Merge remote-tracking branch 'origin/master' into fast-dev

CHANGELOG.md

@@ -7,6 +7,7 @@ All notable changes to this project will be documented in this file.
 
 ### BREAKING CHANGES
 
+- `terraform-provider-google`:  Bump provider to 7.6.0, to allow use of `google_vertex_ai_reasoning_engine` in modules/agent-engine [[#3429](https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/pull/3429)]
 - `modules/project-factory`: the `factories_config` attribute has been removed from project defaults and overrides. [[#3440](https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/pull/3440)]
 - `modules/gke-hub`: Unified cluster configuration. The module now uses a single `clusters` variable to configure both cluster registration and feature enablement. [[#3332](https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/pull/3332)]
 - `all modules`: Minimum supported Terraform version bumped 1.12.2 [[#3332](https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/pull/3332)]
@@ -18,6 +19,7 @@ All notable changes to this project will be documented in this file.
 
 ### FAST
 
+- [[#3429](https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/pull/3429)] Add Agent Engine module. ([LucaPrete](https://github.com/LucaPrete)) <!-- 2025-10-20 15:02:39+00:00 -->
 - [[#3440](https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/pull/3440)] Support resource-level factories config in project factory module and FAST stages ([ludoo](https://github.com/ludoo)) <!-- 2025-10-18 10:41:19+00:00 -->
 - [[#3439](https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/pull/3439)] compatiblity fix: Github CICD templates Terraform version bump to 1.12.2 ([ysolt](https://github.com/ysolt)) <!-- 2025-10-18 08:00:15+00:00 -->
 - [[#3432](https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/pull/3432)] Revert "Added audience to workflow local in 0-org-setup" ([ludoo](https://github.com/ludoo)) <!-- 2025-10-17 12:38:08+00:00 -->
@@ -41,6 +43,8 @@ All notable changes to this project will be documented in this file.
 
 ### MODULES
 
+- [[#3429](https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/pull/3429)] Add Agent Engine module. ([LucaPrete](https://github.com/LucaPrete)) <!-- 2025-10-20 15:02:39+00:00 -->
+- [[#3438](https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/pull/3438)] Add PAM support ([juliocc](https://github.com/juliocc)) <!-- 2025-10-20 12:50:37+00:00 -->
 - [[#3442](https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/pull/3442)] Apply alerts and log based metrics after log buckets creation ([vannicktrinquier](https://github.com/vannicktrinquier)) <!-- 2025-10-20 06:13:42+00:00 -->
 - [[#3440](https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/pull/3440)] Support resource-level factories config in project factory module and FAST stages ([ludoo](https://github.com/ludoo)) <!-- 2025-10-18 10:41:19+00:00 -->
 - [[#3436](https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/pull/3436)] Add service agent outputs to folder and organization ([juliocc](https://github.com/juliocc)) <!-- 2025-10-17 15:23:08+00:00 -->
@@ -77,6 +81,8 @@ All notable changes to this project will be documented in this file.
 
 ### TOOLS
 
+- [[#3429](https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/pull/3429)] Add Agent Engine module. ([LucaPrete](https://github.com/LucaPrete)) <!-- 2025-10-20 15:02:39+00:00 -->
+- [[#3444](https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/pull/3444)] fix Terraform version linter ([wiktorn](https://github.com/wiktorn)) <!-- 2025-10-20 11:52:11+00:00 -->
 - [[#3436](https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/pull/3436)] Add service agent outputs to folder and organization ([juliocc](https://github.com/juliocc)) <!-- 2025-10-17 15:23:08+00:00 -->
 - [[#3407](https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/pull/3407)] remove tf version from matrix, to keep workflow names stable across upgrades ([wiktorn](https://github.com/wiktorn)) <!-- 2025-10-13 15:40:52+00:00 -->
 - [[#3332](https://github.com/GoogleCloudPlatform/cloud-foundation-fabric/pull/3332)] Update gke-hub module to use new Policy Controller API ([juliocc](https://github.com/juliocc)) <!-- 2025-10-13 07:47:40+00:00 -->

default-versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

default-versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

fast/project-templates/managed-kafka/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/__experimental_deprecated/alloydb-instance/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/__experimental_deprecated/alloydb-instance/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/__experimental_deprecated/net-neg/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/__experimental_deprecated/net-neg/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/__experimental_deprecated/project-iam-magic/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/__experimental_deprecated/project-iam-magic/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/agent-engine/README.md

