Add Terraform configuration and IAM management scripts for GCP project

[ksobrenat32]

The idea is to setup the users and permissions for the GCP project using Terraform, allowing for easier management and automation of the infrastructure. This commit includes the following files:

• infra/.terraform.lock.hcl: Lock file for Terraform dependencies.
• infra/README.md: Documentation for the Terraform setup.
• infra/config.auto.tfvars: Configuration variables for the Terraform project.
• infra/generate.py: Python script to generate user configurations based on current users. This should be ran before migration to ensure having the latest roles version.
• infra/main.tf: Main Terraform configuration file for the GCP project.
• infra/requirements.txt: Python dependencies for the generate.py script.
• infra/users.tf: Terraform configuration for managing GCP users.

Related as part 1 of the PR # #35107
Next steps are:

• Create the gcp bucket to store terraform state and initialize it.
• Add GA workflow to run when users.yml suffers changes to update the gcp roles
• implement custom roles.

[gemini-code-assist]

Important

Installation incomplete: to start using Gemini Code Assist, please ask the organization owner(s) to visit the Gemini Code Assist Admin Console and sign the Terms of Services.

[ksobrenat32]

This is being tested on a personal GCP project with the ID testing-me-460223, feel free to review the permissions over here

I have added the following emails as project owners:

• [email protected] (@damccorm)
• [email protected]
• [email protected] (@pabloem)
• [email protected]

[github-actions]

Assigning reviewers:

R: @shunping added as fallback since no labels match configuration

Note: If you would like to opt out of this review, comment assign to next reviewer.

Available commands:

• stop reviewer notifications - opt out of the automated review tooling
• remind me after tests pass - tag the comment author after tests pass
• waiting on author - shift the attention set back to the author (any comment or push by the author will return the attention set to the reviewers)

The PR bot will only process comments in the main thread (not review comments).

[shunping]

I don't have context of this. @damccorm could you please help find a reviewer for this PR?

[damccorm]

Thanks - I'll defer to @pabloem but this seems like a good starting point to me and I'm comfortable moving forward here

[pabloem]

thanks @damccorm - LGTM pending Danny's comment.