docs: add hint on how to create a project within sna

Author: h3adex

docs/data-sources/resourcemanager_project.md

@@ -32,5 +32,16 @@ data "stackit_resourcemanager_project" "example" {
 
 - `id` (String) Terraform's internal data source. ID. It is structured as "`container_id`".
 - `labels` (Map of String) Labels are key-value string pairs which can be attached to a resource container. A label key must match the regex [A-ZÄÜÖa-zäüöß0-9_-]{1,64}. A label value must match the regex ^$|[A-ZÄÜÖa-zäüöß0-9_-]{1,64}
+- `members` (Attributes List, Deprecated) The members assigned to the project. At least one subject needs to be a user, and not a client or service account. This value is only considered during creation. Changing it afterwards will have no effect.
+
+!> The "members" field has been deprecated in favor of the "owner_email" field. Please use the "owner_email" field to assign the owner role to a user. (see [below for nested schema](#nestedatt--members))
 - `name` (String) Project name.
-- `parent_container_id` (String) Parent resource identifier. Both container ID (user-friendly) and UUID are supported
+- `parent_container_id` (String) Parent resource identifier. Both container ID (user-friendly) and UUID are supported
+
+<a id="nestedatt--members"></a>
+### Nested Schema for `members`
+
+Read-Only:
+
+- `role` (String) The role of the member in the project. Legacy roles (`project.admin`, `project.auditor`, `project.member`, `project.owner`) are not supported.
+- `subject` (String) Unique identifier of the user, service account or client. This is usually the email address for users or service accounts, and the name in case of clients.

docs/resources/resourcemanager_project.md

@@ -18,6 +18,7 @@ resource "stackit_resourcemanager_project" "example" {
   name                = "example-container"
   labels = {
     "Label 1" = "foo"
+    // "networkArea" = stackit_network_area.foo.network_area_id
   }
   owner_email = "john.doe@stackit.cloud"
 }
@@ -34,10 +35,21 @@ resource "stackit_resourcemanager_project" "example" {
 
 ### Optional
 
-- `labels` (Map of String) Labels are key-value string pairs which can be attached to a resource container. A label key must match the regex [A-ZÄÜÖa-zäüöß0-9_-]{1,64}. A label value must match the regex ^$|[A-ZÄÜÖa-zäüöß0-9_-]{1,64}
+- `labels` (Map of String) Labels are key-value string pairs which can be attached to a resource container. A label key must match the regex [A-ZÄÜÖa-zäüöß0-9_-]{1,64}. A label value must match the regex ^$|[A-ZÄÜÖa-zäüöß0-9_-]{1,64}. To add a project to a STACKIT Network Area, setting the label `networkArea=<networkAreaID>` is required.
+- `members` (Attributes List, Deprecated) The members assigned to the project. At least one subject needs to be a user, and not a client or service account. This value is only considered during creation. Changing it afterwards will have no effect.
+
+!> The "members" field has been deprecated in favor of the "owner_email" field. Please use the "owner_email" field to assign the owner role to a user. (see [below for nested schema](#nestedatt--members))
 
 ### Read-Only
 
 - `container_id` (String) Project container ID. Globally unique, user-friendly identifier.
 - `id` (String) Terraform's internal resource ID. It is structured as "`container_id`".
-- `project_id` (String) Project UUID identifier. This is the ID that can be used in most of the other resources to identify the project.
+- `project_id` (String) Project UUID identifier. This is the ID that can be used in most of the other resources to identify the project.
+
+<a id="nestedatt--members"></a>
+### Nested Schema for `members`
+
+Required:
+
+- `role` (String) The role of the member in the project. Possible values include, but are not limited to: `owner`, `editor`, `reader`. Legacy roles (`project.admin`, `project.auditor`, `project.member`, `project.owner`) are not supported.
+- `subject` (String) Unique identifier of the user, service account or client. This is usually the email address for users or service accounts, and the name in case of clients.

examples/resources/stackit_resourcemanager_project/resource.tf

@@ -3,6 +3,7 @@ resource "stackit_resourcemanager_project" "example" {
   name                = "example-container"
   labels = {
     "Label 1" = "foo"
+    // "networkArea" = stackit_network_area.foo.network_area_id
   }
   owner_email = "john.doe@stackit.cloud"
 }

stackit/internal/services/resourcemanager/project/resource.go

@@ -152,7 +152,7 @@ func (r *projectResource) Schema(_ context.Context, _ resource.SchemaRequest, re
 		"container_id":                "Project container ID. Globally unique, user-friendly identifier.",
 		"parent_container_id":         "Parent resource identifier. Both container ID (user-friendly) and UUID are supported",
 		"name":                        "Project name.",
-		"labels":                      "Labels are key-value string pairs which can be attached to a resource container. A label key must match the regex [A-ZÄÜÖa-zäüöß0-9_-]{1,64}. A label value must match the regex ^$|[A-ZÄÜÖa-zäüöß0-9_-]{1,64}",
+		"labels":                      "Labels are key-value string pairs which can be attached to a resource container. A label key must match the regex [A-ZÄÜÖa-zäüöß0-9_-]{1,64}. A label value must match the regex ^$|[A-ZÄÜÖa-zäüöß0-9_-]{1,64}. To add a project to a STACKIT Network Area, setting the label `networkArea=<networkAreaID>` is required.",
 		"owner_email":                 "Email address of the owner of the project. This value is only considered during creation. Changing it afterwards will have no effect.",
 		"members":                     "The members assigned to the project. At least one subject needs to be a user, and not a client or service account. This value is only considered during creation. Changing it afterwards will have no effect.",
 		"members.role":                fmt.Sprintf("The role of the member in the project. Possible values include, but are not limited to: `owner`, `editor`, `reader`. Legacy roles (%s) are not supported.", strings.Join(utils.QuoteValues(utils.LegacyProjectRoles), ", ")),