_policies
+  if [ -n "$ACCESS_GROUP" ]; then
+    existing_policies=$(ibmcloud iam access-group-policies "$ACCESS_GROUP" --output json 2>/dev/null || echo "[]")
+  elif [ -n "$USER_EMAIL" ]; then
+    existing_policies=$(ibmcloud iam user-policies "$USER_EMAIL" --output json 2>/dev/null || echo "[]")
+  else
+    echo "❗ ERROR: Neither ACCESS_GROUP nor USER_EMAIL is set in policy_exists"
+    return 1
+  fi
+
+  echo "$existing_policies" | jq -e \
+    --arg service "$SERVICE" \
+    --arg roles "$ROLES" \
+    --arg rg_id "$RG_ID" \
+    --arg account_id "$ACCOUNT_ID" '
+    .[] |
+    select(([.roles[].display_name] | sort) == ($roles | split(",") | sort)) |
+    if $service == "" then
+      select(any(.resources[].attributes[]?;
+                 .name == "resourceGroupId" and .value == $rg_id)) |
+      select(all(.resources[].attributes[]?.name; . != "serviceName"))
+    else
+      select(any(.resources[].attributes[]?;
+                 .name == "resourceGroupId" and .value == $rg_id)) |
+      select(any(.resources[].attributes[]?;
+                 .name == "serviceName" and .value == $service)) |
+      select([.resources[].attributes[]?.name] | unique | sort
+             == ["accountId","resourceGroupId","serviceName"])
+    end
+  ' >/dev/null
+}
+
+#####################################
+# 5. Main logic: Assign roles
+#####################################
+if [ -n "$ACCESS_GROUP" ] && [ -z "$USER_EMAIL" ]; then
+  echo "🔐 Assigning roles to access group: $ACCESS_GROUP"
+  echo "$PERMISSIONS_LIST" | while IFS='|' read -r SERVICE_NAME PLATFORM_ROLE SERVICE_ROLE; do
+    [ -n "$SERVICE_ROLE" ] && ROLES="$PLATFORM_ROLE,$SERVICE_ROLE" || ROLES="$PLATFORM_ROLE"
+    fname=$(get_friendly_name "$SERVICE_NAME")
+    [ -n "$fname" ] && DISPLAY_NAME="$SERVICE_NAME ($fname)" || DISPLAY_NAME="$SERVICE_NAME"
+
+    if ! policy_exists "$SERVICE_NAME" "$ROLES" "$RESOURCE_GROUP_ID" "$ACCOUNT_ID"; then
+      echo "Assigning roles '$ROLES' for service $DISPLAY_NAME"
+      ibmcloud iam access-group-policy-create "$ACCESS_GROUP" \
+        --roles "$ROLES" \
+        --service-name "$SERVICE_NAME" \
+        --resource-group-id "$RESOURCE_GROUP_ID" || echo "⚠️ Failed to assign $ROLES for $DISPLAY_NAME"
+    else
+      echo "✅ Policy already exists for $DISPLAY_NAME"
+    fi
+  done
+
+  if ! policy_exists "" "Administrator,Manager" "$RESOURCE_GROUP_ID" "$ACCOUNT_ID"; then
+    echo "Assigning global Administrator,Manager roles to access group: $ACCESS_GROUP"
+    ibmcloud iam access-group-policy-create "$ACCESS_GROUP" \
+      --roles "Administrator,Manager" \
+      --resource-group-id "$RESOURCE_GROUP_ID" || echo "⚠️ Failed for all-service Admin/Manager (access group)"
+  else
+    echo "✅ All Identity and Access enabled services Administrator/Manager policy already exists for access group"
+  fi
+
+elif [ -z "$ACCESS_GROUP" ] && [ -n "$USER_EMAIL" ]; then
+  echo "👤 Assigning roles to user: $USER_EMAIL"
+  echo "$PERMISSIONS_LIST" | while IFS='|' read -r SERVICE_NAME PLATFORM_ROLE SERVICE_ROLE; do
+    [ -n "$SERVICE_ROLE" ] && ROLES="$PLATFORM_ROLE,$SERVICE_ROLE" || ROLES="$PLATFORM_ROLE"
+    fname=$(get_friendly_name "$SERVICE_NAME")
+    [ -n "$fname" ] && DISPLAY_NAME="$SERVICE_NAME ($fname)" || DISPLAY_NAME="$SERVICE_NAME"
+
+    if ! policy_exists "$SERVICE_NAME" "$ROLES" "$RESOURCE_GROUP_ID" "$ACCOUNT_ID"; then
+      echo "Assigning roles '$ROLES' for service $DISPLAY_NAME"
+      ibmcloud iam user-policy-create "$USER_EMAIL" \
+        --roles "$ROLES" \
+        --service-name "$SERVICE_NAME" \
+        --resource-group-id "$RESOURCE_GROUP_ID" || echo "⚠️ Failed to assign $ROLES for $DISPLAY_NAME"
+    else
+      echo "✅ Policy already exists for $DISPLAY_NAME"
+    fi
+  done
+
+  if ! policy_exists "" "Administrator,Manager" "$RESOURCE_GROUP_ID" "$ACCOUNT_ID"; then
+    echo "Assigning global Administrator,Manager roles to $USER_EMAIL"
+    ibmcloud iam user-policy-create "$USER_EMAIL" \
+      --roles "Administrator,Manager" \
+      --resource-group-id "$RESOURCE_GROUP_ID" || echo "⚠️ Failed for all-service Admin/Manager"
+  else
+    echo "✅ All Identity and Access enabled services Administrator/Manager policy already exists"
+  fi
+
+else
+  echo "❗ Please choose either Access Group or User."
