Merge remote-tracking branch 'origin/master' into fast-dev

tests/examples_e2e/setup_module/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

tests/examples_e2e/setup_module/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

tests/modules/agent_engine/assets/src/agent.py

@@ -0,0 +1,40 @@
+#!/usr/bin/env python3
+
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+from google.adk.agents import LlmAgent
+from vertexai.agent_engines import AdkApp
+
+def get_exchange_rate(
+    currency_from: str = "USD",
+    currency_to: str = "EUR",
+    currency_date: str = "latest",
+):
+    import requests
+    response = requests.get(
+        f"https://api.frankfurter.app/{currency_date}",
+        params={"from": currency_from, "to": currency_to},
+    )
+    return response.json()
+
+# Create ADK agent with tools
+root_agent = LlmAgent(
+    model="gemini-2.5-flash",
+    instruction="You are a helpful assistant",
+    name='currency_exchange_agent',
+    tools=[get_exchange_rate],
+)
+
+local_agent = AdkApp(agent=root_agent)

tests/modules/agent_engine/assets/src/requirements.txt

@@ -0,0 +1,3 @@
+google-cloud-aiplatform[agent_engines]>=1.120.0
+google-adk>=1.15.1
+cloudpickle==3.0.0

tests/modules/agent_engine/examples/encryption.yaml

@@ -0,0 +1,156 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+values:
+  module.agent_engine.google_project_iam_member.default["roles/aiplatform.user"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/aiplatform.user
+  module.agent_engine.google_project_iam_member.default["roles/storage.objectViewer"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/storage.objectViewer
+  module.agent_engine.google_project_iam_member.default["roles/viewer"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/viewer
+  module.agent_engine.google_service_account.default[0]:
+    account_id: my-agent
+    create_ignore_already_exists: null
+    description: null
+    disabled: false
+    display_name: Agent Engine my-agent.
+    email: my-agent@project-id.iam.gserviceaccount.com
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    timeouts: null
+  module.agent_engine.google_storage_bucket.default[0]:
+    autoclass: []
+    cors: []
+    custom_placement_config: []
+    default_event_based_hold: null
+    effective_labels:
+      goog-terraform-provisioned: 'true'
+    enable_object_retention: null
+    encryption: []
+    force_destroy: false
+    hierarchical_namespace: []
+    ip_filter: []
+    labels: null
+    lifecycle_rule: []
+    location: EUROPE-WEST8
+    logging: []
+    name: my-agent
+    project: project-id
+    requester_pays: null
+    retention_policy: []
+    storage_class: STANDARD
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
+    timeouts: null
+    uniform_bucket_level_access: true
+  module.agent_engine.google_storage_bucket_object.dependencies:
+    bucket: my-agent
+    cache_control: null
+    content_disposition: null
+    content_encoding: null
+    content_language: null
+    customer_encryption: []
+    deletion_policy: null
+    detect_md5hash: null
+    event_based_hold: null
+    force_empty_content_type: null
+    metadata: null
+    name: dependencies.tar.gz
+    retention: []
+    source: assets/src//dependencies.tar.gz
+    source_md5hash: 49a4c43e6bef605c2fa6ddabac48ba6a
+    temporary_hold: null
+    timeouts: null
+  module.agent_engine.google_storage_bucket_object.pickle_from_src[0]:
+    bucket: my-agent
+    cache_control: null
+    content_disposition: null
+    content_encoding: null
+    content_language: null
+    customer_encryption: []
+    deletion_policy: null
+    detect_md5hash: null
+    event_based_hold: null
+    force_empty_content_type: null
+    metadata: null
+    name: pickle.pkl
+    retention: []
+    source: assets/src//pickle.pkl
+    source_md5hash: 493cf9bf3e59e39913e61916549f95a5
+    temporary_hold: null
+    timeouts: null
+  module.agent_engine.google_storage_bucket_object.requirements:
+    bucket: my-agent
+    cache_control: null
+    content_disposition: null
+    content_encoding: null
+    content_language: null
+    customer_encryption: []
+    deletion_policy: null
+    detect_md5hash: null
+    event_based_hold: null
+    force_empty_content_type: null
+    metadata: null
+    name: requirements.txt
+    retention: []
+    source: assets/src//requirements.txt
+    source_md5hash: 0acf2b14e855722af60e03e8fa8b04ff
+    temporary_hold: null
+    timeouts: null
+  module.agent_engine.google_vertex_ai_reasoning_engine.default:
+    description: Terraform managed.
+    display_name: my-agent
+    encryption_spec:
+    - kms_key_name: projects/project-id/locations/europe-west8/keyRings/my-keyring/cryptoKeys/my-key
+    project: project-id
+    region: europe-west8
+    spec:
+    - agent_framework: google-adk
+      class_methods: null
+      deployment_spec: []
+      package_spec:
+      - dependency_files_gcs_uri: gs://my-agent/dependencies.tar.gz
+        pickle_object_gcs_uri: gs://my-agent/pickle.pkl
+        python_version: '3.12'
+        requirements_gcs_uri: gs://my-agent/requirements.txt
+      service_account: my-agent@project-id.iam.gserviceaccount.com
+    timeouts: null
+  module.agent_engine.null_resource.default[0]:
+    triggers: null
+  module.agent_engine.time_sleep.wait_5_minutes:
+    create_duration: 5m
+    destroy_duration: null
+    triggers: null
+
+counts:
+  google_project_iam_member: 3
+  google_service_account: 1
+  google_storage_bucket: 1
+  google_storage_bucket_object: 3
+  google_vertex_ai_reasoning_engine: 1
+  modules: 1
+  null_resource: 1
+  resources: 11
+  time_sleep: 1
+
+outputs: {}