@@ -0,0 +1,248 @@
+# Agent Engine Module
+
+The module creates Agent Engine and related dependencies.
+
+- It can automatically generate and update the Pickle file for you, given a source file.
+- It optionally creates a GCS storage bucket or can use an existing one and loads on it all your dependencies (`pickle`, `dependencies.tar.gz`, `requirements.txt`)
+- Manages the service accounts lifecycle
+
+<!-- BEGIN TOC -->
+- [Packaging dependencies](#packaging-dependencies)
+- [Minimal deployment](#minimal-deployment)
+- [Service accounts](#service-accounts)
+- [Specify an encryption key](#specify-an-encryption-key)
+- [Define environment variables and use secrets](#define-environment-variables-and-use-secrets)
+- [Getting values from context](#getting-values-from-context)
+- [Variables](#variables)
+- [Outputs](#outputs)
+<!-- END TOC -->
+
+## Packaging dependencies
+
+To deploy an agent, you first need package your dependencies. This consists of a folder with
+
+- The source Python file defining your agent to be pickled (or the equivalent pickle file).
+- The `dependencies.tar.gz`.
+- The `requirements.txt` file.
+
+By default, the module expects these files to be in an `src` subfolder.
+
+You can decide to **let the module create the pickle file for you**, starting from a source agent file.
+In this case, the module expects you to have in `src` a source file called `agent.py` with a variable referencing your agent function definition called `local_agent`.
+
+This is an example of `agent.py` file for ADK:
+
+```python
+from google.adk.agents import LlmAgent
+from vertexai.agent_engines import AdkApp
+
+def get_exchange_rate(
+    currency_from: str = "USD",
+    currency_to: str = "EUR",
+    currency_date: str = "latest",
+):
+    import requests
+    response = requests.get(
+        f"https://api.frankfurter.app/{currency_date}",
+        params={"from": currency_from, "to": currency_to},
+    )
+    return response.json()
+
+root_agent = LlmAgent(
+    model="gemini-2.5-flash",
+    instruction="You are a helpful assistant",
+    name='currency_exchange_agent',
+    tools=[get_exchange_rate],
+)
+
+local_agent = AdkApp(agent=root_agent)
+```
+
+The [tools/serialize_agent.py](tools/serialize_agent.py) is used to generate the `pickle.pkl` file.
+You module needs [these packages](tools/requirements.txt) to work.
+
+If you **already have a pickle file**, the module expects you to have in the `src` subfolder a `pickle.pkl` file.
+
+You can customize these values by using the `source_files` variable.
+
+## Minimal deployment
+
+This example assumes you are providing the [source packages](#packaging-dependencies) (`agent.py`, `dependencies.tar.gz` and `requirements.txt`) in the `src` subfolder. Every time you will change the agent definition, the module will generate the new pickle file for you, will update it on the GCS bucket and will update your agent.
+
+```hcl
+module "agent_engine" {
+  source     = "./fabric/modules/agent-engine"
+  name       = "my-agent"
+  project_id = var.project_id
+  region     = var.region
+
+  agent_engine_config = {
+    agent_framework = "google-adk"
+  }
+
+  source_files = {
+    path = "assets/src/"
+  }
+}
+# tftest inventory=minimal.yaml
+```
+
+Alternatively, you can pass a pre-generated `pickle.pkl` file.
+
+```hcl
+module "agent_engine" {
+  source          = "./fabric/modules/agent-engine"
+  name            = "my-agent"
+  project_id      = var.project_id
+  region          = var.region
+  generate_pickle = false
+
+  agent_engine_config = {
+    agent_framework = "google-adk"
+  }
+
+  source_files = {