+  exit 1
+fi
diff --git a/tools/minimal-demo-prod-scripts/README.md b/tools/minimal-demo-prod-scripts/README.md
new file mode 100644
index 00000000..309f6cfa
--- /dev/null
+++ b/tools/minimal-demo-prod-scripts/README.md
@@ -0,0 +1,103 @@
+# Deploying and Connecting to LSF Environment via CLI
+
+### Notes:
+
+The <cluster_prefix> must be 16 characters or fewer, i.e. abc-lsf
+
+The catalog_values_<environment_type>_deployment.json specifies the configuation of the LSF environment. Please review to avoid unexpected costs.
+
+### Deployment Types:
+
+#### Minimal:
+Deploys the smallest possible environment (a single management instance) for the fastest setup. All optional services (observability, logging, SCC, Atracker, Ldap etc.) are disabled.
+
+#### Demo:
+Showcases the full set of capabilities. All optional services (observability, logging, SCC, etc.) are enabled. Deployment takes longer compared to minimal.
+
+#### Production:
+Allows customization for production-grade deployments. Optional services like observability, logging, and SCC are enabled by default but can be tailored as required.
+
+All JSON files are customizable (users can tweak configs as needed).
+But the .env file is mandatory because that’s where the required variables must always be filled.
+
+## Step 1. Fill the .env file
+
+```
+##############################################################################
+# Environment Configuration
+
+# Step 1: Update the variables below as needed.
+# Step 2: If you require additional optional variables, update them directly
+#         in the JSON file(s) for your deployment type.
+# Step 3: Always validate the JSON file before running the script.
+##############################################################################
+
+# IBM Cloud API key
+API_KEY="YOUR_API_KEY"
+
+# Account and resource details
+ACCOUNT_GUID="ACCOUNT_GUID"
+ZONES="ZONES"
+RESOURCE_GROUP="RESOURCE_GROUP"
+
+# SSH key name (must exist in your account)
+SSH_KEY="SSH_KEY"
+
+# Template JSON file (choose as per your deployment type)
+TEMPLATE_FILE="catalog_values_minimal_deployment.json"
+
+# LSF tile version locator
+# Example below is for 3.0.0 version
+LSF_TILE_VERSION="1082e7d2-5e2f-0a11-a3bc-f88a8e1931fc.6c26cd4c-4f72-45e5-8bde-77387aa05138-global"
+
+# App Center GUI password
+# Rules: Minimum 8 characters, at least 1 uppercase, 1 lowercase, 1 number,
+# and 1 special character (!@#$%^&*()_+=-). No spaces allowed.
+APP_CENTER_GUI_PASSWORD="APP_CENTER_GUI_PASSWORD"
+```
+
+## Step 2. Deploy the LSF Environment:
+```
+1. chmod +x create_lsf_environment.sh
+2. ./create_lsf_environment.sh <cluster_prefix>
+```
+
+## Step 3. Connect to the LSF Cluster and Run Jobs
+
+Now that your environment is set up, you can connect to the LSF cluster and perform operations such as submitting jobs, monitoring workloads, viewing infrastructure details. etc.