tests/modules/agent_engine/examples/environment.yaml

@@ -0,0 +1,163 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+values:
+  module.agent_engine.google_project_iam_member.default["roles/aiplatform.user"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/aiplatform.user
+  module.agent_engine.google_project_iam_member.default["roles/storage.objectViewer"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/storage.objectViewer
+  module.agent_engine.google_project_iam_member.default["roles/viewer"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/viewer
+  module.agent_engine.google_service_account.default[0]:
+    account_id: my-agent
+    create_ignore_already_exists: null
+    description: null
+    disabled: false
+    display_name: Agent Engine my-agent.
+    email: my-agent@project-id.iam.gserviceaccount.com
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    timeouts: null
+  module.agent_engine.google_storage_bucket.default[0]:
+    autoclass: []
+    cors: []
+    custom_placement_config: []
+    default_event_based_hold: null
+    effective_labels:
+      goog-terraform-provisioned: 'true'
+    enable_object_retention: null
+    encryption: []
+    force_destroy: false
+    hierarchical_namespace: []
+    ip_filter: []
+    labels: null
+    lifecycle_rule: []
+    location: EUROPE-WEST8
+    logging: []
+    name: my-agent
+    project: project-id
+    requester_pays: null
+    retention_policy: []
+    storage_class: STANDARD
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
+    timeouts: null
+    uniform_bucket_level_access: true
+  module.agent_engine.google_storage_bucket_object.dependencies:
+    bucket: my-agent
+    cache_control: null
+    content_disposition: null
+    content_encoding: null
+    content_language: null
+    customer_encryption: []
+    deletion_policy: null
+    detect_md5hash: null
+    event_based_hold: null
+    force_empty_content_type: null
+    metadata: null
+    name: dependencies.tar.gz
+    retention: []
+    source: assets/src//dependencies.tar.gz
+    source_md5hash: 49a4c43e6bef605c2fa6ddabac48ba6a
+    temporary_hold: null
+    timeouts: null
+  module.agent_engine.google_storage_bucket_object.pickle_from_src[0]:
+    bucket: my-agent
+    cache_control: null
+    content_disposition: null
+    content_encoding: null
+    content_language: null
+    customer_encryption: []
+    deletion_policy: null
+    detect_md5hash: null
+    event_based_hold: null
+    force_empty_content_type: null
+    metadata: null
+    name: pickle.pkl
+    retention: []
+    source: assets/src//pickle.pkl
+    source_md5hash: 493cf9bf3e59e39913e61916549f95a5
+    temporary_hold: null
+    timeouts: null
+  module.agent_engine.google_storage_bucket_object.requirements:
+    bucket: my-agent
+    cache_control: null
+    content_disposition: null
+    content_encoding: null
+    content_language: null
+    customer_encryption: []
+    deletion_policy: null
+    detect_md5hash: null
+    event_based_hold: null
+    force_empty_content_type: null
+    metadata: null
+    name: requirements.txt
+    retention: []
+    source: assets/src//requirements.txt
+    source_md5hash: 0acf2b14e855722af60e03e8fa8b04ff
+    temporary_hold: null
+    timeouts: null
+  module.agent_engine.google_vertex_ai_reasoning_engine.default:
+    description: Terraform managed.
+    display_name: my-agent
+    encryption_spec: []
+    project: project-id
+    region: europe-west8
+    spec:
+    - agent_framework: google-adk
+      class_methods: null
+      deployment_spec:
+      - env:
+        - name: FOO
+          value: my-foo-variable
+        secret_env:
+        - name: BAR
+          secret_ref:
+          - secret: projects/YOUR_PROJECT_NUMBER/secrets/my-bar-secret
+            version: latest
+      package_spec:
+      - dependency_files_gcs_uri: gs://my-agent/dependencies.tar.gz
+        pickle_object_gcs_uri: gs://my-agent/pickle.pkl
+        python_version: '3.12'
+        requirements_gcs_uri: gs://my-agent/requirements.txt
+      service_account: my-agent@project-id.iam.gserviceaccount.com
+    timeouts: null
+  module.agent_engine.null_resource.default[0]:
+    triggers: null
+  module.agent_engine.time_sleep.wait_5_minutes:
+    create_duration: 5m
+    destroy_duration: null
+    triggers: null
+
+counts:
+  google_project_iam_member: 3
+  google_service_account: 1
+  google_storage_bucket: 1
+  google_storage_bucket_object: 3
+  google_vertex_ai_reasoning_engine: 1
+  modules: 1
+  null_resource: 1
+  resources: 11
+  time_sleep: 1
+
+outputs: {}

