fix: switch ASM enable api, iam flags to native resources

[bharathkkb]

fixes #905

enable_gcp_components seems to modify update the cluster, so leaving it as is.

[comment-bot-dev]

Thanks for the PR! 🚀
✅ Lint checks have passed.

[bharathkkb]

/cc @ameer00 @cloud-pharaoh

[cloud-pharaoh]

I am 100% for using native TF resources rather than bash scripts hidden under TF modules. However, in this case, this module is a wrapper around install_asm.sh. I am concerned that now the burden of maintenance is higher than before where a subset of functionality (albeit minimal with APIs and IAM roles) is in TF and the rest in the script.
I personally think that keeping it as simply a wrapper and letting the script decide if/when to create/destroy/recreate resources with the logic implemented there rather than selecting a flag that would make the module behave inconsistently because some of the functionality is extracted.

[morgante]

My view is that we should only use bash scripts where we need to. Ideally we would eventually throw away the underlying script entirely. This is the approach we have successfully taken with project-factory and I'd like to take it here.

Obviously this does increase the maintenance burden but in general I would rather do that than continue to use a massive bash script which re-implements logic that Terraform should be doing.