+
+#### 1. To view the infra details
+
+```
+chmod +x show.sh
+ ./show.sh <cluster_prefix>
+```
+
+#### 2. Copy the job submission script to the cluster
+
+```
+chmod +x cp.sh
+ ./cp.sh <cluster_prefix> submit.sh
+```
+
+#### 3. Jump to the LSF Environment
+
+```
+chmod +x jump.sh
+ ./jump.sh <cluster_prefix>
+```
+
+#### 4. Submit jobs
+
+```
+sh submit.sh
+bjobs
+lshosts -w
+```
+
+#### 5. To destroy the created infrastructure
+
+```
+chmod +x destroy.sh
+ ./destroy.sh <cluster_prefix>
+```
diff --git a/tools/minimal-demo-prod-scripts/catalog_values_demo_deployment.json b/tools/minimal-demo-prod-scripts/catalog_values_demo_deployment.json
new file mode 100644
index 00000000..3e4b629e
--- /dev/null
+++ b/tools/minimal-demo-prod-scripts/catalog_values_demo_deployment.json
@@ -0,0 +1,69 @@
+{
+  "ibmcloud_api_key": "XX_API_KEY_XX",
+  "existing_resource_group": "XX_RESOURCE_GROUP_XX",
+  "zones": "[\"XX_ZONES_XX\"]",
+  "ssh_keys": "[\"XX_SSH_KEY_XX\"]",
+  "cluster_prefix": "XX_PREFIX_XX",
+  "remote_allowed_ips": "[\"XX_REMOTE_IP_XX\"]",
+  "app_center_gui_password": "XX_APP_CENTER_GUI_PASSWORD_XX",
+
+  "enable_hyperthreading": true,
+  "vpn_enabled": false,
+  "TF_VERSION": "1.9",
+  "TF_PARALLELISM": "250",
+  "key_management": "key_protect",
+  "kms_instance_name": "__NULL__",
+  "kms_key_name": "__NULL__",
+  "enable_vpc_flow_logs": true,
+  "sccwp_enable": false,
+  "app_config_plan": "basic",
+  "sccwp_service_plan": "graduated-tier",
+  "cspm_enabled": "true",
+  "observability_atracker_enable": "true",
+  "observability_atracker_target_type": "cloudlogs",
+  "observability_monitoring_enable": "true",
+  "observability_logs_enable_for_management": "true",
+  "observability_logs_enable_for_compute": "true",
+  "observability_enable_platform_logs": "true",
+  "observability_enable_metrics_routing": "true",
+  "observability_logs_retention_period": "7",
+  "observability_monitoring_on_compute_nodes_enable": "true",
+  "observability_monitoring_plan": "graduated-tier",
+  "lsf_version": "fixpack_15",
+  "vpc_name": "__NULL__",
+  "cluster_subnet_id": "__NULL__",
+  "login_subnet_id": "__NULL__",
+  "vpc_cidr": "10.241.0.0/18",
+  "vpc_cluster_private_subnets_cidr_blocks": "10.241.0.0/20",
+  "vpc_cluster_login_private_subnets_cidr_blocks": "10.241.16.0/28",
+  "dns_domain_name": "{compute = \"lsf.com\"}",
+  "dns_instance_id": "__NULL__",
+  "dns_custom_resolver_id": "__NULL__",
+  "bastion_instance": "{ image = \"ibm-ubuntu-22-04-5-minimal-amd64-3\", profile = \"cx2-4x8\" }",
+  "deployer_instance": "{ image = \"hpc-lsf-fp15-deployer-rhel810-v1\", profile = \"bx2-8x32\" }",
+  "login_instance": "[{ profile = \"bx2-2x8\", image = \"hpc-lsf-fp15-compute-rhel810-v1\" }]",
+  "management_instances": "[{ profile = \"bx2-16x64\", count = 2, image = \"hpc-lsf-fp15-rhel810-v1\" }]",
+  "static_compute_instances": "[{ profile = \"bx2-4x16\", count = 0, image = \"hpc-lsf-fp15-compute-rhel810-v1\" }]",
+  "dynamic_compute_instances": "[{ profile = \"bx2-4x16\", count = 500, image = \"hpc-lsf-fp15-compute-rhel810-v1\" }]",
+  "custom_file_shares": "[{mount_path = \"/mnt/vpcstorage/tools\", size = 100, iops = 2000 }, { mount_path = \"/mnt/vpcstorage/data\", size = 100, iops = 6000 }, { mount_path = \"/mnt/scale/tools\", nfs_share = \"\" }]",
+  "storage_security_group_id": "__NULL__",
+  "enable_ldap": "false",
+  "ldap_basedns": "lsf.com",
+  "ldap_server": "__NULL__",
+  "ldap_server_cert": "__NULL__",
+  "ldap_admin_password": "",
+  "ldap_user_name": "",
+  "ldap_user_password": "",
