Add credential_type and credential_config to static roles for DBs

[catouc]

Description

An attempt to add credential_type and credential_config as fields to the static roles in database engines.

This is to enable support for using rsa_public_key on Snowflake secret engines which is currently not possible on static roles.

Closes #1585.
Closes #1992

Checklist

• Added CHANGELOG entry (only for user-facing changes)
• Acceptance tests where run against all supported Vault Versions

Output from acceptance testing:

pboeschen@LL16KDB44 terraform-provider-vault main> RUNS_IN_CONTAINER=true make testacc TESTARGS='-run=TestAccDatabaseSecretBackendStaticRole.* -v'
==> Checking that code complies with gofmt requirements...
TF_ACC=1 go test -run=TestAccDatabaseSecretBackendStaticRole.* -v -timeout 30m ./...
?   	github.com/hashicorp/terraform-provider-vault	[no test files]
?   	github.com/hashicorp/terraform-provider-vault/cmd/coverage	[no test files]
?   	github.com/hashicorp/terraform-provider-vault/cmd/generate	[no test files]
?   	github.com/hashicorp/terraform-provider-vault/helper	[no test files]
?   	github.com/hashicorp/terraform-provider-vault/internal/consts	[no test files]
?   	github.com/hashicorp/terraform-provider-vault/internal/identity/group	[no test files]
?   	github.com/hashicorp/terraform-provider-vault/internal/identity/mfa	[no test files]
?   	github.com/hashicorp/terraform-provider-vault/internal/pki	[no test files]
testing: warning: no tests to run
PASS
ok  	github.com/hashicorp/terraform-provider-vault/codegen	(cached) [no tests to run]
testing: warning: no tests to run
PASS
ok  	github.com/hashicorp/terraform-provider-vault/internal/identity/entity	(cached) [no tests to run]
?   	github.com/hashicorp/terraform-provider-vault/internal/sync	[no test files]
?   	github.com/hashicorp/terraform-provider-vault/schema	[no test files]
testing: warning: no tests to run
PASS
ok  	github.com/hashicorp/terraform-provider-vault/internal/provider	(cached) [no tests to run]
testing: warning: no tests to run
PASS
ok  	github.com/hashicorp/terraform-provider-vault/testutil	(cached) [no tests to run]
testing: warning: no tests to run
PASS
ok  	github.com/hashicorp/terraform-provider-vault/util	(cached) [no tests to run]
testing: warning: no tests to run
PASS
ok  	github.com/hashicorp/terraform-provider-vault/util/mountutil	(cached) [no tests to run]
=== RUN   TestAccDatabaseSecretBackendStaticRole_import
--- PASS: TestAccDatabaseSecretBackendStaticRole_import (1.76s)
=== RUN   TestAccDatabaseSecretBackendStaticRole_credentialType
--- PASS: TestAccDatabaseSecretBackendStaticRole_credentialType (1.43s)
=== RUN   TestAccDatabaseSecretBackendStaticRole_credentialConfig
--- PASS: TestAccDatabaseSecretBackendStaticRole_credentialConfig (2.46s)
=== RUN   TestAccDatabaseSecretBackendStaticRole_rotationPeriod
--- PASS: TestAccDatabaseSecretBackendStaticRole_rotationPeriod (2.45s)
=== RUN   TestAccDatabaseSecretBackendStaticRole_rotationSchedule
    resource_database_secret_backend_static_role_test.go:197: Vault server version "1.18.2"
--- PASS: TestAccDatabaseSecretBackendStaticRole_rotationSchedule (2.47s)
=== RUN   TestAccDatabaseSecretBackendStaticRole_Rootless
    resource_database_secret_backend_static_role_test.go:234: "POSTGRES_URL_TEST" must be set
--- SKIP: TestAccDatabaseSecretBackendStaticRole_Rootless (0.00s)
PASS
ok  	github.com/hashicorp/terraform-provider-vault/vault	10.614s

Community Note

• Please vote on this pull request by adding a 👍 reaction to the original pull request comment to help the community and maintainers prioritize this request
• Please do not leave "+1" comments, they generate extra noise for pull request followers and do not help prioritize the request

[hashicorp-cla-app]

All committers have signed the CLA.

[catouc]

Unsure what "all supported Vault versions" are so I ran my tests against 1.18.2 locally. https://registry.terraform.io/providers/hashicorp/vault/latest/docs does not list any supported versions. Nor in the README from what I can tell.

[Temurson]

My organization would benefit greatly from this feature. As was pointed out on the issue #1585, switching from password to rsa_private_key credential_type will soon be a requirement for Snowflake DB.
@catouc really appreciate your contribution!
@JMGoldsmith I am also happy to contribute in any way to get this feature in!

[fairclothjm]

Thanks @catouc! Looking good so far. If you can kindly address the comments we can get this PR merged.

[catouc]

Thanks @catouc! Looking good so far. If you can kindly address the comments we can get this PR merged.

All addressed, also rewrote the commit msg to be a bit more in line with the rest of the repositories changes.

[catouc]

Gonna link #2399 into here since this issue seems to be getting more traction with Snowflakes deprecation of password auth.

[catouc]

Moved the changelog to the correct part.

[catouc]

@fairclothjm maybe we can review this now before I have fix even more merge conflicts? :) Thanks for the help!