WIRE-839: add service account keys support

[radekska]

• resource implementation for castai_service_account_key
• minor tweaks for castai_service_account resource

[oskarwojciski]

Can you add some example of working with keys, also how to obtain the key token value while creating it?

I wonder if we want to split the resources or make the keys part of the resource_service_account. They are separated in the API, but logically, they are very much connected.

[radekska]

Can you add some example of working with keys, also how to obtain the key token value while creating it?

Examples added

I wonder if we want to split the resources or make the keys part of the resource_service_account. They are separated in the API, but logically, they are very much connected.

I thought about the same and decided to follow GCP approach:

• https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/google_service_account
• https://registry.terraform.io/providers/hashicorp/google/latest/docs/resources/google_service_account_key

[oskarwojciski]

I see that we show change state for the name change, but we don't allow to update it, so it never apply

should we add ForceNew flag for name, and the service_account_id fields? Same as for expires_at which works fine