+  "ldap_instance": "[{ profile = \"cx2-2x4\", image = \"ibm-ubuntu-22-04-5-minimal-amd64-1\" }]",
+  "skip_iam_share_authorization_policy": "false",
+  "skip_flowlogs_s2s_auth_policy": "false",
+  "skip_kms_s2s_auth_policy": "false",
+  "skip_iam_block_storage_authorization_policy": "false",
+  "existing_bastion_instance_name": "__NULL__",
+  "existing_bastion_instance_public_ip": "__NULL__",
+  "existing_bastion_security_group_id": "__NULL__",
+  "existing_bastion_ssh_private_key": "__NULL__",
+  "enable_dedicated_host": "false",
+  "enable_cos_integration": "false",
+  "cos_instance_name": "__NULL__"
+}
diff --git a/tools/minimal-demo-prod-scripts/catalog_values_minimal_deployment.json b/tools/minimal-demo-prod-scripts/catalog_values_minimal_deployment.json
new file mode 100644
index 00000000..e554b50c
--- /dev/null
+++ b/tools/minimal-demo-prod-scripts/catalog_values_minimal_deployment.json
@@ -0,0 +1,69 @@
+{
+  "ibmcloud_api_key": "XX_API_KEY_XX",
+  "existing_resource_group": "XX_RESOURCE_GROUP_XX",
+  "zones": "[\"XX_ZONES_XX\"]",
+  "ssh_keys": "[\"XX_SSH_KEY_XX\"]",
+  "cluster_prefix": "XX_PREFIX_XX",
+  "remote_allowed_ips": "[\"XX_REMOTE_IP_XX\"]",
+  "app_center_gui_password": "XX_APP_CENTER_GUI_PASSWORD_XX",
+
+  "enable_hyperthreading": true,
+  "vpn_enabled": false,
+  "TF_VERSION": "1.9",
+  "TF_PARALLELISM": "250",
+  "key_management": "key_protect",
+  "kms_instance_name": "__NULL__",
+  "kms_key_name": "__NULL__",
+  "enable_vpc_flow_logs": false,
+  "sccwp_enable": false,
+  "app_config_plan": "basic",
+  "sccwp_service_plan": "graduated-tier",
+  "cspm_enabled": "true",
+  "observability_atracker_enable": "false",
+  "observability_atracker_target_type": "cloudlogs",
+  "observability_monitoring_enable": "false",
+  "observability_logs_enable_for_management": "false",
+  "observability_logs_enable_for_compute": "false",
+  "observability_enable_platform_logs": "false",
+  "observability_enable_metrics_routing": "false",
+  "observability_logs_retention_period": "7",
+  "observability_monitoring_on_compute_nodes_enable": "false",
+  "observability_monitoring_plan": "graduated-tier",
+  "lsf_version": "fixpack_15",
+  "vpc_name": "__NULL__",
+  "cluster_subnet_id": "__NULL__",
+  "login_subnet_id": "__NULL__",
+  "vpc_cidr": "10.241.0.0/18",
+  "vpc_cluster_private_subnets_cidr_blocks": "10.241.0.0/20",
+  "vpc_cluster_login_private_subnets_cidr_blocks": "10.241.16.0/28",
+  "dns_domain_name": "{compute = \"lsf.com\"}",
+  "dns_instance_id": "__NULL__",
+  "dns_custom_resolver_id": "__NULL__",
+  "bastion_instance": "{ image = \"ibm-ubuntu-22-04-5-minimal-amd64-3\", profile = \"cx2-4x8\" }",
+  "deployer_instance": "{ image = \"hpc-lsf-fp15-deployer-rhel810-v1\", profile = \"bx2-8x32\" }",
+  "login_instance": "[{ profile = \"bx2-2x8\", image = \"hpc-lsf-fp15-compute-rhel810-v1\" }]",
+  "management_instances": "[{ profile = \"bx2-4x16\", count = 1, image = \"hpc-lsf-fp15-rhel810-v1\" }]",
+  "static_compute_instances": "[{ profile = \"bx2-4x16\", count = 0, image = \"hpc-lsf-fp15-compute-rhel810-v1\" }]",
+  "dynamic_compute_instances": "[{ profile = \"bx2-4x16\", count = 5, image = \"hpc-lsf-fp15-compute-rhel810-v1\" }]",
+  "custom_file_shares": "[{mount_path = \"/mnt/vpcstorage/tools\", size = 10, iops = 1000 }, { mount_path = \"/mnt/vpcstorage/data\", size = 10, iops = 1000 }, { mount_path = \"/mnt/scale/tools\", nfs_share = \"\" }]",
+  "storage_security_group_id": "__NULL__",
+  "enable_ldap": "false",
+  "ldap_basedns": "lsf.com",
