feat: implement sa access key resource

Author: h3adex

docs/resources/service_account_key.md

@@ -0,0 +1,74 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "stackit_service_account_key Resource - stackit"
+subcategory: ""
+description: |-
+  Schema for a STACKIT service account access key resource.
+  ~> This resource is in beta and may be subject to breaking changes in the future. Use with caution. See our guide https://registry.terraform.io/providers/stackitcloud/stackit/latest/docs/guides/opting_into_beta_resources for how to opt-in to use beta resources.
+  Example Usage
+  Automatically rotate access tokens
+  
+  resource "stackit_service_account" "sa" {
+    project_id = var.stackit_project_id
+    name 		 = "sa01"
+  }
+  
+  resource "time_rotating" "rotate" {
+    rotation_days = 80
+  }
+  
+  resource "stackit_service_account_key" "sakey" {
+    project_id            = var.stackit_project_id
+    service_account_email = stackit_service_account.sa.email
+    ttl_days              = 90
+  }
+---
+
+# stackit_service_account_key (Resource)
+
+Schema for a STACKIT service account access key resource.
+
+~> This resource is in beta and may be subject to breaking changes in the future. Use with caution. See our [guide](https://registry.terraform.io/providers/stackitcloud/stackit/latest/docs/guides/opting_into_beta_resources) for how to opt-in to use beta resources.
+## Example Usage
+
+
+### Automatically rotate access tokens
+```terraform
+resource "stackit_service_account" "sa" {
+  project_id = var.stackit_project_id
+  name 		 = "sa01"
+}
+
+resource "time_rotating" "rotate" {
+  rotation_days = 80
+}
+
+resource "stackit_service_account_key" "sakey" {
+  project_id            = var.stackit_project_id
+  service_account_email = stackit_service_account.sa.email
+  ttl_days              = 90
+}
+
+```
+
+
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `project_id` (String) The STACKIT project ID associated with the service account key.
+- `service_account_email` (String) The email address associated with the service account, used for account identification and communication.
+
+### Optional
+
+- `public_key` (String) Specifies the certificate file (certificate.pem) required for generating the public and private keys. If not provided, a default certificate from STACKIT will be used.
+- `rotate_when_changed` (Map of String) A map of arbitrary key/value pairs designed to force key recreation when they change, facilitating key rotation based on external factors such as a changing timestamp. Modifying this map triggers the creation of a new resource.
+- `ttl_days` (Number) Specifies the key's validity duration in days. If left unspecified, the key is considered valid until it is deleted
+
+### Read-Only
+
+- `id` (String) The unique internal identifier for the Terraform resource, formatted as a combination of 'project_id,key_id'.
+- `json` (String, Sensitive) The raw JSON representation of the API response, available for direct use.
+- `key_id` (String) The unique identifier for the key associated with the service account.

stackit/internal/services/serviceaccount/key/const.go

@@ -0,0 +1,24 @@
+package key
+
+const markdownDescription = `
+Schema for a STACKIT service account access key resource.` + "\n" + `
+~> This resource is in beta and may be subject to breaking changes in the future. Use with caution. See our [guide](https://registry.terraform.io/providers/stackitcloud/stackit/latest/docs/guides/opting_into_beta_resources) for how to opt-in to use beta resources.
+## Example Usage` + "\n" + `
+
+### Automatically rotate access tokens` + "\n" +
+	"```terraform" + `
+resource "stackit_service_account" "sa" {
+  project_id = var.stackit_project_id
+  name 		 = "sa01"
+}
+
+resource "time_rotating" "rotate" {
+  rotation_days = 80
+}
+
+resource "stackit_service_account_key" "sakey" {
+  project_id            = var.stackit_project_id
+  service_account_email = stackit_service_account.sa.email
+  ttl_days              = 90
+}
+` + "\n```"