output "google_kms_key_ring_id" {
  description = "Google KMS key ring id used by the OpenBao stack."
  value       = local.google_kms_key_ring_id
}

output "google_openbao_seal_key_id" {
  description = "Google KMS seal key id when managed."
  value       = try(google_kms_crypto_key.openbao_seal[0].id, null)
}

output "openbao_age_mount_path" {
  description = "OpenBao KV v2 mount path for migrated age secrets."
  value       = var.age_mount_path
}