In #5, I decided to only smoke test cert-manager itself as opposed to testing both cert-manager and google-cas-issuer.
Today, I discovered that the testrunner that we use for the smoke tests has a "GCP runtime config" support built-in. Google Cloud Runtime Config could allow us to create the necessary GCP serviceaccount and bindings required for the CAS issuer smoke test.