tests/modules/agent_engine/examples/minimal-pickle.yaml

@@ -0,0 +1,152 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+values:
+  module.agent_engine.google_project_iam_member.default["roles/aiplatform.user"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/aiplatform.user
+  module.agent_engine.google_project_iam_member.default["roles/storage.objectViewer"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/storage.objectViewer
+  module.agent_engine.google_project_iam_member.default["roles/viewer"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/viewer
+  module.agent_engine.google_service_account.default[0]:
+    account_id: my-agent
+    create_ignore_already_exists: null
+    description: null
+    disabled: false
+    display_name: Agent Engine my-agent.
+    email: my-agent@project-id.iam.gserviceaccount.com
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    timeouts: null
+  module.agent_engine.google_storage_bucket.default[0]:
+    autoclass: []
+    cors: []
+    custom_placement_config: []
+    default_event_based_hold: null
+    effective_labels:
+      goog-terraform-provisioned: 'true'
+    enable_object_retention: null
+    encryption: []
+    force_destroy: false
+    hierarchical_namespace: []
+    ip_filter: []
+    labels: null
+    lifecycle_rule: []
+    location: EUROPE-WEST8
+    logging: []
+    name: my-agent
+    project: project-id
+    requester_pays: null
+    retention_policy: []
+    storage_class: STANDARD
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
+    timeouts: null
+    uniform_bucket_level_access: true
+  module.agent_engine.google_storage_bucket_object.dependencies:
+    bucket: my-agent
+    cache_control: null
+    content_disposition: null
+    content_encoding: null
+    content_language: null
+    customer_encryption: []
+    deletion_policy: null
+    detect_md5hash: null
+    event_based_hold: null
+    force_empty_content_type: null
+    metadata: null
+    name: dependencies.tar.gz
+    retention: []
+    source: assets/src//dependencies.tar.gz
+    source_md5hash: 49a4c43e6bef605c2fa6ddabac48ba6a
+    temporary_hold: null
+    timeouts: null
+  module.agent_engine.google_storage_bucket_object.pickle[0]:
+    bucket: my-agent
+    cache_control: null
+    content_disposition: null
+    content_encoding: null
+    content_language: null
+    customer_encryption: []
+    deletion_policy: null
+    detect_md5hash: null
+    event_based_hold: null
+    force_empty_content_type: null
+    metadata: null
+    name: pickle.pkl
+    retention: []
+    source: assets/src//pickle.pkl
+    source_md5hash: 493cf9bf3e59e39913e61916549f95a5
+    temporary_hold: null
+    timeouts: null
+  module.agent_engine.google_storage_bucket_object.requirements:
+    bucket: my-agent
+    cache_control: null
+    content_disposition: null
+    content_encoding: null
+    content_language: null
+    customer_encryption: []
+    deletion_policy: null
+    detect_md5hash: null
+    event_based_hold: null
+    force_empty_content_type: null
+    metadata: null
+    name: requirements.txt
+    retention: []
+    source: assets/src//requirements.txt
+    source_md5hash: 0acf2b14e855722af60e03e8fa8b04ff
+    temporary_hold: null
+    timeouts: null
+  module.agent_engine.google_vertex_ai_reasoning_engine.default:
+    description: Terraform managed.
+    display_name: my-agent
+    encryption_spec: []
+    project: project-id
+    region: europe-west8
+    spec:
+    - agent_framework: google-adk
+      class_methods: null
+      deployment_spec: []
+      package_spec:
+      - dependency_files_gcs_uri: gs://my-agent/dependencies.tar.gz
+        pickle_object_gcs_uri: gs://my-agent/pickle.pkl
+        python_version: '3.12'
+        requirements_gcs_uri: gs://my-agent/requirements.txt
+      service_account: my-agent@project-id.iam.gserviceaccount.com
+    timeouts: null
+  module.agent_engine.time_sleep.wait_5_minutes:
+    create_duration: 5m
+    destroy_duration: null
+    triggers: null
+
+counts:
+  google_project_iam_member: 3
+  google_service_account: 1
+  google_storage_bucket: 1
+  google_storage_bucket_object: 3
+  google_vertex_ai_reasoning_engine: 1
+  modules: 1
+  resources: 10
+  time_sleep: 1
+
+outputs: {}

