Cloud run jobs iam support

[ilakhtenkov]

TL;DR

The current project supports Cloud Run Services IAM bindings via modules/cloud_run_services_iam but is missing support for Cloud Run v2 Jobs. There is no convenient way to manage google_cloud_run_v2_job_iam_binding and google_cloud_run_v2_job_iam_member resources using the standard patterns of this library.

Terraform Resources

Detailed design

I would like to see a new submodule modules/cloud_run_v2_jobs_iam that enables configuring IAM policies for Cloud Run v2 Jobs. This module should:

• Support additive and authoritative modes.
• Accept a list of Cloud Run Job names (cloud_run_jobs).
• Use the standard helper module for binding calculation.
• Export standard outputs like cloud_run_jobs, roles, and members.

Additional information

Alternatives

There is no alternatives, currently we should use google_cloud_run_v2_job_iam_binding google_cloud_run_v2_job_iam_member resource in our Terraform code, which makes it a bit complex with large amount of jobs, roles and members.