# Auth: the provider picks up Application Default Credentials (ADC) from
# your local environment. Run `gcloud auth application-default login` once
# before `aries cluster gcp up`. Optionally point the provider at a
# specific service-account JSON via `GOOGLE_CREDENTIALS=/path/to/sa.json`.
#
# Default labels go on every resource that supports them so it's easy to
# find — and bulk-delete — the entire stack.

provider "google" {
  project = var.project_id
  region  = var.region

  default_labels = local.common_labels
}