+  "ldap_server": "__NULL__",
+  "ldap_server_cert": "__NULL__",
+  "ldap_admin_password": "",
+  "ldap_user_name": "",
+  "ldap_user_password": "",
+  "ldap_instance": "[{ profile = \"cx2-2x4\", image = \"ibm-ubuntu-22-04-5-minimal-amd64-1\" }]",
+  "skip_iam_share_authorization_policy": "false",
+  "skip_flowlogs_s2s_auth_policy": "false",
+  "skip_kms_s2s_auth_policy": "false",
+  "skip_iam_block_storage_authorization_policy": "false",
+  "existing_bastion_instance_name": "__NULL__",
+  "existing_bastion_instance_public_ip": "__NULL__",
+  "existing_bastion_security_group_id": "__NULL__",
+  "existing_bastion_ssh_private_key": "__NULL__",
+  "enable_dedicated_host": "false",
+  "enable_cos_integration": "false",
+  "cos_instance_name": "__NULL__"
+}
diff --git a/tools/minimal-demo-prod-scripts/catalog_values_production_deployment.json b/tools/minimal-demo-prod-scripts/catalog_values_production_deployment.json
new file mode 100644
index 00000000..7e74fb23
--- /dev/null
+++ b/tools/minimal-demo-prod-scripts/catalog_values_production_deployment.json
@@ -0,0 +1,69 @@
+{
+  "ibmcloud_api_key": "XX_API_KEY_XX",
+  "existing_resource_group": "XX_RESOURCE_GROUP_XX",
+  "zones": "[\"XX_ZONES_XX\"]",
+  "ssh_keys": "[\"XX_SSH_KEY_XX\"]",
+  "cluster_prefix": "XX_PREFIX_XX",
+  "remote_allowed_ips": "[\"XX_REMOTE_IP_XX\"]",
+  "app_center_gui_password": "XX_APP_CENTER_GUI_PASSWORD_XX",
+
+  "enable_hyperthreading": true,
+  "vpn_enabled": false,
+  "TF_VERSION": "1.9",
+  "TF_PARALLELISM": "250",
+  "key_management": "key_protect",
+  "kms_instance_name": "__NULL__",
+  "kms_key_name": "__NULL__",
+  "enable_vpc_flow_logs": true,
+  "sccwp_enable": true,
+  "app_config_plan": "standardv2",
+  "sccwp_service_plan": "graduated-tier",
+  "cspm_enabled": "true",
+  "observability_atracker_enable": "true",
+  "observability_atracker_target_type": "cloudlogs",
+  "observability_monitoring_enable": "true",
+  "observability_logs_enable_for_management": "true",
+  "observability_logs_enable_for_compute": "true",
+  "observability_enable_platform_logs": "true",
+  "observability_enable_metrics_routing": "true",
+  "observability_logs_retention_period": "7",
+  "observability_monitoring_on_compute_nodes_enable": "true",
+  "observability_monitoring_plan": "graduated-tier",
+  "lsf_version": "fixpack_15",
+  "vpc_name": "__NULL__",
+  "cluster_subnet_id": "__NULL__",
+  "login_subnet_id": "__NULL__",
+  "vpc_cidr": "10.241.0.0/18",
+  "vpc_cluster_private_subnets_cidr_blocks": "10.241.0.0/20",
+  "vpc_cluster_login_private_subnets_cidr_blocks": "10.241.16.0/28",
+  "dns_domain_name": "{compute = \"lsf.com\"}",
+  "dns_instance_id": "__NULL__",
+  "dns_custom_resolver_id": "__NULL__",
+  "bastion_instance": "{ image = \"ibm-ubuntu-22-04-5-minimal-amd64-3\", profile = \"cx2-4x8\" }",
+  "deployer_instance": "{ image = \"hpc-lsf-fp15-deployer-rhel810-v1\", profile = \"bx2-8x32\" }",
+  "login_instance": "[{ profile = \"bx2-2x8\", image = \"hpc-lsf-fp15-compute-rhel810-v1\" }]",
+  "management_instances": "[{ profile = \"bx2-16x64\", count = 2, image = \"hpc-lsf-fp15-rhel810-v1\" }]",
+  "static_compute_instances": "[{ profile = \"bx2-4x16\", count = 5, image = \"hpc-lsf-fp15-compute-rhel810-v1\" }]",
+  "dynamic_compute_instances": "[{ profile = \"bx2-4x16\", count = 500, image = \"hpc-lsf-fp15-compute-rhel810-v1\" }]",
+  "custom_file_shares": "[{mount_path = \"/mnt/vpcstorage/tools\", size = 100, iops = 2000 }, { mount_path = \"/mnt/vpcstorage/data\", size = 100, iops = 6000 }, { mount_path = \"/mnt/scale/tools\", nfs_share = \"\" }]",
