/**
 * Create a Key for aan IAM Service account
 *
 * @export
 * @param {string} name Name of the pulumi resource to create
 * @param {gcp.serviceAccount.Account} serviceAccountId IAM Service Account to create the key for.
 * @returns
 */
export function createKey(
    name: string,
    serviceAccountId: gcp.serviceAccount.Account
) {
    return new gcp.serviceAccount.Key(`${name}-key`, {
        serviceAccountId: serviceAccountId.name
    });
}

/**
 * Create a secret from an account key
 *
 * @export
 * @param {gcp.serviceAccount.Key} key The service account key to create a secret from.
 * @returns {pulumi.Output<string>}
 */
export function getPrivateKey(
    key: gcp.serviceAccount.Key
): pulumi.Output<string> {
    return key.privateKey.apply(k =>
        JSON.parse(Buffer.from(k, 'base64').toString('ascii'))
    ) as pulumi.Output<string>;
}