feat: added adminuser and certificate_base64 outputs and updated the logic to always output hostname and port details (#396)

Author: shemau

README.md

@@ -115,12 +115,14 @@ To attach access management tags to resources in this module, you need the follo
 
 | Name | Description |
 |------|-------------|
+| <a name="output_adminuser"></a> [adminuser](#output\_adminuser) | Database admin user name |
 | <a name="output_cbr_rule_ids"></a> [cbr\_rule\_ids](#output\_cbr\_rule\_ids) | CBR rule ids created to restrict Postgresql |
+| <a name="output_certificate_base64"></a> [certificate\_base64](#output\_certificate\_base64) | Database connection certificate |
 | <a name="output_crn"></a> [crn](#output\_crn) | Postgresql instance crn |
 | <a name="output_guid"></a> [guid](#output\_guid) | Postgresql instance guid |
-| <a name="output_hostname"></a> [hostname](#output\_hostname) | Database hostname. Only contains value when var.service\_credential\_names or var.users are set. |
+| <a name="output_hostname"></a> [hostname](#output\_hostname) | Database connection hostname |
 | <a name="output_id"></a> [id](#output\_id) | Postgresql instance id |
-| <a name="output_port"></a> [port](#output\_port) | Database port. Only contains value when var.service\_credential\_names or var.users are set. |
+| <a name="output_port"></a> [port](#output\_port) | Database connection port |
 | <a name="output_service_credentials_json"></a> [service\_credentials\_json](#output\_service\_credentials\_json) | Service credentials json map |
 | <a name="output_service_credentials_object"></a> [service\_credentials\_object](#output\_service\_credentials\_object) | Service credentials object |
 | <a name="output_version"></a> [version](#output\_version) | Postgresql instance version |

examples/basic/outputs.tf

@@ -10,3 +10,24 @@ output "version" {
   description = "Postgresql instance version"
   value       = module.postgresql_db.version
 }
+
+output "adminuser" {
+  description = "Database admin user name"
+  value       = module.postgresql_db.adminuser
+}
+
+output "hostname" {
+  description = "Database connection hostname"
+  value       = module.postgresql_db.hostname
+}
+
+output "port" {
+  description = "Database connection port"
+  value       = module.postgresql_db.port
+}
+
+output "certificate_base64" {
+  description = "Database connection certificate"
+  value       = module.postgresql_db.certificate_base64
+  sensitive   = true
+}

main.tf

@@ -247,9 +247,8 @@ locals {
 }
 
 data "ibm_database_connection" "database_connection" {
-  count         = length(var.users) > 0 ? 1 : 0
   endpoint_type = var.service_endpoints
   deployment_id = ibm_database.postgresql_db.id
-  user_id       = var.users[0].name
-  user_type     = var.users[0].type
+  user_id       = ibm_database.postgresql_db.adminuser
+  user_type     = "database"
 }

modules/fscloud/README.md

@@ -56,10 +56,12 @@ No resources.
 
 | Name | Description |
 |------|-------------|
+| <a name="output_adminuser"></a> [adminuser](#output\_adminuser) | Database admin user name |
+| <a name="output_certificate_base64"></a> [certificate\_base64](#output\_certificate\_base64) | Database connection certificate |
 | <a name="output_crn"></a> [crn](#output\_crn) | Postgresql instance crn |
 | <a name="output_guid"></a> [guid](#output\_guid) | Postgresql instance guid |
-| <a name="output_hostname"></a> [hostname](#output\_hostname) | Postgresql instance hostname |
+| <a name="output_hostname"></a> [hostname](#output\_hostname) | Database connection hostname |
 | <a name="output_id"></a> [id](#output\_id) | Postgresql instance id |
-| <a name="output_port"></a> [port](#output\_port) | Postgresql instance port |
+| <a name="output_port"></a> [port](#output\_port) | Database connection port |
 | <a name="output_version"></a> [version](#output\_version) | Postgresql instance version |
 <!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->

modules/fscloud/outputs.tf

@@ -22,12 +22,23 @@ output "crn" {
   value       = module.postgresql_db.crn
 }
 
+output "adminuser" {
+  description = "Database admin user name"
+  value       = module.postgresql_db.adminuser
+}
+
 output "hostname" {
-  description = "Postgresql instance hostname"
+  description = "Database connection hostname"
   value       = module.postgresql_db.hostname
 }
 
 output "port" {
-  description = "Postgresql instance port"
+  description = "Database connection port"
   value       = module.postgresql_db.port
 }
+
+output "certificate_base64" {
+  description = "Database connection certificate"
+  value       = module.postgresql_db.certificate_base64
+  sensitive   = true
+}

outputs.tf

@@ -39,12 +39,23 @@ output "cbr_rule_ids" {
   value       = module.cbr_rule[*].rule_id
 }
 
+output "adminuser" {
+  description = "Database admin user name"
+  value       = ibm_database.postgresql_db.adminuser
+}
+
 output "hostname" {
-  description = "Database hostname. Only contains value when var.service_credential_names or var.users are set."
-  value       = length(var.service_credential_names) > 0 ? nonsensitive(ibm_resource_key.service_credentials[keys(var.service_credential_names)[0]].credentials["connection.postgres.hosts.0.hostname"]) : length(var.users) > 0 ? data.ibm_database_connection.database_connection[0].postgres[0].hosts[0].hostname : null
+  description = "Database connection hostname"
+  value       = data.ibm_database_connection.database_connection.postgres[0].hosts[0].hostname
 }
 
 output "port" {
-  description = "Database port. Only contains value when var.service_credential_names or var.users are set."
-  value       = length(var.service_credential_names) > 0 ? nonsensitive(ibm_resource_key.service_credentials[keys(var.service_credential_names)[0]].credentials["connection.postgres.hosts.0.port"]) : length(var.users) > 0 ? data.ibm_database_connection.database_connection[0].postgres[0].hosts[0].port : null
+  description = "Database connection port"
+  value       = data.ibm_database_connection.database_connection.postgres[0].hosts[0].port
+}
+
+output "certificate_base64" {
+  description = "Database connection certificate"
+  value       = data.ibm_database_connection.database_connection.postgres[0].certificate[0].certificate_base64
+  sensitive   = true
 }