tests/modules/agent_engine/examples/minimal.yaml

@@ -0,0 +1,155 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+values:
+  module.agent_engine.google_project_iam_member.default["roles/aiplatform.user"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/aiplatform.user
+  module.agent_engine.google_project_iam_member.default["roles/storage.objectViewer"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/storage.objectViewer
+  module.agent_engine.google_project_iam_member.default["roles/viewer"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/viewer
+  module.agent_engine.google_service_account.default[0]:
+    account_id: my-agent
+    create_ignore_already_exists: null
+    description: null
+    disabled: false
+    display_name: Agent Engine my-agent.
+    email: my-agent@project-id.iam.gserviceaccount.com
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    timeouts: null
+  module.agent_engine.google_storage_bucket.default[0]:
+    autoclass: []
+    cors: []
+    custom_placement_config: []
+    default_event_based_hold: null
+    effective_labels:
+      goog-terraform-provisioned: 'true'
+    enable_object_retention: null
+    encryption: []
+    force_destroy: false
+    hierarchical_namespace: []
+    ip_filter: []
+    labels: null
+    lifecycle_rule: []
+    location: EUROPE-WEST8
+    logging: []
+    name: my-agent
+    project: project-id
+    requester_pays: null
+    retention_policy: []
+    storage_class: STANDARD
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
+    timeouts: null
+    uniform_bucket_level_access: true
+  module.agent_engine.google_storage_bucket_object.dependencies:
+    bucket: my-agent
+    cache_control: null
+    content_disposition: null
+    content_encoding: null
+    content_language: null
+    customer_encryption: []
+    deletion_policy: null
+    detect_md5hash: null
+    event_based_hold: null
+    force_empty_content_type: null
+    metadata: null
+    name: dependencies.tar.gz
+    retention: []
+    source: assets/src//dependencies.tar.gz
+    source_md5hash: 49a4c43e6bef605c2fa6ddabac48ba6a
+    temporary_hold: null
+    timeouts: null
+  module.agent_engine.google_storage_bucket_object.pickle_from_src[0]:
+    bucket: my-agent
+    cache_control: null
+    content_disposition: null
+    content_encoding: null
+    content_language: null
+    customer_encryption: []
+    deletion_policy: null
+    detect_md5hash: null
+    event_based_hold: null
+    force_empty_content_type: null
+    metadata: null
+    name: pickle.pkl
+    retention: []
+    source: assets/src//pickle.pkl
+    source_md5hash: 493cf9bf3e59e39913e61916549f95a5
+    temporary_hold: null
+    timeouts: null
+  module.agent_engine.google_storage_bucket_object.requirements:
+    bucket: my-agent
+    cache_control: null
+    content_disposition: null
+    content_encoding: null
+    content_language: null
+    customer_encryption: []
+    deletion_policy: null
+    detect_md5hash: null
+    event_based_hold: null
+    force_empty_content_type: null
+    metadata: null
+    name: requirements.txt
+    retention: []
+    source: assets/src//requirements.txt
+    source_md5hash: 0acf2b14e855722af60e03e8fa8b04ff
+    temporary_hold: null
+    timeouts: null
+  module.agent_engine.google_vertex_ai_reasoning_engine.default:
+    description: Terraform managed.
+    display_name: my-agent
+    encryption_spec: []
+    project: project-id
+    region: europe-west8
+    spec:
+    - agent_framework: google-adk
+      class_methods: null
+      deployment_spec: []
+      package_spec:
+      - dependency_files_gcs_uri: gs://my-agent/dependencies.tar.gz
+        pickle_object_gcs_uri: gs://my-agent/pickle.pkl
+        python_version: '3.12'
+        requirements_gcs_uri: gs://my-agent/requirements.txt
+      service_account: my-agent@project-id.iam.gserviceaccount.com
+    timeouts: null
+  module.agent_engine.null_resource.default[0]:
+    triggers: null
+  module.agent_engine.time_sleep.wait_5_minutes:
+    create_duration: 5m
+    destroy_duration: null
+    triggers: null
+
+counts:
+  google_project_iam_member: 3
+  google_service_account: 1
+  google_storage_bucket: 1
+  google_storage_bucket_object: 3
+  google_vertex_ai_reasoning_engine: 1
+  modules: 1
+  null_resource: 1
+  resources: 11
+  time_sleep: 1
+
+outputs: {}