+  "storage_security_group_id": "__NULL__",
+  "enable_ldap": "false",
+  "ldap_basedns": "lsf.com",
+  "ldap_server": "__NULL__",
+  "ldap_server_cert": "__NULL__",
+  "ldap_admin_password": "",
+  "ldap_user_name": "",
+  "ldap_user_password": "",
+  "ldap_instance": "[{ profile = \"cx2-2x4\", image = \"ibm-ubuntu-22-04-5-minimal-amd64-1\" }]",
+  "skip_iam_share_authorization_policy": "false",
+  "skip_flowlogs_s2s_auth_policy": "false",
+  "skip_kms_s2s_auth_policy": "false",
+  "skip_iam_block_storage_authorization_policy": "false",
+  "existing_bastion_instance_name": "__NULL__",
+  "existing_bastion_instance_public_ip": "__NULL__",
+  "existing_bastion_security_group_id": "__NULL__",
+  "existing_bastion_ssh_private_key": "__NULL__",
+  "enable_dedicated_host": "false",
+  "enable_cos_integration": "true",
+  "cos_instance_name": "__NULL__"
+}
diff --git a/tools/minimal-demo-prod-scripts/cp.sh b/tools/minimal-demo-prod-scripts/cp.sh
new file mode 100755
index 00000000..e71b6f08
--- /dev/null
+++ b/tools/minimal-demo-prod-scripts/cp.sh
@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+
+source .env
+
+REGION=$(echo "$ZONES" | cut -d'-' -f1-2)
+
+if [ $# -eq 0 ]
+  then
+    echo "Pls provide cluster_prefix, i.e. cp.sh <prefix> <file> <dest=login|mgmt>"
+    exit 1
+fi
+
+CURRENT_ACCOUNT_GUID=$(ibmcloud target --output json | jq -r '.account.guid')
+if [ "$CURRENT_ACCOUNT_GUID" != "$ACCOUNT_GUID" ]
+  then
+    ibmcloud login -a cloud.ibm.com --apikey "$API_KEY" -r "$REGION" -g "$RESOURCE_GROUP"
+fi
+
+echo "target account $CURRENT_ACCOUNT_GUID"
+
+CURRENT_REGION=$(ibmcloud target --output json | jq -r '.region.name')
+if [ "$CURRENT_REGION" != "$REGION" ]
+  then
+    ibmcloud target -r "$REGION"
+fi
+echo "target region $REGION"
+
+# ibmcloud is ip $1-bastion-001-fip --output json | jq -r '. | .address'
+BASTION_IP=$(ibmcloud is ips | grep "$1"-bastion | grep 001-fip | awk '{print $2}')
+echo "Bastion IP: $BASTION_IP"
+
+# ibmcloud is instance $1-login-001 --output json | jq -r '. | .network_interfaces[0].primary_ip.address'
+LOGIN_IP=$(ibmcloud is instances | grep "$1"-login | grep 001 | awk '{print $4}')
+echo "Login IP:   $LOGIN_IP"
+
+# ibmcloud is instance $1-mgmt-1-001 --output json | jq -r '. | .network_interfaces[0].primary_ip.address'
+LSF_IP=$(ibmcloud is instances | grep "$1"-mgmt-1 | grep 001 | awk '{print $4}')
+echo "LSF IP:   $LSF_IP"
+
+if [ "$3" == "mgmt" ]
+  then
+    echo "copying $2 to LSF /mnt/vpcstorage/tools..."
+    scp -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o IdentitiesOnly=yes -J ubuntu@"$BASTION_IP" "$2" "lsfadmin@$LSF_IP:/mnt/vpcstorage/tools/$(basename "$2")"
+else
+    echo "copying $2 to LOGIN /home/lsfadmin..."
+    scp -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no -o IdentitiesOnly=yes -J ubuntu@"$BASTION_IP" "$2" "lsfadmin@$LOGIN_IP:/home/lsfadmin/$(basename "$2")"
+fi
diff --git a/tools/minimal-demo-prod-scripts/create_lsf_environment.sh b/tools/minimal-demo-prod-scripts/create_lsf_environment.sh
new file mode 100755
index 00000000..6b7af2c4
--- /dev/null
+++ b/tools/minimal-demo-prod-scripts/create_lsf_environment.sh
@@ -0,0 +1,97 @@
+#!/usr/bin/env bash
+
+# Get installed plugins once
+INSTALLED_PLUGINS=$(ibmcloud plugin list | awk 'NR>3 {print $1}')
+
+ensure_plugin() {
+  local plugin="$1"
+  if echo "$INSTALLED_PLUGINS" | grep -qw "$plugin"; then
+    echo "IBM Cloud $plugin plugin already installed."
+  else
+    echo "Installing IBM Cloud $plugin plugin..."
