fix: cloud build integration tests

Author: m0ps

examples/simple_bucket/main.tf

@@ -58,12 +58,4 @@ module "bucket" {
   retention_policy = {
     retention_period = 2
   }
-
-  ip_filter = {
-    mode = "Enabled"
-    public_network_source = {
-      allowed_ip_cidr_ranges = ["0.0.0.0/0"]
-    }
-    allow_all_service_agent_access = true
-  }
 }

test/setup/iam.tf

@@ -35,9 +35,18 @@ locals {
     "roles/cloudkms.cryptoKeyEncrypterDecrypter",
     "roles/iam.serviceAccountUser",
     "roles/storage.admin",
+    "projects/${module.project.project_id}/roles/${google_project_iam_custom_role.int_test.role_id}",
   ], flatten(values(local.per_module_roles)))
 }
 
+resource "google_project_iam_custom_role" "int_test" {
+  project     = module.project.project_id
+  role_id     = "BypassBucketIPfiltering"
+  title       = "Bypass bucket IP filtering"
+  description = "Allow test service account to bypass bucket ip filtering rules"
+  permissions = ["storage.buckets.exemptFromIpFilter"]
+}
+
 resource "google_service_account" "int_test" {
   project      = module.project.project_id
   account_id   = "ci-cloud-storage"