variable "path" {
  description = "Mount path of the rancher secrets engine (e.g. \"rancher\")"
  type        = string
}

variable "plugin" {
  description = "Registered plugin name to mount (the catalog name = mount type)"
  type        = string
  default     = "vault-plugin-secrets-rancher"
}

variable "description" {
  description = "Human-friendly description of the mount"
  type        = string
  default     = null
}

variable "rancher_url" {
  description = "Base URL of the Rancher server (e.g. https://rancher.k8s.syd1.au.unkin.net)"
  type        = string
}

variable "ca_cert" {
  description = "PEM CA certificate that signed the Rancher server's TLS cert (optional; omit to use the system trust store)"
  type        = string
  default     = null
}

variable "tls_skip_verify" {
  description = "Skip TLS verification of the Rancher server (not recommended)"
  type        = bool
  default     = false
}

variable "request_timeout_seconds" {
  description = "HTTP timeout in seconds for calls from the plugin to Rancher"
  type        = number
  default     = 30
}