+    path = "assets/src/"
+  }
+}
+# tftest inventory=minimal-pickle.yaml
+```
+
+## Service accounts
+
+By default, the module creates a dedicated service account for your agent and grants it the roles needed to deploy the agent. The default roles are defined in `var.service_account_config.roles`. You can add more roles, as needed.
+
+You can also use the default Agent Engine (Reasoning Engine) service agent.
+In this case, it will be your responsibility to grant any other role needed to the service agent service account.
+At the moment, you'll need at least to grant to it the `roles/viewer` role.
+
+```hcl
+module "agent_engine" {
+  source     = "./fabric/modules/agent-engine"
+  name       = "my-agent"
+  project_id = var.project_id
+  region     = var.region
+
+  agent_engine_config = {
+    agent_framework = "google-adk"
+  }
+
+  service_account_config = {
+    create = false
+  }
+
+  source_files = {
+    path = "assets/src/"
+  }
+}
+# tftest inventory=sa-default.yaml
+```
+
+Alternatively, you can use an existing service account.
+
+```hcl
+module "agent_engine" {
+  source     = "./fabric/modules/agent-engine"
+  name       = "my-agent"
+  project_id = var.project_id
+  region     = var.region
+
+  agent_engine_config = {
+    agent_framework = "google-adk"
+  }
+
+  service_account_config = {
+    create = false
+    email  = "my-sa@${var.project_id}.iam.gserviceaccount.com"
+  }
+
+  source_files = {
+    path = "assets/src/"
+  }
+}
+# tftest inventory=sa-custom.yaml
+```
+
+## Specify an encryption key
+
+You can optionally specify an existing encryption key, created in KMS.
+
+To use KMS keys you'll need to grant the AI Platform Service Agent (`service-YOUR_PROJECT_NUMBER@gcp-sa-aiplatform-re.iam.gserviceaccount.com`) the `roles/cloudkms.cryptoKeyEncrypterDecrypter` role on the key.
+
+```hcl
+module "agent_engine" {
+  source         = "./fabric/modules/agent-engine"
+  name           = "my-agent"
+  project_id     = var.project_id
+  region         = var.region
+  encryption_key = "projects/${var.project_id}/locations/${var.region}/keyRings/my-keyring/cryptoKeys/my-key"
+
+  agent_engine_config = {
+    agent_framework = "google-adk"
+  }
+
+  source_files = {
+    path = "assets/src/"
+  }
+}
+# tftest inventory=encryption.yaml
+```
+
+## Define environment variables and use secrets
+
+You can define environment variables and load existing secrets as environment variables into your agent. 
+
+```hcl
+module "agent_engine" {
+  source     = "./fabric/modules/agent-engine"
+  name       = "my-agent"
+  project_id = var.project_id
+  region     = var.region
+
+  agent_engine_config = {
+    agent_framework = "google-adk"
+
+    environment_variables = {
+      FOO = "my-foo-variable"
+    }
+    secret_environment_variables = {
+      BAR = {
+        secret_id = "projects/YOUR_PROJECT_NUMBER/secrets/my-bar-secret"
+      }
+    }
+  }
+
+  source_files = {
+    path = "assets/src/"
+  }
+}
+# tftest inventory=environment.yaml
+```
+
+## Getting values from context
+
+The module allows you to dynamically reference context values for resources created outside this module, through the `context` variable. This includes the definition of custom roles, iam_principals, locations, kms_keys and project ids.
+<!-- BEGIN TFDOC -->
+## Variables
+
+| name | description | type | required | default |
+|---|---|:---:|:---:|:---:|
