Ready to Merge ---- Adjust script/terraform deployment for single session automation with rerun capability and pre/post roles/permissions set/verify - Claudia and Michael recent triage

[fmichaelobrien]

the following patch was triaged on 2 live deployments and reverified on a clean cloud identity organization account

see test details in https://github.com/canada-ca/accelerators_accelerateurs-gcp/issues/24

Claudia and Michael triage

fixes (will get past permissions issues running terraform)

• reentrant bootstrap script has switched to seed project from boostrap - return back to bootstrap
• reentrant bootstrap.sh script fails to find terraform services account - as filter does not target seed project missing --project
• roles not set properly on super admin (terraform impersonation) account - need service account token creator , folder admin
• add verify on super admin account - resourcemanager.folderAdmin, roles/resourcemanager.organizationAdmin, am.serviceAccountTokenCreator
• add automation deriving billing and organization ids - gcloud projects get-ancestors and gcloud alpha billing projects describe
• multiple roles on terraform service account need separate cli commands - one command only applies the last role
• roles missing from terraform service account - pubsub.admin, iam.serviceAccountAdmin
• API service enablements missing from seed project - cloudresourcemanager, identitytoolkit, pubsub, cloudbilling.googleapis.com, iam
• sed source targets are hardcoded to the HOME directory - converted to relative paths
• Terraform service account missing impersonation sections in provider.tf
• northamerica-northeast has 2 regions now

[fmichaelobrien]

I'll rebase shortly today - with the other PRs that were consolidated into this larger PR...

[fmichaelobrien]

Branch rebased - PR ready for merge

[fmichaelobrien]

Team, I really appreciate the review and merge - thank you very much. /michael