fix cloud sql PSA after module upgrade (#2226)

* fix cloud sql PSA after module upgrade
add proxy subnet for ILB
* fix cloud run service accessible from public url in case the service is privately deployed
* add deletion_policy variable in psa_configs for net-vpc module
fix destroy issue with phpIPAM blueprint

modules/net-vpc/variables.tf

@@ -177,6 +177,7 @@ variable "project_id" {
 variable "psa_configs" {
   description = "The Private Service Access configuration."
   type = list(object({
+    deletion_policy  = optional(string, null)
     ranges           = map(string)
     export_routes    = optional(bool, false)
     import_routes    = optional(bool, false)
@@ -193,6 +194,14 @@ variable "psa_configs" {
     )
     error_message = "At most one configuration is possible for each service producer."
   }
+  validation {
+    condition = alltrue([
+      for v in var.psa_configs : (
+        v.deletion_policy == null || v.deletion_policy == "ABANDON"
+      )
+    ])
+    error_message = "Deletion policy supports only ABANDON."
+  }
 }
 
 variable "routes" {