// Deliberately restricted to the entry point: the response payload returned
// to the backend must carry strictly the head node access information, never
// the compute node details.

output "head_node_ip" {
  description = "Public IPv4 address of the head node, the single entry point of the cluster"
  value       = local.head_public_ip
}

output "head_node_hostname" {
  description = "Hostname of the head node"
  value       = local.head_hostname
}

output "ssh_port" {
  description = "SSH port of the head node"
  value       = 22
}

output "vmIps" {
  description = "Entry point address list, kept for compatibility with the single VM notification flow"
  value       = [local.head_public_ip]
}

output "credentials_ref" {
  description = "Vault path of the generated consumer credentials for the head node"
  value       = "secret/data/${vault_kv_secret_v2.consumer.name}"
}