ce7cb702218693d08ea6d83464d2457c9250027c

terraform/internal/zitadel/outputs.tf

@@ -0,0 +1,129 @@
+output "zitadel_org_id" {
+  description = "ID of the primary service ZITADEL organization."
+  value       = zitadel_org.primary.id
+}
+
+output "zitadel_org_primary_domain" {
+  description = "Primary domain assigned by ZITADEL for the primary service organization."
+  value       = zitadel_org.primary.primary_domain
+}
+
+output "zitadel_project_id" {
+  description = "ID of the ZITADEL project that groups service clients."
+  value       = zitadel_project.services.id
+}
+
+output "forgejo_oidc_authentication_name" {
+  description = "Authentication source name to use in Forgejo."
+  value       = var.forgejo_oauth_provider_name
+}
+
+output "forgejo_oidc_discovery_url" {
+  description = "OpenID Connect discovery URL for Forgejo."
+  value       = "https://${var.zitadel_domain}/.well-known/openid-configuration"
+}
+
+output "forgejo_oidc_redirect_uri" {
+  description = "Redirect URI registered in the Forgejo ZITADEL application."
+  value       = local.forgejo_oidc_redirect_uri
+}
+
+output "forgejo_oidc_vault_secret_path" {
+  description = "Vault KV v2 path containing Forgejo's ZITADEL OIDC client material."
+  value       = "${var.vault_kv_mount}/data/${var.forgejo_oidc_vault_path}"
+}
+
+output "forgejo_zitadel_roles_claim" {
+  description = "Flat ZITADEL custom claim reserved for Forgejo group/admin mapping."
+  value       = local.forgejo_roles_claim
+}
+
+output "forgejo_zitadel_role_keys" {
+  description = "ZITADEL project role keys used to authorize Forgejo sign-in."
+  value       = local.forgejo_zitadel_role_keys
+}
+
+output "frigate_oauth2_proxy_redirect_uri" {
+  description = "Redirect URI registered in the Frigate ZITADEL application."
+  value       = local.frigate_oauth2_proxy_redirect_uri
+}
+
+output "frigate_oauth2_client_id" {
+  description = "Client ID generated for the Frigate ZITADEL application."
+  value       = nonsensitive(zitadel_application_oidc.frigate.client_id)
+}
+
+output "frigate_zitadel_role_keys" {
+  description = "ZITADEL project role keys used for Frigate role mapping."
+  value       = local.frigate_zitadel_role_keys
+}
+
+output "forgejo_public_oidc_redirect_uri" {
+  description = "Redirect URI registered in the public Forgejo ZITADEL application."
+  value       = local.forgejo_public_oidc_redirect_uri
+}
+
+output "forgejo_public_oidc_vault_secret_path" {
+  description = "Vault KV v2 path containing public Forgejo's ZITADEL OIDC client material."
+  value       = "${var.vault_kv_mount}/data/${var.forgejo_public_oidc_vault_path}"
+}
+
+output "grafana_oidc_redirect_uri" {
+  description = "Redirect URI registered in the Grafana ZITADEL application."
+  value       = local.grafana_oidc_redirect_uri
+}
+
+output "grafana_oidc_vault_secret_path" {
+  description = "Vault KV v2 path containing Grafana's ZITADEL OIDC client material."
+  value       = "${var.vault_kv_mount}/data/${var.grafana_oidc_vault_path}"
+}
+
+output "grafana_zitadel_role_keys" {
+  description = "ZITADEL project role keys used for Grafana role mapping."
+  value       = local.grafana_zitadel_role_keys
+}
+
+output "longhorn_oauth2_proxy_redirect_uri" {
+  description = "Redirect URI registered in the Longhorn ZITADEL application."
+  value       = local.longhorn_oauth2_proxy_redirect_uri
+}
+
+output "longhorn_oauth2_proxy_vault_secret_path" {
+  description = "Vault KV v2 path containing Longhorn's oauth2-proxy OIDC client material."
+  value       = "${var.vault_kv_mount}/data/${var.longhorn_oauth2_proxy_vault_path}"
+}
+
+output "longhorn_zitadel_role_keys" {
+  description = "ZITADEL project role keys used to authorize Longhorn UI access."
+  value       = local.longhorn_zitadel_role_keys
+}
+
+output "stalwart_zitadel_role_keys" {
+  description = "ZITADEL project role keys used to authorize Stalwart administration."
+  value       = local.stalwart_zitadel_role_keys
+}
+
+output "stalwart_oidc_vault_secret_path" {
+  description = "Vault KV v2 path containing Stalwart's ZITADEL resource-server metadata."
+  value       = "${var.vault_kv_mount}/data/${var.stalwart_oidc_vault_path}"
+}
+
+output "stalwart_account_webui_client_id" {
+  description = "Generated public OIDC client ID embedded in the Stalwart account WebUI build."
+  value       = nonsensitive(zitadel_application_oidc.stalwart_account_webui.client_id)
+}
+
+output "quay_oidc_redirect_uri" {
+  description = "Redirect URI registered in the Quay ZITADEL application."
+  value       = local.quay_oidc_redirect_uri
+}
+
+output "quay_oidc_vault_secret_path" {
+  description = "Vault KV v2 path containing Quay's ZITADEL OIDC client material."
+  value       = "${var.vault_kv_mount}/data/${var.quay_oidc_vault_path}"
+}
+
+output "quay_zitadel_role_keys" {
+  description = "ZITADEL project role keys used to authorize Quay sign-in."
+  value       = local.quay_zitadel_role_keys
+}