output "debug_oke_image_selection" {
  value = {
    selected_name = local.selected_image_name
    selected_id   = local.selected_image_id
    k8s_version   = local.latest_k8s_version
    shape_used    = var.oke_node_shape
  }
}

resource "local_file" "output_kubeconfig" {
    filename = ".${var.oke_cluster_name}.kubeconfig"
    content  = "${data.oci_containerengine_cluster_kube_config.cluster_kube_config.content}"
}

# OCID do Cluster (usado no bloco 'exec' do provider para gerar o token via OCI CLI)
output "cluster_id" {
  value = oci_containerengine_cluster.containerengine_cluster.id
}

output "cluster_endpoint" {
  # Se a variável for true, usa o public. Se for false, usa o private.
  value = var.oke_api_endpoint_public ? "https://${oci_containerengine_cluster.containerengine_cluster.endpoints[0].public_endpoint}" : "https://${oci_containerengine_cluster.containerengine_cluster.endpoints[0].private_endpoint}"
}

# Certificado CA do Cluster (necessário para a conexão TLS segura do provider)
output "cluster_ca_cert" {
  value = yamldecode(data.oci_containerengine_cluster_kube_config.cluster_kube_config.content)["clusters"][0]["cluster"]["certificate-authority-data"]
}