outputs.tf

# Google Workload Identity Federation outputs
output "workload_identity_pool_name" {
  description = "The full name of the Workload Identity Pool."
  value       = google_iam_workload_identity_pool.this.name
}

output "workload_identity_pool_id" {
  description = "The ID of the Workload Identity Pool."
  value       = google_iam_workload_identity_pool.this.workload_identity_pool_id
}

output "workload_identity_pool_provider_id" {
  description = "The ID of the Workload Identity Provider."
  value       = google_iam_workload_identity_pool_provider.this.workload_identity_pool_provider_id
}

output "workload_identity_provider" {
  description = "The full resource path of the Workload Identity Provider (for use with google-github-actions/auth)."
  value       = local.workload_identity_provider
}

output "service_account_email" {
  description = "The email of the Service Account used."
  value       = local.sa_email
}

output "principal_set" {
  description = "The principal sets string used for IAM bindings."
  value       = local.principal_sets
}

output "attribute_condition" {
  description = "The attribute condition used for the Workload Identity Provider."
  value       = local.attribute_condition
}

# GitHub Actions variables outputs
output "github_actions_variables" {
  description = "The GitHub Actions variables created by this module."
  value = {
    (var.github_gcp_wif_project_id_variable_name)                 = data.google_project.project.project_id,
    (var.github_gcp_wif_service_account_email_variable_name)      = local.sa_email
    (var.github_gcp_wif_workload_identity_provider_variable_name) = local.workload_identity_provider
  }
}

# Secret manager outputs
output "secret_names" {
  description = "Map of original secret names to their formatted names."
  value       = local.formatted_secret_names
}

output "secret_gcp_project_id" {
  description = "The GCP project ID where secrets are stored."
  value       = local.secret_gcp_project_id
}

output "secret_created" {
  description = "The names and IDs of the secrets created by this module."
  value = {
    for k, v in google_secret_manager_secret.secrets : k => {
      name = v.name
      id   = v.id
    }
  }
}

output "secret_ids" {
  description = "Map of original secret names to their Secret Manager secret IDs."
  value = {
    for name, formatted_name in local.formatted_secret_names :
    name => google_secret_manager_secret.secrets[name].id
  }
}