data "kubernetes_secret_v1" "authentik" {
  metadata {
    name      = "authentik"
    namespace = "${var.domain}-auth"
  }
}
locals {
  app_slug = "${var.instance}${var.component == "" ? "" : "-"}${var.component}"
  ak_gatekeeper_labels = merge(var.labels, {
    "app.kubernetes.io/component" = "ak-gatekeeper"
  })
  authentik_url   = "http://authentik-authentik.${var.domain}-auth.svc"
  authentik_token = try(data.kubernetes_secret_v1.authentik.data["AUTHENTIK_BOOTSTRAP_TOKEN"], "no-token")
  external_url    = format("https://%s", var.dns_name)
}