+| [agent_engine_config](variables.tf#L17) | The agent configuration. | <code title="object&#40;&#123;&#10;  agent_framework       &#61; string&#10;  class_methods         &#61; optional&#40;list&#40;any&#41;, &#91;&#93;&#41;&#10;  environment_variables &#61; optional&#40;map&#40;string&#41;, &#123;&#125;&#41;&#10;  python_version        &#61; optional&#40;string, &#34;3.12&#34;&#41;&#10;  secret_environment_variables &#61; optional&#40;map&#40;object&#40;&#123;&#10;    secret_id &#61; string&#10;    version   &#61; optional&#40;string, &#34;latest&#34;&#41;&#10;  &#125;&#41;&#41;, &#123;&#125;&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> | ✓ |  |
+| [name](variables.tf#L77) | The name of the agent. | <code>string</code> | ✓ |  |
+| [project_id](variables.tf#L83) | The id of the project where to deploy the agent. | <code>string</code> | ✓ |  |
+| [region](variables.tf#L89) | The region where to deploy the agent. | <code>string</code> | ✓ |  |
+| [bucket_config](variables.tf#L32) | The GCS bucket configuration. | <code title="object&#40;&#123;&#10;  create                      &#61; optional&#40;bool, true&#41;&#10;  deletion_protection         &#61; optional&#40;bool, true&#41;&#10;  name                        &#61; optional&#40;string&#41;&#10;  uniform_bucket_level_access &#61; optional&#40;bool, true&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>&#123;&#125;</code> |
+| [context](variables.tf#L44) | Context-specific interpolations. | <code title="object&#40;&#123;&#10;  custom_roles   &#61; optional&#40;map&#40;string&#41;, &#123;&#125;&#41;&#10;  iam_principals &#61; optional&#40;map&#40;string&#41;, &#123;&#125;&#41;&#10;  locations      &#61; optional&#40;map&#40;string&#41;, &#123;&#125;&#41;&#10;  kms_keys       &#61; optional&#40;map&#40;string&#41;, &#123;&#125;&#41;&#10;  project_ids    &#61; optional&#40;map&#40;string&#41;, &#123;&#125;&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>&#123;&#125;</code> |
+| [description](variables.tf#L57) | The Agent Engine description. | <code>string</code> |  | <code>&#34;Terraform managed.&#34;</code> |
+| [encryption_key](variables.tf#L64) | The full resource name of the Cloud KMS CryptoKey. | <code>string</code> |  | <code>null</code> |
+| [generate_pickle](variables.tf#L70) | Generate the pickle file from a source file. | <code>bool</code> |  | <code>true</code> |
+| [service_account_config](variables.tf#L95) | Service account configurations. | <code title="object&#40;&#123;&#10;  create &#61; optional&#40;bool, true&#41;&#10;  email  &#61; optional&#40;string&#41;&#10;  name   &#61; optional&#40;string&#41;&#10;  roles &#61; optional&#40;list&#40;string&#41;, &#91;&#10;    &#34;roles&#47;aiplatform.user&#34;,&#10;    &#34;roles&#47;storage.objectViewer&#34;,&#10;    &#34;roles&#47;viewer&#34;&#10;  &#93;&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>&#123;&#125;</code> |
+| [source_files](variables.tf#L112) | The to source files path and names. | <code title="object&#40;&#123;&#10;  dependencies        &#61; optional&#40;string, &#34;dependencies.tar.gz&#34;&#41;&#10;  path                &#61; optional&#40;string, &#34;.&#47;src&#34;&#41;&#10;  pickle_out          &#61; optional&#40;string, &#34;pickle.pkl&#34;&#41;&#10;  pickle_src          &#61; optional&#40;string, &#34;agent.py&#34;&#41;&#10;  pickle_src_var_name &#61; optional&#40;string, &#34;local_agent&#34;&#41;&#10;  requirements        &#61; optional&#40;string, &#34;requirements.txt&#34;&#41;&#10;&#125;&#41;">object&#40;&#123;&#8230;&#125;&#41;</code> |  | <code>&#123;&#125;</code> |
+
+## Outputs
+
+| name | description | sensitive |
+|---|---|:---:|
+| [id](outputs.tf#L17) | Fully qualified Agent Engine id. |  |
+| [service_account](outputs.tf#L22) | Service account resource. |  |
+<!-- END TFDOC -->

