variable "provision" {
  description = "Explicit opt-in for provisioning. Keep false for planning and validation."
  type        = bool
  default     = false
}

variable "project_id" {
  description = "Google Cloud project to target when provisioning is enabled."
  type        = string
}

variable "region" {
  type    = string
  default = "us-central1"
}

variable "service_image" {
  description = "Immutable application image reference."
  type        = string
}

variable "secret_id" {
  description = "Secret Manager secret name; the value is never stored in Terraform."
  type        = string
}