variable "backend" {
  description = "Kubernetes auth backend path."
  type        = string
}

variable "roles" {
  description = "Kubernetes auth roles keyed by Vault role name."
  type = map(object({
    audiences                  = set(string)
    service_account_names      = set(string)
    service_account_namespaces = set(string)
    token_policies             = set(string)
    token_ttl                  = number
  }))
}