modules/agent-engine/main.tf

@@ -0,0 +1,212 @@
+/**
+ * Copyright 2025 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+locals {
+  _ctx_p = "$"
+  _service_account_external_email = (
+    var.service_account_config.email == null
+    ? null
+    : lookup(
+      local.ctx.iam_principals,
+      var.service_account_config.email,
+      var.service_account_config.email
+    )
+  )
+  bucket_name = (
+    var.bucket_config.create
+    ? google_storage_bucket.default[0].name
+    : coalesce(var.bucket_config.name, var.name)
+  )
+  ctx = {
+    for k, v in var.context : k => {
+      for kk, vv in v : "${local._ctx_p}${k}:${kk}" => vv
+    } if k != "condition_vars"
+  }
+  location = lookup(
+    local.ctx.locations, var.region, var.region
+  )
+  project_id = lookup(
+    local.ctx.project_ids, var.project_id, var.project_id
+  )
+  service_account_email = (
+    var.service_account_config.create
+    ? google_service_account.default[0].email
+    : local._service_account_external_email
+  )
+  service_account_roles = [
+    for role in var.service_account_config.roles
+    : lookup(local.ctx.custom_roles, role, role)
+  ]
+}
+
+resource "google_vertex_ai_reasoning_engine" "default" {
+  display_name = var.name
+  project      = local.project_id
+  description  = var.description
+  region       = local.location
+
+  dynamic "encryption_spec" {
+    for_each = var.encryption_key == null ? {} : { 1 = 1 }
+
+    content {
+      kms_key_name = lookup(
+        local.ctx.kms_keys,
+        var.encryption_key,
+        var.encryption_key
+      )
+    }
+  }
+
+  spec {
+    agent_framework = var.agent_engine_config.agent_framework
+    class_methods = (
+      length(var.agent_engine_config.class_methods) > 0
+      ? jsonencode(var.agent_engine_config.class_methods)
+      : null
+    )
+    service_account = local.service_account_email
+
+    dynamic "deployment_spec" {
+      for_each = (
+        # length(var.container_spec) > 0 ||
+        length(var.agent_engine_config.environment_variables) > 0 ||
+        length(var.agent_engine_config.secret_environment_variables) > 0
+        ? { 1 = 1 }
+        : {}
+      )
+
+      content {
+        dynamic "env" {
+          for_each = var.agent_engine_config.environment_variables
+
+          content {
+            name  = env.key
+            value = env.value
+          }
+        }
+
+        dynamic "secret_env" {
+          for_each = var.agent_engine_config.secret_environment_variables
+
+          content {
+            name = secret_env.key
+
+            secret_ref {
+              secret  = secret_env.value.secret_id
+              version = secret_env.value.version
+            }
+          }
+        }
+      }
+    }
+
+    package_spec {
+      python_version           = var.agent_engine_config.python_version
+      dependency_files_gcs_uri = "gs://${local.bucket_name}/${google_storage_bucket_object.dependencies.name}"
+      requirements_gcs_uri     = "gs://${local.bucket_name}/${google_storage_bucket_object.requirements.name}"
+      pickle_object_gcs_uri = (
+        var.generate_pickle
+        ? "gs://${local.bucket_name}/${google_storage_bucket_object.pickle_from_src[0].name}"
+        : "gs://${local.bucket_name}/${google_storage_bucket_object.pickle[0].name}"
+      )
+    }
+  }
+}
+
+# TODO: fix once eventual consistency issue is solved.
+# AE doesn't retry the deployment (yet) if bindings are still not active.
+resource "time_sleep" "wait_5_minutes" {
+  create_duration = "5m"
+
+  depends_on = [
+    google_project_iam_member.default
+  ]
+}
+
+resource "google_storage_bucket" "default" {
+  count                       = var.bucket_config.create ? 1 : 0
+  name                        = coalesce(var.bucket_config.name, var.name)
+  project                     = local.project_id
+  location                    = local.location
+  uniform_bucket_level_access = var.bucket_config.uniform_bucket_level_access
+  force_destroy               = !var.bucket_config.deletion_protection
+}
+
+resource "null_resource" "default" {
+  count = var.generate_pickle ? 1 : 0
+
+  provisioner "local-exec" {
+    command = join(" ", [
+      "python",
+      "./tools/serialize_agent.py",
+      "${var.source_files.path}/${var.source_files.pickle_src}",
+      "--output-file ${var.source_files.path}/${var.source_files.pickle_out}",
+      "--variable-name ${var.source_files.pickle_src_var_name}"
+    ])
+  }
+}
+
+resource "google_storage_bucket_object" "dependencies" {
+  name           = "dependencies.tar.gz"
+  bucket         = local.bucket_name
+  source         = "${var.source_files.path}/${var.source_files.dependencies}"
+  source_md5hash = filemd5("${var.source_files.path}/${var.source_files.dependencies}")
+}
+
+resource "google_storage_bucket_object" "pickle_from_src" {
+  count          = var.generate_pickle ? 1 : 0
+  name           = "pickle.pkl"
+  bucket         = local.bucket_name
+  source         = "${var.source_files.path}/${var.source_files.pickle_out}"
+  source_md5hash = filemd5("${var.source_files.path}/${var.source_files.pickle_out}")
+
+  depends_on = [
+    null_resource.default
+  ]
+}
+
+resource "google_storage_bucket_object" "pickle" {
+  count          = var.generate_pickle ? 0 : 1
+  name           = "pickle.pkl"
+  bucket         = local.bucket_name
+  source         = "${var.source_files.path}/${var.source_files.pickle_out}"
+  source_md5hash = filemd5("${var.source_files.path}/${var.source_files.pickle_out}")
+}
+
+resource "google_storage_bucket_object" "requirements" {
+  name           = "requirements.txt"
+  bucket         = local.bucket_name
+  source         = "${var.source_files.path}/${var.source_files.requirements}"
+  source_md5hash = filemd5("${var.source_files.path}/${var.source_files.requirements}")
+}
+
+resource "google_service_account" "default" {
+  count        = var.service_account_config.create ? 1 : 0
+  account_id   = coalesce(var.service_account_config.name, var.name)
+  project      = local.project_id
+  display_name = "Agent Engine ${coalesce(var.service_account_config.name, var.name)}."
+}
+
+resource "google_project_iam_member" "default" {
+  for_each = (
+    var.service_account_config.create
+    ? toset(local.service_account_roles)
+    : toset([])
+  )
+  role    = each.key
+  project = local.project_id
+  member  = google_service_account.default[0].member
+}

