variable "maas_api_url" {
  description = "Office1 MAAS region API endpoint, e.g. http://10.10.0.20:5240/MAAS. MEASURED (the rack enrolled against exactly this URL), never inferred."
  type        = string
}

variable "maas_api_key" {
  description = <<-EOT
    MAAS API key (consumer:token:secret). SECRET -- supply ONLY via the
    environment as TF_VAR_maas_api_key, sourced from the operator-placed 0600
    file (SEC-009 per-site creds convention). NEVER put it in a tfvars file,
    never echo it, and never let it reach a plan file that gets committed.
  EOT
  type        = string
  sensitive   = true
}

variable "vm_host_name" {
  description = "MAAS VM host (pod) name for this DC's inner libvirt."
  type        = string
}

variable "power_address" {
  description = <<-EOT
    libvirt URI MAAS uses to reach this VM host. Under D-123 Model B this is
    LOCAL to the rack (`qemu:///system`): vvr1-dc0 is BOTH the MAAS rack
    controller AND the libvirt host holding the node VMs, so MAAS dials no
    cross-fiber virsh. MEASURED prerequisite: the MAAS rack process must be
    able to open that socket on the rack.
  EOT
  type        = string
}

variable "zone" {
  description = "MAAS zone for the VM host. null = let MAAS compute it (the module's documented, provider-supported no-op)."
  type        = string
  default     = null
}

variable "pool" {
  description = "MAAS resource pool for the VM host. null = let MAAS compute it."
  type        = string
  default     = null
}