variables.tf

variable "namespace" {
  type        = string
  default     = "meshcloud"
  description = "name of the namespace where the replicator and metering components should be deployed"
}

variable "metering_enabled" {
  type    = bool
  default = true
}

variable "existing_clusterrole_name_replicator" {
  type        = string
  description = "Name of an existing ClusterRole to use for replicator instead of creating a new one. If empty, a new ClusterRole will be created."
  default     = ""
}

variable "kubernetes_name_suffix_replicator" {
  type        = string
  description = "Suffix to append to ClusterRole and ClusterRoleBinding names to support multiple replicator instances"
  default     = ""
}

variable "existing_clusterrole_name_metering" {
  type        = string
  description = "Name of an existing ClusterRole to use for metering instead of creating a new one. If empty, a new ClusterRole will be created."
  default     = ""
}

variable "kubernetes_name_suffix_metering" {
  type        = string
  description = "Suffix to append to ClusterRole and ClusterRoleBinding names to support multiple metering instances"
  default     = ""
}

variable "scope" {
  type        = string
  description = "The scope of the service principal. The scope is usually the id of the aks subscription"
}

variable "metering_additional_rules" {
  type = list(object({
    api_groups        = list(string)
    resources         = list(string)
    verbs             = list(string)
    resource_names    = optional(list(string))
    non_resource_urls = optional(list(string))
  }))
  default = []
}

variable "replicator_enabled" {
  type    = bool
  default = true
}

variable "replicator_additional_rules" {
  type = list(object({
    api_groups        = list(string)
    resources         = list(string)
    verbs             = list(string)
    resource_names    = optional(list(string))
    non_resource_urls = optional(list(string))
  }))
  default = []
}

variable "service_principal_name" {
  type        = string
  description = "Display name of the replicator service principal."
}

variable "create_password" {
  type        = bool
  description = "Create a password for the enterprise application."
}

variable "workload_identity_federation" {
  default     = null
  description = "Enable workload identity federation instead of using a password by providing these additional settings. Usually you should receive the required settings when attempting to configure a platform with workload identity federation in meshStack."
  type        = object({ issuer = string, access_subject = string })
}

variable "application_owners" {
  type        = list(string)
  description = "List of user principals that should be added as owners to the replicator service principal."
  default     = []
}