modules/agent-engine/outputs.tf

@@ -0,0 +1,25 @@
+/**
+ * Copyright 2025 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+output "id" {
+  description = "Fully qualified Agent Engine id."
+  value       = google_vertex_ai_reasoning_engine.default.id
+}
+
+output "service_account" {
+  description = "Service account resource."
+  value       = try(google_service_account.default[0], null)
+}

modules/agent-engine/tools/requirements.txt

@@ -0,0 +1 @@
+cloudpickle

modules/agent-engine/tools/serialize_agent.py

@@ -0,0 +1,95 @@
+#!/usr/bin/env python3
+
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+import argparse
+import cloudpickle
+import importlib.util
+import os
+import sys
+from google.adk.agents import LlmAgent
+
+
+def serialize_agent_from_file(input_file, variable_name, output_file):
+  """
+    Dynamically loads a Python module from a full file path, accesses a
+    top-level variable containing an agent object, and serializes that object
+    to a specified output file.
+
+    Args:
+        input_file (str): The full path to the Python source file.
+        variable_name (str): The name of the variable holding the agent object.
+        output_file (str): The full path for the output pickle file.
+    """
+  try:
+    output_dir = os.path.dirname(output_file)
+    if output_dir and not os.path.isdir(output_dir):
+      print(f"Error: The output directory '{output_dir}' does not exist.",
+            file=sys.stderr)
+      return
+
+    module_name = os.path.splitext(os.path.basename(input_file))[0]
+
+    spec = importlib.util.spec_from_file_location(module_name, input_file)
+    if spec is None or spec.loader is None:
+      print(f"Error: Could not import module from {input_file}",
+            file=sys.stderr)
+      return
+
+    module = importlib.util.module_from_spec(spec)
+
+    spec.loader.exec_module(module)
+
+    local_agent = getattr(module, variable_name)
+
+    with open(output_file, "wb") as f:
+      cloudpickle.dump(local_agent, f)
+
+    print(
+        f"Successfully serialized '{variable_name}' from '{input_file}' to '{output_file}'"
+    )
+
+  except FileNotFoundError:
+    print(f"Error: The input file '{input_file}' was not found.",
+          file=sys.stderr)
+  except AttributeError:
+    print(
+        f"Error: The variable '{variable_name}' was not found in '{input_file}'.",
+        file=sys.stderr)
+  except Exception as e:
+    print(f"An unexpected error occurred: {e}", file=sys.stderr)
+
+
+if __name__ == "__main__":
+  parser = argparse.ArgumentParser(
+      description=
+      "Serialize a dynamically loaded agent from a variable in a specified file."
+  )
+  parser.add_argument(
+      "input_file",
+      help="The full path to the Python source file (e.g., 'my_agents/main.py')."
+  )
+  parser.add_argument(
+      "--variable-name", default="local_agent", help=
+      "The name of the agent variable to serialize (default: 'local_agent').")
+  parser.add_argument(
+      "--output-file", default="pickle.pkl", help=
+      "The full path for the output pickle file (e.g., 'output/agent.pkl'). Default is 'pickle.pkl' in the current directory."
+  )
+
+  args = parser.parse_args()
+
+  serialize_agent_from_file(args.input_file, args.variable_name,
+                            args.output_file)

