output "cluster_name" {
  description = "Name of the EKS cluster."
  value       = aws_eks_cluster.this.name
}

output "cluster_arn" {
  description = "ARN of the EKS cluster."
  value       = aws_eks_cluster.this.arn
}

output "cluster_version" {
  description = "Kubernetes version of the EKS cluster."
  value       = aws_eks_cluster.this.version
}

output "cluster_endpoint" {
  description = "Kubernetes API server endpoint."
  value       = aws_eks_cluster.this.endpoint
}

output "cluster_certificate_authority_data" {
  description = "Base64-encoded certificate data required for Kubernetes clients."
  value       = aws_eks_cluster.this.certificate_authority[0].data
  sensitive   = true
}

output "cluster_oidc_issuer_url" {
  description = "OIDC issuer URL for the cluster."
  value       = aws_eks_cluster.this.identity[0].oidc[0].issuer
}

output "oidc_provider_arn" {
  description = "ARN of the IAM OIDC provider for the cluster."
  value       = aws_iam_openid_connect_provider.this.arn
}

output "vpc_id" {
  description = "ID of the VPC used by the cluster."
  value       = local.vpc_id
}

output "public_subnet_ids" {
  description = "IDs of the public subnets used by the cluster."
  value       = local.public_subnet_ids
}

output "private_subnet_ids" {
  description = "IDs of the private subnets used by the cluster."
  value       = local.private_subnet_ids
}

output "node_group_name" {
  description = "Name of the managed node group."
  value       = aws_eks_node_group.default.node_group_name
}

output "node_role_name" {
  description = "IAM role name used by the default managed node group."
  value       = aws_iam_role.node.name
}

output "installed_addons" {
  description = "Managed EKS addons configured by this module."
  value = compact([
    aws_eks_addon.coredns.addon_name,
    aws_eks_addon.kube_proxy.addon_name,
    aws_eks_addon.vpc_cni.addon_name,
    aws_eks_addon.pod_identity_agent.addon_name,
  ])
}

output "cluster_admin_principal_arns" {
  description = "IAM principals granted cluster-admin access through EKS access entries."
  value       = [for entry in aws_eks_access_entry.cluster_admins : entry.principal_arn]
}

output "configure_kubectl" {
  description = "Command to update local kubeconfig for the cluster."
  value       = "aws eks update-kubeconfig --region ${var.region} --name ${aws_eks_cluster.this.name}"
}