Thanks for reaching out! I am looking into this
so far, I haven't been able to reproduce it. The formatting in your screenshot looks correct. Just since it's cut out of the screenshot, are you also providing a "type", "project_id", "private_key_id", and "client_x509_cert_url"?
Does the same service account key throw the same error in a brand new resource?