Chef Bash Resource without mangling interpolated variables

recipe.rb

# Wrong way:
bash "Add Icinga Web 2 User" do
  code <<-EOH
  /usr/bin/psql -U icingaweb2 -d icingaweb2 -h localhost -p 5432 \
    -c "INSERT INTO icingaweb_user (name, active, password_hash) \
    VALUES ('#{username}', 1, '#{hash_pw}') ON CONFLICT (name) \
    DO UPDATE SET password_hash = '#{hash_pw}' \
    WHERE icingaweb_user.name = '#{username}';"
  EOH
  sensitive true
end

# Right way:

bash "Add Icinga Web 2 User" do
  code <<-EOH
  /usr/bin/psql -U icingaweb2 -d icingaweb2 -h localhost -p 5432 \
    <<'EOF'
    INSERT INTO icingaweb_user (name, active, password_hash) \
    VALUES ('#{username}', 1, '#{hash_pw}') ON CONFLICT (name) \
    DO UPDATE SET password_hash = '#{hash_pw}' \
    WHERE icingaweb_user.name = '#{username}';
    EOF
  EOH
  sensitive true
end