variable "kubernetes_role_ttl_seconds" {
  description = "TTL for workload Kubernetes auth tokens."
  type        = number
  default     = 3600
}

variable "vault_addr" {
  description = "Vault API address reachable by the delegated runner."
  type        = string
  default     = "http://127.0.0.1:8200"
}

variable "vault_token" {
  description = "Short-lived token carrying only vault-workloads-automation-dev."
  type        = string
  sensitive   = true
  ephemeral   = true
}