output "kubeconfig" {
  description = "Kubeconfig for the bootstrapped Talos cluster."
  value       = talos_cluster_kubeconfig.cluster.kubeconfig_raw
  sensitive   = true
}

output "talosconfig" {
  description = "Raw talosconfig for use with talosctl."
  value       = data.talos_client_configuration.cluster.talos_config
  sensitive   = true
}

output "talos_nodes" {
  description = "Talos node addresses configured by this module."
  value       = [for node in var.nodes : node.ip]
}

output "argocd_namespace" {
  description = "Namespace containing Argo CD."
  value       = helm_release.argocd.namespace
}

output "argocd_server_service" {
  description = "Internal Argo CD server service address."
  value       = "argocd-server.${helm_release.argocd.namespace}.svc.cluster.local:443"
}

output "argocd_cli_port_forward_command" {
  description = "Command to connect argocd CLI to the internal Argo CD server."
  value       = "argocd login --port-forward --port-forward-namespace ${helm_release.argocd.namespace} argocd-server"
}

output "argocd_admin_password_command" {
  description = "Command to retrieve the initial Argo CD admin password."
  value       = "kubectl -n ${helm_release.argocd.namespace} get secret argocd-initial-admin-secret -o jsonpath='{.data.password}' | base64 -d"
}

output "argocd_repository_secret_name" {
  description = "Argo CD repository credential Secret name."
  value       = kubernetes_secret_v1.gitea.metadata[0].name
}