129 lines
4.6 KiB
HCL
129 lines
4.6 KiB
HCL
output "zitadel_org_id" {
|
|
description = "ID of the primary service ZITADEL organization."
|
|
value = zitadel_org.primary.id
|
|
}
|
|
|
|
output "zitadel_org_primary_domain" {
|
|
description = "Primary domain assigned by ZITADEL for the primary service organization."
|
|
value = zitadel_org.primary.primary_domain
|
|
}
|
|
|
|
output "zitadel_project_id" {
|
|
description = "ID of the ZITADEL project that groups service clients."
|
|
value = zitadel_project.services.id
|
|
}
|
|
|
|
output "forgejo_oidc_authentication_name" {
|
|
description = "Authentication source name to use in Forgejo."
|
|
value = var.forgejo_oauth_provider_name
|
|
}
|
|
|
|
output "forgejo_oidc_discovery_url" {
|
|
description = "OpenID Connect discovery URL for Forgejo."
|
|
value = "https://${var.zitadel_domain}/.well-known/openid-configuration"
|
|
}
|
|
|
|
output "forgejo_oidc_redirect_uri" {
|
|
description = "Redirect URI registered in the Forgejo ZITADEL application."
|
|
value = local.forgejo_oidc_redirect_uri
|
|
}
|
|
|
|
output "forgejo_oidc_vault_secret_path" {
|
|
description = "Vault KV v2 path containing Forgejo's ZITADEL OIDC client material."
|
|
value = "${var.vault_kv_mount}/data/${var.forgejo_oidc_vault_path}"
|
|
}
|
|
|
|
output "forgejo_zitadel_roles_claim" {
|
|
description = "Flat ZITADEL custom claim reserved for Forgejo group/admin mapping."
|
|
value = local.forgejo_roles_claim
|
|
}
|
|
|
|
output "forgejo_zitadel_role_keys" {
|
|
description = "ZITADEL project role keys used to authorize Forgejo sign-in."
|
|
value = local.forgejo_zitadel_role_keys
|
|
}
|
|
|
|
output "frigate_oauth2_proxy_redirect_uri" {
|
|
description = "Redirect URI registered in the Frigate ZITADEL application."
|
|
value = local.frigate_oauth2_proxy_redirect_uri
|
|
}
|
|
|
|
output "frigate_oauth2_client_id" {
|
|
description = "Client ID generated for the Frigate ZITADEL application."
|
|
value = nonsensitive(zitadel_application_oidc.frigate.client_id)
|
|
}
|
|
|
|
output "frigate_zitadel_role_keys" {
|
|
description = "ZITADEL project role keys used for Frigate role mapping."
|
|
value = local.frigate_zitadel_role_keys
|
|
}
|
|
|
|
output "forgejo_public_oidc_redirect_uri" {
|
|
description = "Redirect URI registered in the public Forgejo ZITADEL application."
|
|
value = local.forgejo_public_oidc_redirect_uri
|
|
}
|
|
|
|
output "forgejo_public_oidc_vault_secret_path" {
|
|
description = "Vault KV v2 path containing public Forgejo's ZITADEL OIDC client material."
|
|
value = "${var.vault_kv_mount}/data/${var.forgejo_public_oidc_vault_path}"
|
|
}
|
|
|
|
output "grafana_oidc_redirect_uri" {
|
|
description = "Redirect URI registered in the Grafana ZITADEL application."
|
|
value = local.grafana_oidc_redirect_uri
|
|
}
|
|
|
|
output "grafana_oidc_vault_secret_path" {
|
|
description = "Vault KV v2 path containing Grafana's ZITADEL OIDC client material."
|
|
value = "${var.vault_kv_mount}/data/${var.grafana_oidc_vault_path}"
|
|
}
|
|
|
|
output "grafana_zitadel_role_keys" {
|
|
description = "ZITADEL project role keys used for Grafana role mapping."
|
|
value = local.grafana_zitadel_role_keys
|
|
}
|
|
|
|
output "longhorn_oauth2_proxy_redirect_uri" {
|
|
description = "Redirect URI registered in the Longhorn ZITADEL application."
|
|
value = local.longhorn_oauth2_proxy_redirect_uri
|
|
}
|
|
|
|
output "longhorn_oauth2_proxy_vault_secret_path" {
|
|
description = "Vault KV v2 path containing Longhorn's oauth2-proxy OIDC client material."
|
|
value = "${var.vault_kv_mount}/data/${var.longhorn_oauth2_proxy_vault_path}"
|
|
}
|
|
|
|
output "longhorn_zitadel_role_keys" {
|
|
description = "ZITADEL project role keys used to authorize Longhorn UI access."
|
|
value = local.longhorn_zitadel_role_keys
|
|
}
|
|
|
|
output "stalwart_zitadel_role_keys" {
|
|
description = "ZITADEL project role keys used to authorize Stalwart administration."
|
|
value = local.stalwart_zitadel_role_keys
|
|
}
|
|
|
|
output "stalwart_oidc_vault_secret_path" {
|
|
description = "Vault KV v2 path containing Stalwart's ZITADEL resource-server metadata."
|
|
value = "${var.vault_kv_mount}/data/${var.stalwart_oidc_vault_path}"
|
|
}
|
|
|
|
output "stalwart_account_webui_client_id" {
|
|
description = "Generated public OIDC client ID embedded in the Stalwart account WebUI build."
|
|
value = nonsensitive(zitadel_application_oidc.stalwart_account_webui.client_id)
|
|
}
|
|
|
|
output "quay_oidc_redirect_uri" {
|
|
description = "Redirect URI registered in the Quay ZITADEL application."
|
|
value = local.quay_oidc_redirect_uri
|
|
}
|
|
|
|
output "quay_oidc_vault_secret_path" {
|
|
description = "Vault KV v2 path containing Quay's ZITADEL OIDC client material."
|
|
value = "${var.vault_kv_mount}/data/${var.quay_oidc_vault_path}"
|
|
}
|
|
|
|
output "quay_zitadel_role_keys" {
|
|
description = "ZITADEL project role keys used to authorize Quay sign-in."
|
|
value = local.quay_zitadel_role_keys
|
|
}
|