variable "fleet_enrollment_token" {
  description = "Fleet enrollment token for the Elastic Agent DaemonSet (KSPM). Sourced from the TF_VAR_FLEET_ENROLLMENT_TOKEN GitHub Actions secret; never committed."
  type        = string
  sensitive   = true
}

variable "fleet_url" {
  description = "Fleet Server URL the Elastic Agent enrolls into (the serverless Security project's Fleet endpoint). Not secret: it is an endpoint, not a credential."
  type        = string
  default     = "https://<your-fleet-id>.fleet.<region>.gcp.elastic.cloud:443"
}

variable "elastic_agent_image" {
  description = "Pinned Elastic Agent image for the KSPM DaemonSet. Bump deliberately to match the Fleet-managed stack version."
  type        = string
  default     = "docker.elastic.co/elastic-agent/elastic-agent:9.5.6"
}