output "common_secret_paths" {
  description = "Paths of created common Vault secrets"
  value = compact([
    try(vault_kv_secret_v2.common_regcred[0].name, ""),
    try(vault_kv_secret_v2.common_smtp_auth[0].name, ""),
    try(vault_kv_secret_v2.common_django_auth[0].name, ""),
    try(vault_kv_secret_v2.common_rsa_keys[0].name, "")
  ])
}

output "infra_secret_paths" {
  description = "Paths of created infrastructure Vault secrets"
  value = concat(
    compact([
      try(vault_kv_secret_v2.postgresql_admin[0].name, ""),
      try(vault_kv_secret_v2.postgresql_s3[0].name, ""),
      try(vault_kv_secret_v2.postgresql_users[0].name, ""),
      try(vault_kv_secret_v2.rabbitmq_auth[0].name, ""),
      try(vault_kv_secret_v2.minio_admin[0].name, ""),
      try(vault_kv_secret_v2.kafka_bootstrap[0].name, ""),
      try(vault_kv_secret_v2.zitadel_postgresql[0].name, ""),
      try(vault_kv_secret_v2.camunda_identity_components[0].name, ""),
      try(vault_kv_secret_v2.camunda_identity_firstuser[0].name, ""),
      try(vault_kv_secret_v2.camunda_keycloak_admin[0].name, ""),
      try(vault_kv_secret_v2.camunda_postgresql[0].name, ""),
      try(vault_kv_secret_v2.keycloak_admin[0].name, ""),
      try(vault_kv_secret_v2.keycloak_postgresql[0].name, "")
    ]),
    [for s in values(vault_kv_secret_v2.postgresql_apps) : s.name],
    [for s in values(vault_kv_secret_v2.rabbitmq_apps) : s.name],
    [for s in values(vault_kv_secret_v2.minio_apps) : s.name],
    [for s in values(vault_kv_secret_v2.kafka_apps) : s.name]
  )
}

output "infra_policy_names" {
  description = "Created infrastructure Vault policy names"
  value       = keys(vault_policy.infra)
}

output "infra_role_names" {
  description = "Created infrastructure Vault kubernetes auth role names"
  value       = [for r in values(vault_kubernetes_auth_backend_role.infra) : r.role_name]
}

output "app_policy_names" {
  description = "Created application Vault policy names"
  value       = keys(vault_policy.app)
}

output "app_role_names" {
  description = "Created application Vault kubernetes auth role names"
  value       = [for r in values(vault_kubernetes_auth_backend_role.app) : r.role_name]
}