modules/agent-engine/variables.tf

@@ -0,0 +1,124 @@
+/**
+ * Copyright 2025 Google LLC
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *      http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+variable "agent_engine_config" {
+  description = "The agent configuration."
+  type = object({
+    # Add validation once API stabilizes
+    agent_framework       = string
+    class_methods         = optional(list(any), [])
+    environment_variables = optional(map(string), {})
+    python_version        = optional(string, "3.12")
+    secret_environment_variables = optional(map(object({
+      secret_id = string
+      version   = optional(string, "latest")
+    })), {})
+  })
+}
+
+variable "bucket_config" {
+  description = "The GCS bucket configuration."
+  type = object({
+    create                      = optional(bool, true)
+    deletion_protection         = optional(bool, true)
+    name                        = optional(string)
+    uniform_bucket_level_access = optional(bool, true)
+  })
+  nullable = false
+  default  = {}
+}
+
+variable "context" {
+  description = "Context-specific interpolations."
+  type = object({
+    custom_roles   = optional(map(string), {})
+    iam_principals = optional(map(string), {})
+    locations      = optional(map(string), {})
+    kms_keys       = optional(map(string), {})
+    project_ids    = optional(map(string), {})
+  })
+  nullable = false
+  default  = {}
+}
+
+variable "description" {
+  description = "The Agent Engine description."
+  type        = string
+  nullable    = false
+  default     = "Terraform managed."
+}
+
+variable "encryption_key" {
+  description = "The full resource name of the Cloud KMS CryptoKey."
+  type        = string
+  default     = null
+}
+
+variable "generate_pickle" {
+  description = "Generate the pickle file from a source file."
+  type        = bool
+  nullable    = false
+  default     = true
+}
+
+variable "name" {
+  description = "The name of the agent."
+  type        = string
+  nullable    = false
+}
+
+variable "project_id" {
+  description = "The id of the project where to deploy the agent."
+  type        = string
+  nullable    = false
+}
+
+variable "region" {
+  description = "The region where to deploy the agent."
+  type        = string
+  nullable    = false
+}
+
+variable "service_account_config" {
+  description = "Service account configurations."
+  type = object({
+    create = optional(bool, true)
+    email  = optional(string)
+    name   = optional(string)
+    roles = optional(list(string), [
+      "roles/aiplatform.user",
+      "roles/storage.objectViewer",
+      # TODO: remove when b/441480710 is solved
+      "roles/viewer"
+    ])
+  })
+  nullable = false
+  default  = {}
+}
+
+variable "source_files" {
+  description = "The to source files path and names."
+  type = object({
+    dependencies        = optional(string, "dependencies.tar.gz")
+    path                = optional(string, "./src")
+    pickle_out          = optional(string, "pickle.pkl")
+    pickle_src          = optional(string, "agent.py")
+    pickle_src_var_name = optional(string, "local_agent")
+    requirements        = optional(string, "requirements.txt")
+  })
+  nullable = false
+  default  = {}
+}

