Support conformance env lifecycle in GCP CI Cloud Build

Author: roger2hk

deployment/modules/gcp/conformance/main.tf

@@ -32,13 +32,15 @@ module "cloudrun" {
   base_name                      = var.base_name
   location                       = var.location
   server_docker_image            = var.server_docker_image
+  skip_iam                       = var.skip_iam
   bucket                         = module.storage.log_bucket.id
   log_spanner_instance           = module.storage.log_spanner_instance.name
   log_spanner_db                 = module.storage.log_spanner_db.name
   dedup_spanner_db               = module.storage.dedup_spanner_db.name
   signer_public_key_secret_name  = module.secretmanager.ecdsa_p256_public_key_id
   signer_private_key_secret_name = module.secretmanager.ecdsa_p256_private_key_id
 
+
   depends_on = [
     module.secretmanager,
     module.storage,

deployment/modules/gcp/conformance/variables.tf

@@ -27,3 +27,8 @@ variable "server_docker_image" {
   description = "The full image URL (path & tag) for the Docker image to deploy in Cloud Run"
   type        = string
 }
+
+variable "skip_iam" {
+  description = "Skip for IAM externally managed GCP projects"
+  type        = bool
+}