variable "github_repo" {
  description = "The github organization/repo where this repository is reachable"
  type        = string
}

variable "talos_version" {
  description = "Version of everything talos to use"
  type        = string
}

variable "nodes" {
  description = "A description of all nodes, used to generate initial images"
  type        = map(object({ local_ip = string, disk_selector = map(any), extensions = optional(list(string), []), kernel_args = optional(list(string), []), network_devices = list(string), tags = list(string), generate_uuid = bool }))
}

variable "bootstrap_node" {
  description = "The node to bootstrap from"
  type        = string
}

variable "cluster_service_account_issuer" {
  description = "Issuer URL to put in service account tokens for workload identity"
  type        = string
}

variable "mayastor_io_engine_nodes" {
  description = "The local IPs of nodes that should be marked for mayastor io-engine"
  type        = list(string)
}

variable "kms_endpoint" {
  description = "Endpoint for the Talos KMS service"
  type        = string
}

variable "stable_secret" {
  description = "IPv6 stable secret for RFC7217"
  type        = string
}

variable "dns_loadbalancer_domain" {
  description = "Domain used for DNS load balancing the nodes"
  type        = string
}

variable "tailnet_oauth_client_id" {
  description = "OAuth client ID for creating tailnet key"
  type        = string
}
variable "tailnet_oauth_client_secret" {
  description = "OAuth client secret for creating tailnet key"
  type        = string
}

variable "cluster_oidc_issuer_host" {
  description = "The issuer hostname to use for cluster OIDC authentication"
  type        = string
}
variable "cluster_oidc_client_id" {
  description = "The client ID to use for cluster OIDC authentication"
  type        = string
}
variable "cluster_oidc_client_secret" {
  description = "The client secret to use for cluster OIDC authentication. Only currently used in the justfile"
  type        = string
  sensitive   = true
}

variable "image_cache_ip" {
  description = "The IP address the image cache will be served on"
  type        = string
  default     = ""
}

variable "cloudflare_zone" {
  description = "Name of the cloudflare zone"
  type        = string
}

variable "cloudflare_token" {
  description = "Token for Cloudflare API"
  type        = string
}

variable "tailnet_name" {
  description = "Name of the tailnet"
  type        = string
}

variable "pgp_commit_keys" {
  description = "PGP keys for verifying source commits"
  type        = string
}

variable "ssh_commit_keys" {
  description = "SSH keys for verifying source commits"
  type        = string
}

variable "flux_ssh_private_key" {
  description = "Key used by Flux to access the repo"
  type        = string
}

variable "flux_sops_age_key" {
  description = "Key used by Flux to decrypt SOPS-encrypted resources"
  type        = string
}

variable "restic_remote_password" {
  description = "Password for remote restic repo"
  type        = string
  sensitive   = true
}

variable "lets_encrypt_email" {
  description = "Email to use for Lets Encrypt certs"
  type        = string
}

variable "services_hostname_suffix" {
  description = "Domain suffix common to all services gateway routes"
  type        = string
}