tests/modules/agent_engine/examples/sa-custom.yaml

@@ -0,0 +1,128 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+values:
+  module.agent_engine.google_storage_bucket.default[0]:
+    autoclass: []
+    cors: []
+    custom_placement_config: []
+    default_event_based_hold: null
+    effective_labels:
+      goog-terraform-provisioned: 'true'
+    enable_object_retention: null
+    encryption: []
+    force_destroy: false
+    hierarchical_namespace: []
+    ip_filter: []
+    labels: null
+    lifecycle_rule: []
+    location: EUROPE-WEST8
+    logging: []
+    name: my-agent
+    project: project-id
+    requester_pays: null
+    retention_policy: []
+    storage_class: STANDARD
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
+    timeouts: null
+    uniform_bucket_level_access: true
+  module.agent_engine.google_storage_bucket_object.dependencies:
+    bucket: my-agent
+    cache_control: null
+    content_disposition: null
+    content_encoding: null
+    content_language: null
+    customer_encryption: []
+    deletion_policy: null
+    detect_md5hash: null
+    event_based_hold: null
+    force_empty_content_type: null
+    metadata: null
+    name: dependencies.tar.gz
+    retention: []
+    source: assets/src//dependencies.tar.gz
+    source_md5hash: 49a4c43e6bef605c2fa6ddabac48ba6a
+    temporary_hold: null
+    timeouts: null
+  module.agent_engine.google_storage_bucket_object.pickle_from_src[0]:
+    bucket: my-agent
+    cache_control: null
+    content_disposition: null
+    content_encoding: null
+    content_language: null
+    customer_encryption: []
+    deletion_policy: null
+    detect_md5hash: null
+    event_based_hold: null
+    force_empty_content_type: null
+    metadata: null
+    name: pickle.pkl
+    retention: []
+    source: assets/src//pickle.pkl
+    source_md5hash: 493cf9bf3e59e39913e61916549f95a5
+    temporary_hold: null
+    timeouts: null
+  module.agent_engine.google_storage_bucket_object.requirements:
+    bucket: my-agent
+    cache_control: null
+    content_disposition: null
+    content_encoding: null
+    content_language: null
+    customer_encryption: []
+    deletion_policy: null
+    detect_md5hash: null
+    event_based_hold: null
+    force_empty_content_type: null
+    metadata: null
+    name: requirements.txt
+    retention: []
+    source: assets/src//requirements.txt
+    source_md5hash: 0acf2b14e855722af60e03e8fa8b04ff
+    temporary_hold: null
+    timeouts: null
+  module.agent_engine.google_vertex_ai_reasoning_engine.default:
+    description: Terraform managed.
+    display_name: my-agent
+    encryption_spec: []
+    project: project-id
+    region: europe-west8
+    spec:
+    - agent_framework: google-adk
+      class_methods: null
+      deployment_spec: []
+      package_spec:
+      - dependency_files_gcs_uri: gs://my-agent/dependencies.tar.gz
+        pickle_object_gcs_uri: gs://my-agent/pickle.pkl
+        python_version: '3.12'
+        requirements_gcs_uri: gs://my-agent/requirements.txt
+      service_account: my-sa@project-id.iam.gserviceaccount.com
+    timeouts: null
+  module.agent_engine.null_resource.default[0]:
+    triggers: null
+  module.agent_engine.time_sleep.wait_5_minutes:
+    create_duration: 5m
+    destroy_duration: null
+    triggers: null
+
+counts:
+  google_storage_bucket: 1
+  google_storage_bucket_object: 3
+  google_vertex_ai_reasoning_engine: 1
+  modules: 1
+  null_resource: 1
+  resources: 7
+  time_sleep: 1
+
+outputs: {}