+    ibmcloud plugin install "$plugin" -f
+  fi
+}
+
+# Ensure required plugins
+ensure_plugin "catalogs-management"
+ensure_plugin "schematics"
+ensure_plugin "vpc-infrastructure"
+
+source .env
+
+REGION=$(echo "$ZONES" | cut -d'-' -f1-2)
+
+if [ $# -eq 0 ]; then
+  echo "Pls provide cluster_prefix, i.e. create_lsf_environment.sh <prefix>"
+  exit 1
+fi
+
+REMOTE_IP=$(curl -s https://ipv4.icanhazip.com/)
+
+sed s/XX_PREFIX_XX/"$1"/g "$TEMPLATE_FILE" | \
+sed s/XX_API_KEY_XX/"$API_KEY"/g | \
+sed s/XX_RESOURCE_GROUP_XX/"$RESOURCE_GROUP"/g | \
+sed s/XX_SSH_KEY_XX/"$SSH_KEY"/g | \
+sed s/XX_ZONES_XX/"$ZONES"/g | \
+sed s/XX_REMOTE_IP_XX/"$REMOTE_IP"/g | \
+sed s/XX_APP_CENTER_GUI_PASSWORD_XX/"$APP_CENTER_GUI_PASSWORD"/g > environment_values_"$1".json
+
+ibmcloud login -a cloud.ibm.com --apikey "$API_KEY" -r "$REGION" -g "$RESOURCE_GROUP"
+ibmcloud target -r "$REGION"
+
+# Run install and capture output
+INSTALL_LOG=$(mktemp)
+if ! ibmcloud catalog install --timeout 3600 \
+  --vl "$LSF_TILE_VERSION" \
+  --override-values environment_values_"$1".json \
+  --workspace-region "$REGION" \
+  --workspace-rg-id "$RESOURCE_GROUP" \
+  --workspace-name "$1" \
+  --workspace-tf-version 1.9 | tee "$INSTALL_LOG"; then
+  echo "Install command failed to start"
+  exit 1
+fi
+
+# Extract WORKSPACE_ID
+WORKSPACE_ID=$(ibmcloud schematics workspace list --output json \
+  | jq -r '.workspaces[] | select(.name=="'"$1"'") | .id')
+
+# Check if FAILED appears in install output
+if grep -q "FAILED" "$INSTALL_LOG"; then
+  echo "❌ Installation failed for workspace: $WORKSPACE_ID"
+  echo "Last 100 lines of logs for quick reference:"
+  ibmcloud schematics logs --id "$WORKSPACE_ID" | tail -n 100
+  echo "For full logs, check schematics workspace at: https://cloud.ibm.com/schematics/workspaces/$WORKSPACE_ID/jobs?region=$REGION"
+  exit 1
+fi
+
+# If success, print the Output IPs
+BASTION_IP=$(ibmcloud is ips | grep "$1"-bastion | grep 001-fip | awk '{print $2}')
+echo "Bastion IP: $BASTION_IP"
+
+LOGIN_IP=$(ibmcloud is instances | grep "$1"-login | grep 001 | awk '{print $4}')
+echo "Login IP:   $LOGIN_IP"
+
+LSF_IP=$(ibmcloud is instances | grep "$1"-mgmt-1 | grep 001 | awk '{print $4}')
+echo "LSF IP:     $LSF_IP"
+
+echo ""
+echo "✅ LSF environment setup completed!"
+echo ""
+echo "Next Steps:"
+echo "----------------------------------------"
+echo "Copy the job submission script to the cluster:"
+echo " ./cp.sh $1 submit.sh"
+echo ""
+echo "To get the details of workspace Environment:"
+echo " ./show.sh $1"
+echo ""
+echo "Jump to the LSF Environment:"
+echo " ./jump.sh $1"
+echo ""
+echo "Submit jobs:"
+echo " ./submit.sh"
+echo "  bjobs ..."
+echo "  bhosts ..."
+echo "----------------------------------------"
diff --git a/tools/minimal-demo-prod-scripts/destroy.sh b/tools/minimal-demo-prod-scripts/destroy.sh
new file mode 100755
index 00000000..9d69d01e
--- /dev/null
+++ b/tools/minimal-demo-prod-scripts/destroy.sh
@@ -0,0 +1,47 @@
+#!/usr/bin/env bash
+
+source .env
+
+REGION=$(echo "$ZONES" | cut -d'-' -f1-2)
+
+if [ $# -eq 0 ]
+  then
+    echo "Pls provide cluster_prefix, i.e. destroy.sh <prefix>"
+    exit 1
+fi
+
+CURRENT_ACCOUNT_GUID=$(ibmcloud target --output json | jq -r '.account.guid')
+if [ "$CURRENT_ACCOUNT_GUID" != "$ACCOUNT_GUID" ]
+  then
+    ibmcloud login -a cloud.ibm.com --apikey "$API_KEY" -r "$REGION" -g "$RESOURCE_GROUP"
+fi
+
+echo "target account $CURRENT_ACCOUNT_GUID"
+
+CURRENT_REGION=$(ibmcloud target --output json | jq -r '.region.name')
+if [ "$CURRENT_REGION" != "$REGION" ]
+  then
+    ibmcloud target -r "$REGION"
+fi
+echo "target region $REGION"
+
+echo "finding schematics workspace..."
