Add resource_secret and resource_access_secret

[anvial]

Description

This PR introduces the ability to manage secret access in the Juju provider.
It includes the creation, reading, updating, and deletion of secret access.
The changes also handle the granting and revoking of secret access to applications.
Additionally, it includes the necessary error handling and diagnostics for these operations.

Fixes:

Type of change

• Add new resource

Environment

• Juju controller version:

• Terraform version:

QA steps

terraform {
  required_providers {
    juju = {
      source  = "juju/juju"
      version = "0.11.0"
    }
  }
}
provider "juju" {}

resource "juju_model" "my_model" {
   name = "tf-secret-test"
}

resource "juju_secret" "my_secret" {
  model = juju_model.my_model.name
  name  = "my_secret_name"
  value = {
    key1 = "value1"
    key2 = "value2"
  }
  info  = "This is my secret"
}

resource "juju_application" "jul" {
  name  = "jul"
  model = juju_model.my_model.name

  charm {
    name     = "jameinel-ubuntu-lite"
    channel  = "latest/stable"
  }

  units = 1
}

resource "juju_application" "jul2" {
  name  = "jul2"
  model = juju_model.my_model.name

  charm {
    name     = "jameinel-ubuntu-lite"
    channel  = "latest/stable"
  }

  units = 1
}

resource "juju_access_secret"  "my_access_secret" {
  model = juju_model.my_model.name
  applications = [
    juju_application.jul.name, juju_application.jul2.name
  ]
  secret_id = juju_secret.my_secret.secret_id
}

After check that secrets created and granted:

juju switch tf-secret-test
juju show-secret my_secret

Change the list of apps in plan and check secret info again.

Additional notes

JUJU-5711

[cderici]

Awesome addition! I see a bunch of spots where things were already reviewed and fixed (e.g., #451), so a rebase is needed to iron out those. QA steps needed.

Needs a final review and QA after those and the current comments are addressed 👍

[hmlanigan]

Apologies for noticing this late. We should name this new resource access_secret to be consistent with access_model.

You need the example.tf and import.sh files for the documents to create the new docs/resources/access_model.md

[hmlanigan]

Why do we have direct use of names/v4 again? This was removed in a PR which landed yesterday.

[anvial]

I think that we did not get rid of it completely. It looks like it is used in application_test.go resource_model.go still.

Caner is out an unable to re-review - I've taken over reviewing the changes.

[hmlanigan]

I'll fix Import for both resources in a follow on PR shortly

[hmlanigan]

@anvial you need to rebase and resolve the conflict. This will also pick up the GitHub action updates from @Aflynn50 to add the test env var.

[hmlanigan]

LGTM - just need to rebase.