tests/modules/agent_engine/examples/sa-default.yaml

@@ -0,0 +1,128 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+values:
+  module.agent_engine.google_storage_bucket.default[0]:
+    autoclass: []
+    cors: []
+    custom_placement_config: []
+    default_event_based_hold: null
+    effective_labels:
+      goog-terraform-provisioned: 'true'
+    enable_object_retention: null
+    encryption: []
+    force_destroy: false
+    hierarchical_namespace: []
+    ip_filter: []
+    labels: null
+    lifecycle_rule: []
+    location: EUROPE-WEST8
+    logging: []
+    name: my-agent
+    project: project-id
+    requester_pays: null
+    retention_policy: []
+    storage_class: STANDARD
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
+    timeouts: null
+    uniform_bucket_level_access: true
+  module.agent_engine.google_storage_bucket_object.dependencies:
+    bucket: my-agent
+    cache_control: null
+    content_disposition: null
+    content_encoding: null
+    content_language: null
+    customer_encryption: []
+    deletion_policy: null
+    detect_md5hash: null
+    event_based_hold: null
+    force_empty_content_type: null
+    metadata: null
+    name: dependencies.tar.gz
+    retention: []
+    source: assets/src//dependencies.tar.gz
+    source_md5hash: 49a4c43e6bef605c2fa6ddabac48ba6a
+    temporary_hold: null
+    timeouts: null
+  module.agent_engine.google_storage_bucket_object.pickle_from_src[0]:
+    bucket: my-agent
+    cache_control: null
+    content_disposition: null
+    content_encoding: null
+    content_language: null
+    customer_encryption: []
+    deletion_policy: null
+    detect_md5hash: null
+    event_based_hold: null
+    force_empty_content_type: null
+    metadata: null
+    name: pickle.pkl
+    retention: []
+    source: assets/src//pickle.pkl
+    source_md5hash: 493cf9bf3e59e39913e61916549f95a5
+    temporary_hold: null
+    timeouts: null
+  module.agent_engine.google_storage_bucket_object.requirements:
+    bucket: my-agent
+    cache_control: null
+    content_disposition: null
+    content_encoding: null
+    content_language: null
+    customer_encryption: []
+    deletion_policy: null
+    detect_md5hash: null
+    event_based_hold: null
+    force_empty_content_type: null
+    metadata: null
+    name: requirements.txt
+    retention: []
+    source: assets/src//requirements.txt
+    source_md5hash: 0acf2b14e855722af60e03e8fa8b04ff
+    temporary_hold: null
+    timeouts: null
+  module.agent_engine.google_vertex_ai_reasoning_engine.default:
+    description: Terraform managed.
+    display_name: my-agent
+    encryption_spec: []
+    project: project-id
+    region: europe-west8
+    spec:
+    - agent_framework: google-adk
+      class_methods: null
+      deployment_spec: []
+      package_spec:
+      - dependency_files_gcs_uri: gs://my-agent/dependencies.tar.gz
+        pickle_object_gcs_uri: gs://my-agent/pickle.pkl
+        python_version: '3.12'
+        requirements_gcs_uri: gs://my-agent/requirements.txt
+      service_account: null
+    timeouts: null
+  module.agent_engine.null_resource.default[0]:
+    triggers: null
+  module.agent_engine.time_sleep.wait_5_minutes:
+    create_duration: 5m
+    destroy_duration: null
+    triggers: null
+
+counts:
+  google_storage_bucket: 1
+  google_storage_bucket_object: 3
+  google_vertex_ai_reasoning_engine: 1
+  modules: 1
+  null_resource: 1
+  resources: 7
+  time_sleep: 1
+
+outputs: {}

tests/requirements.txt

@@ -1,3 +1,4 @@
+cloudpickle>=3.1.1
 pytest>=7.2.1
 PyYAML>=6.0
 tftest>=1.8.1