SA Token Authentication Deprecation

[h3adex]

What happened?

SA Service Account Token are getting deprecated: https://docs.stackit.cloud/stackit/en/deprecation-plan-for-service-account-access-tokens-and-migration-guide-373293307.html.

I suggest we update the readme and favor sa key authentication per default.

How can we reproduce this?

Search

• I did search for other open and closed issues before opening this.

Code of Conduct

• I agree to follow this project's Code of Conduct

Additional context

No response

[slm0n87]

Agree, that also affects our Tutorial:
https://docs.stackit.cloud/stackit/en/how-to-use-stackit-dns-for-dns01-to-act-as-a-dns01-acme-issuer-with-cert-manager-152633984.html

[JanGrosse]

Would it be possible to provide a own private key ? Something like a seperate secret.
Because as of now, at least if I understood the code correctly, it just assumes the private key being part of the sa.json.
Or it should be documented that one has to update the sa.json manually, if the person decided to generate their own keys, to include the missing privateKey field.