quorate/terraform/internal/zitadel/outputs.tf

output "zitadel_org_id" {
  description = "ID of the primary service ZITADEL organization."
  value       = zitadel_org.primary.id
}

output "zitadel_org_primary_domain" {
  description = "Primary domain assigned by ZITADEL for the primary service organization."
  value       = zitadel_org.primary.primary_domain
}

output "zitadel_project_id" {
  description = "ID of the ZITADEL project that groups service clients."
  value       = zitadel_project.services.id
}

output "forgejo_oidc_authentication_name" {
  description = "Authentication source name to use in Forgejo."
  value       = var.forgejo_oauth_provider_name
}

output "forgejo_oidc_discovery_url" {
  description = "OpenID Connect discovery URL for Forgejo."
  value       = "https://${var.zitadel_domain}/.well-known/openid-configuration"
}

output "forgejo_oidc_redirect_uri" {
  description = "Redirect URI registered in the Forgejo ZITADEL application."
  value       = local.forgejo_oidc_redirect_uri
}

output "forgejo_oidc_vault_secret_path" {
  description = "Vault KV v2 path containing Forgejo's ZITADEL OIDC client material."
  value       = "${var.vault_kv_mount}/data/${var.forgejo_oidc_vault_path}"
}

output "forgejo_zitadel_roles_claim" {
  description = "Flat ZITADEL custom claim reserved for Forgejo group/admin mapping."
  value       = local.forgejo_roles_claim
}

output "forgejo_zitadel_role_keys" {
  description = "ZITADEL project role keys used to authorize Forgejo sign-in."
  value       = local.forgejo_zitadel_role_keys
}

output "frigate_oauth2_proxy_redirect_uri" {
  description = "Redirect URI registered in the Frigate ZITADEL application."
  value       = local.frigate_oauth2_proxy_redirect_uri
}

output "frigate_oauth2_client_id" {
  description = "Client ID generated for the Frigate ZITADEL application."
  value       = nonsensitive(zitadel_application_oidc.frigate.client_id)
}

output "frigate_zitadel_role_keys" {
  description = "ZITADEL project role keys used for Frigate role mapping."
  value       = local.frigate_zitadel_role_keys
}

output "forgejo_public_oidc_redirect_uri" {
  description = "Redirect URI registered in the public Forgejo ZITADEL application."
  value       = local.forgejo_public_oidc_redirect_uri
}

output "forgejo_public_oidc_vault_secret_path" {
  description = "Vault KV v2 path containing public Forgejo's ZITADEL OIDC client material."
  value       = "${var.vault_kv_mount}/data/${var.forgejo_public_oidc_vault_path}"
}

output "grafana_oidc_redirect_uri" {
  description = "Redirect URI registered in the Grafana ZITADEL application."
  value       = local.grafana_oidc_redirect_uri
}

output "grafana_oidc_vault_secret_path" {
  description = "Vault KV v2 path containing Grafana's ZITADEL OIDC client material."
  value       = "${var.vault_kv_mount}/data/${var.grafana_oidc_vault_path}"
}

output "grafana_zitadel_role_keys" {
  description = "ZITADEL project role keys used for Grafana role mapping."
  value       = local.grafana_zitadel_role_keys
}

output "longhorn_oauth2_proxy_redirect_uri" {
  description = "Redirect URI registered in the Longhorn ZITADEL application."
  value       = local.longhorn_oauth2_proxy_redirect_uri
}

output "longhorn_oauth2_proxy_vault_secret_path" {
  description = "Vault KV v2 path containing Longhorn's oauth2-proxy OIDC client material."
  value       = "${var.vault_kv_mount}/data/${var.longhorn_oauth2_proxy_vault_path}"
}

output "longhorn_zitadel_role_keys" {
  description = "ZITADEL project role keys used to authorize Longhorn UI access."
  value       = local.longhorn_zitadel_role_keys
}

output "stalwart_zitadel_role_keys" {
  description = "ZITADEL project role keys used to authorize Stalwart administration."
  value       = local.stalwart_zitadel_role_keys
}

output "stalwart_oidc_vault_secret_path" {
  description = "Vault KV v2 path containing Stalwart's ZITADEL resource-server metadata."
  value       = "${var.vault_kv_mount}/data/${var.stalwart_oidc_vault_path}"
}

output "stalwart_account_webui_client_id" {
  description = "Generated public OIDC client ID embedded in the Stalwart account WebUI build."
  value       = nonsensitive(zitadel_application_oidc.stalwart_account_webui.client_id)
}

output "quay_oidc_redirect_uri" {
  description = "Redirect URI registered in the Quay ZITADEL application."
  value       = local.quay_oidc_redirect_uri
}

output "quay_oidc_vault_secret_path" {
  description = "Vault KV v2 path containing Quay's ZITADEL OIDC client material."
  value       = "${var.vault_kv_mount}/data/${var.quay_oidc_vault_path}"
}

output "quay_zitadel_role_keys" {
  description = "ZITADEL project role keys used to authorize Quay sign-in."
  value       = local.quay_zitadel_role_keys
}