output "google_kms_key_ring_id" {
  description = "Google KMS key ring id used by the identity stack."
  value       = local.google_kms_key_ring_id
}

output "google_runner_service_account_email" {
  description = "Forgejo runner service account email."
  value       = local.google_runner_service_account_email
}

output "google_wif_pool_name" {
  description = "Google WIF pool resource name when managed."
  value       = try(google_iam_workload_identity_pool.burrow[0].name, null)
}

output "google_signing_key_ids" {
  description = "Managed Google KMS signing key ids."
  value       = { for name, key in google_kms_crypto_key.signing : name => key.id }
}