modules/agent-engine/versions.tf

@@ -0,0 +1,35 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Fabric release: v45.0.0
+
+terraform {
+  required_version = ">= 1.12.2"
+  required_providers {
+    google = {
+      source  = "hashicorp/google"
+      version = ">= 7.6.0, < 8.0.0" # tftest
+    }
+    google-beta = {
+      source  = "hashicorp/google-beta"
+      version = ">= 7.6.0, < 8.0.0" # tftest
+    }
+  }
+  provider_meta "google" {
+    module_name = "google-pso-tool/cloud-foundation-fabric/modules/ai-applications:v45.0.0-tf"
+  }
+  provider_meta "google-beta" {
+    module_name = "google-pso-tool/cloud-foundation-fabric/modules/ai-applications:v45.0.0-tf"
+  }
+}

modules/agent-engine/versions.tofu

@@ -0,0 +1,35 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     https://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# Fabric release: v45.0.0
+
+terraform {
+  required_version = ">= 1.10.0"
+  required_providers {
+    google = {
+      source  = "hashicorp/google"
+      version = ">= 7.6.0, < 8.0.0" # tftest
+    }
+    google-beta = {
+      source  = "hashicorp/google-beta"
+      version = ">= 7.6.0, < 8.0.0" # tftest
+    }
+  }
+  provider_meta "google" {
+    module_name = "google-pso-tool/cloud-foundation-fabric/modules/ai-applications:v45.0.0-tofu"
+  }
+  provider_meta "google-beta" {
+    module_name = "google-pso-tool/cloud-foundation-fabric/modules/ai-applications:v45.0.0-tofu"
+  }
+}

modules/ai-applications/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/ai-applications/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/alloydb/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/alloydb/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/analytics-hub/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/analytics-hub/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/api-gateway/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/api-gateway/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/apigee/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/apigee/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/artifact-registry/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/artifact-registry/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/bigquery-connection/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/bigquery-connection/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/bigquery-dataset/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/bigquery-dataset/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/bigtable-instance/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/bigtable-instance/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/billing-account/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/billing-account/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/binauthz/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/binauthz/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/certificate-authority-service/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/certificate-authority-service/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/certificate-manager/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/certificate-manager/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-build-v2-connection/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-build-v2-connection/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/__need_fixing/onprem/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/__need_fixing/onprem/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/__need_fixing/squid/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/__need_fixing/squid/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/bindplane/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/bindplane/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/coredns/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/coredns/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/cos-generic-metadata/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/cos-generic-metadata/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/envoy-sni-dyn-fwd-proxy/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/envoy-sni-dyn-fwd-proxy/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/envoy-traffic-director/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/envoy-traffic-director/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/mysql/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/mysql/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/nginx-tls/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/nginx-tls/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/nginx/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/nginx/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/simple-nva/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-config-container/simple-nva/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-deploy/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-deploy/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-function-v1/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-function-v1/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-function-v2/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-function-v2/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-identity-group/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-identity-group/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-run-v2/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-run-v2/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-run/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloud-run/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloudsql-instance/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/cloudsql-instance/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/compute-mig/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/compute-mig/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/compute-vm/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/compute-vm/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/container-registry/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/container-registry/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/data-catalog-policy-tag/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/data-catalog-policy-tag/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/data-catalog-tag-template/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/data-catalog-tag-template/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/data-catalog-tag/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/data-catalog-tag/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/dataform-repository/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/dataform-repository/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/datafusion/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/datafusion/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/dataplex-aspect-types/versions.tf

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {

modules/dataplex-aspect-types/versions.tofu

@@ -19,11 +19,11 @@ terraform {
   required_providers {
     google = {
       source  = "hashicorp/google"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
     google-beta = {
       source  = "hashicorp/google-beta"
-      version = ">= 7.0.1, < 8.0.0" # tftest
+      version = ">= 7.6.0, < 8.0.0" # tftest
     }
   }
   provider_meta "google" {