Adds multitenant sa pipeline at infra test

Author: amandakarina

test/integration/appfactory/appfactory_test.go

@@ -53,6 +53,8 @@ func TestAppfactory(t *testing.T) {
 		tft.WithTFDir("../../setup/vpcsc"),
 	)
 
+	os.Setenv("GOOGLE_IMPERSONATE_SERVICE_ACCOUNT", bootstrap.GetJsonOutput("cb_service_accounts_emails").Get("applicationfactory").String())
+
 	backend_bucket := bootstrap.GetStringOutput("state_bucket")
 	backendConfig := map[string]interface{}{
 		"bucket": backend_bucket,

test/integration/fleetscope/fleetscope_test.go

@@ -46,6 +46,8 @@ func TestFleetscope(t *testing.T) {
 		tft.WithTFDir("../../../1-bootstrap"),
 	)
 
+	os.Setenv("GOOGLE_IMPERSONATE_SERVICE_ACCOUNT", bootstrap.GetJsonOutput("cb_service_accounts_emails").Get("fleetscope").String())
+
 	backend_bucket := bootstrap.GetStringOutput("state_bucket")
 	backendConfig := map[string]interface{}{
 		"bucket": backend_bucket,

test/integration/multitenant/multitenant_test.go

@@ -16,6 +16,7 @@ package multitenant
 
 import (
 	"fmt"
+	"os"
 	"regexp"
 	"strings"
 	"testing"
@@ -36,6 +37,7 @@ func TestMultitenant(t *testing.T) {
 	bootstrap := tft.NewTFBlueprintTest(t,
 		tft.WithTFDir("../../../1-bootstrap"),
 	)
+	os.Setenv("GOOGLE_IMPERSONATE_SERVICE_ACCOUNT", bootstrap.GetJsonOutput("cb_service_accounts_emails").Get("multitenant").String())
 
 	vpcsc := tft.NewTFBlueprintTest(t,
 		tft.WithTFDir("../../setup/vpcsc"),

test/setup/iam.tf

@@ -63,7 +63,7 @@ resource "google_project_iam_member" "int_test_connection_admin" {
 }
 
 resource "google_folder_iam_member" "int_test_connection_admin" {
-  for_each = toset(["roles/resourcemanager.projectCreator", "roles/owner"])
+  for_each = toset(["roles/resourcemanager.projectCreator", "roles/owner", "roles/iam.serviceAccountAdmin", "roles/iam.serviceAccountUser", ])
   folder   = module.folder_seed.id
   role     = each.value
   member   = "serviceAccount:${google_service_account.int_test[local.index].email}"