# -----------------------------------------------------------------------------
# OCI CIS Agent — OKE Deployment Stack
# Outputs
# -----------------------------------------------------------------------------

# --- Load Balancer ---
output "load_balancer_ip" {
  description = "Public IP address of the Load Balancer"
  value       = oci_load_balancer_load_balancer.main.ip_address_details[0].ip_address
}

output "app_url" {
  description = "Application URL (HTTPS)"
  value       = var.domain_name != "" ? "https://${var.domain_name}" : "https://${oci_load_balancer_load_balancer.main.ip_address_details[0].ip_address}"
}

# --- OKE Cluster ---
output "cluster_id" {
  description = "OCID of the OKE cluster"
  value       = oci_containerengine_cluster.main.id
}

output "cluster_name" {
  description = "Name of the OKE cluster"
  value       = oci_containerengine_cluster.main.name
}

output "node_pool_id" {
  description = "OCID of the OKE node pool"
  value       = oci_containerengine_node_pool.app.id
}

output "kubeconfig_command" {
  description = "Command to generate kubeconfig for the cluster"
  value       = "oci ce cluster create-kubeconfig --cluster-id ${oci_containerengine_cluster.main.id} --file $HOME/.kube/config --region ${var.region} --token-version 2.0.0 --kube-endpoint PRIVATE_ENDPOINT"
}

# --- OCIR ---
output "ocir_backend_url" {
  description = "OCIR URL for the backend image"
  value       = "${var.region}.ocir.io/${var.ocir_namespace}/${var.ocir_repo_prefix}/backend"
}

output "ocir_frontend_url" {
  description = "OCIR URL for the frontend image"
  value       = "${var.region}.ocir.io/${var.ocir_namespace}/${var.ocir_repo_prefix}/frontend"
}

output "ocir_docker_login_command" {
  description = "Command to login to OCIR"
  value       = "docker login ${var.region}.ocir.io"
}

# --- Networking ---
output "vcn_id" {
  description = "OCID of the VCN"
  value       = oci_core_vcn.main.id
}

output "nodes_subnet_id" {
  description = "OCID of the nodes subnet"
  value       = oci_core_subnet.nodes.id
}

# --- WAF ---
output "waf_id" {
  description = "OCID of the WAF"
  value       = oci_waf_web_app_firewall.main.id
}

# --- DNS (conditional) ---
output "dns_nameservers" {
  description = "DNS Zone nameservers (set these at your domain registrar)"
  value       = var.domain_name != "" ? [for ns in oci_dns_zone.main[0].nameservers : ns.hostname] : []
}