+# Extract WORKSPACE_ID
+WORKSPACE_ID=$(ibmcloud schematics workspace list --output json \
+  | jq -r '.workspaces[] | select(.name=="'"$1"'") | .id')
+
+ibmcloud schematics workspace get --id "$WORKSPACE_ID"
+
+read -r -p "Do you want to destroy? (yes/no) " yn
+
+case $yn in
+       yes ) echo ok, we will proceed;;
+       no ) echo exiting...;
+               exit;;
+       * ) echo invalid response;
+               exit 1;;
+esac
+
+rm environment_values_"$1".json
+
+ibmcloud schematics destroy --id "$WORKSPACE_ID" -f
diff --git a/tools/minimal-demo-prod-scripts/jump.sh b/tools/minimal-demo-prod-scripts/jump.sh
new file mode 100755
index 00000000..335878fe
--- /dev/null
+++ b/tools/minimal-demo-prod-scripts/jump.sh
@@ -0,0 +1,38 @@
+#!/usr/bin/env bash
+
+source .env
+
+REGION=$(echo "$ZONES" | cut -d'-' -f1-2)
+
+if [ $# -eq 0 ]
+  then
+    echo "Pls provide cluster_prefix, i.e. jump.sh <prefix>"
+    exit 1
+fi
+
+CURRENT_ACCOUNT_GUID=$(ibmcloud target --output json | jq -r '.account.guid')
+if [ "$CURRENT_ACCOUNT_GUID" != "$ACCOUNT_GUID" ]
+  then
+    ibmcloud login -a cloud.ibm.com --apikey "$API_KEY" -r "$REGION" -g "$RESOURCE_GROUP"
+fi
+
+echo "target account $CURRENT_ACCOUNT_GUID"
+
+CURRENT_REGION=$(ibmcloud target --output json | jq -r '.region.name')
+if [ "$CURRENT_REGION" != "$REGION" ]
+  then
+    ibmcloud target -r "$REGION"
+fi
+echo "target region $REGION"
+
+BASTION_IP=$(ibmcloud is ips | grep "$1"-bastion | grep 001-fip | awk '{print $2}')
+echo "Bastion IP: $BASTION_IP"
+
+LOGIN_IP=$(ibmcloud is instances | grep "$1"-login | grep 001 | awk '{print $4}')
+echo "Login IP:   $LOGIN_IP"
+
+LSF_IP=$(ibmcloud is instances | grep "$1"-mgmt-1 | grep 001 | awk '{print $4}')
+echo "LSF IP:   $LSF_IP"
+
+echo "Jumping to Login Node..."
+ssh -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -J ubuntu@"$BASTION_IP" lsfadmin@"$LOGIN_IP"
diff --git a/tools/minimal-demo-prod-scripts/show.sh b/tools/minimal-demo-prod-scripts/show.sh
new file mode 100755
index 00000000..69c5e3b7
--- /dev/null
+++ b/tools/minimal-demo-prod-scripts/show.sh
@@ -0,0 +1,31 @@
+#!/usr/bin/env bash
+
+source .env
+
+REGION=$(echo "$ZONES" | cut -d'-' -f1-2)
+
+if [ $# -eq 0 ]
+  then
+    echo "Pls provide cluster_prefix, i.e. show.sh <prefix>"
+    exit 1
+fi
+
+CURRENT_ACCOUNT_GUID=$(ibmcloud target --output json | jq -r '.account.guid')
+if [ "$CURRENT_ACCOUNT_GUID" != "$ACCOUNT_GUID" ]
+  then
+    ibmcloud login -a cloud.ibm.com --apikey "$API_KEY" -r "$REGION" -g "$RESOURCE_GROUP"
+fi
+
+echo "target account $CURRENT_ACCOUNT_GUID"
+
+CURRENT_REGION=$(ibmcloud target --output json | jq -r '.region.name')
+if [ "$CURRENT_REGION" != "$REGION" ]
+  then
+    ibmcloud target -r "$REGION"
+fi
+echo "target region $REGION"
+
+echo "finding schematics workspace..."
+WORKSPACE_ID=$(ibmcloud schematics workspace list | grep "$1" | awk '{ print $2 }')
+
+ibmcloud schematics workspace get --id "$WORKSPACE_ID"
diff --git a/tools/minimal-demo-prod-scripts/submit.sh b/tools/minimal-demo-prod-scripts/submit.sh
new file mode 100755
index 00000000..e79a5a70
--- /dev/null
+++ b/tools/minimal-demo-prod-scripts/submit.sh
@@ -0,0 +1,14 @@
+#!/usr/bin/env bash
+
+# Sample Job Submission
+# ---------------------
+# This example submits a simple LSF job that:
+#   - Requests 8 cores (-n 8)
+#   - Runs the command: sleep 30
+#
+# You can modify the command (e.g., sleep 30) or job options (-n 8)
+# to suit your own workload requirements.
+
+CMD="bsub -n 8 sleep 30"
+echo "Running: $CMD"
+$CMD