Add agent engine BYOC support (#3885)

* feat(agent-engine): add support for container and custom image specs - Add container_config to deployment_files. - Add image_spec with build_args to source_config. - Make agent_framework optional and document supported values. - Implement dynamic specs for container and source deployments. - Add examples and automated tests for new deployment types. * chore: update Google provider version to 7.28.0 across modules Mechanical update of versions.tf and versions.tofu files using tools/versions.py. * feat(agent-engine): refactor for container deployments and API alignment - Group deployment settings under 'deployment_config' (renamed from 'deployment_files'). - Support container-based deployments via 'container_config' and 'image_spec'. - Refactor 'source_files_config' (renamed from 'source_config') to include mutually exclusive 'python_spec' and 'image_spec'. - Support 'developer_connect_config' as a source code type. - Group engine settings (framework, env, secrets) under 'agent_engine_config'. - Add support for 'memory_bank_config' persistent memory. - Overhaul reasoning engine resources with dynamic blocks to match provider schema. - Update all documentation examples, add TOC, and refresh test inventories. * Update dynamic python_spec block and related example yamls * Ignore changes setting for developer_connect_source under lifecycle management * fixing review comments for `try` and default path for `source_path` --------- Co-authored-by: Hemanand <hemr@google.com> Co-authored-by: Julio Castillo <jccb@google.com>
2026-04-21 23:16:20 +05:30
parent c8886b4d88
commit eaa420534b
216 changed files with 1077 additions and 695 deletions
--- a/tests/modules/agent_engine/examples/container.yaml
+++ b/tests/modules/agent_engine/examples/container.yaml
@@ -0,0 +1,83 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+values:
+  module.agent_engine.google_project_iam_member.default["roles/aiplatform.user"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/aiplatform.user
+  module.agent_engine.google_project_iam_member.default["roles/storage.objectViewer"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/storage.objectViewer
+  module.agent_engine.google_project_iam_member.default["roles/viewer"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/viewer
+  module.agent_engine.google_service_account.service_account[0]:
+    account_id: my-agent
+    create_ignore_already_exists: null
+    description: null
+    disabled: false
+    display_name: my-agent
+    email: my-agent@project-id.iam.gserviceaccount.com
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    timeouts: null
+  module.agent_engine.google_vertex_ai_reasoning_engine.managed[0]:
+    context_spec: []
+    deletion_policy: null
+    description: Terraform managed.
+    display_name: my-agent
+    effective_labels:
+      goog-terraform-provisioned: 'true'
+    encryption_spec: []
+    labels: null
+    project: project-id
+    region: europe-west8
+    spec:
+    - agent_framework: null
+      class_methods: null
+      container_spec:
+      - image_uri: us-central1-docker.pkg.dev/my-project/my-repo/my-image:latest
+      deployment_spec:
+      - env:
+        - name: FOO
+          value: bar
+        psc_interface_config: []
+        secret_env: []
+      identity_type: null
+      package_spec: []
+      service_account: my-agent@project-id.iam.gserviceaccount.com
+      source_code_spec: []
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
+    timeouts: null
+  module.agent_engine.time_sleep.wait_5_minutes:
+    create_duration: 5m
+    destroy_duration: null
+    triggers: null
+
+counts:
+  google_project_iam_member: 3
+  google_service_account: 1
+  google_vertex_ai_reasoning_engine: 1
+  modules: 1
+  resources: 6
+  time_sleep: 1
+
+outputs: {}
--- a/tests/modules/agent_engine/examples/context.yaml
+++ b/tests/modules/agent_engine/examples/context.yaml
@@ -18,12 +18,16 @@ values:
    deletion_policy: null
    description: Terraform managed.
    display_name: my-agent
+    effective_labels:
+      goog-terraform-provisioned: 'true'
    encryption_spec: []
+    labels: null
    project: test-project-1
    region: europe-west1
    spec:
    - agent_framework: google-adk
      class_methods: null
+      container_spec: []
      deployment_spec:
      - env: []
        psc_interface_config:
@@ -41,13 +45,12 @@ values:
      service_account: my-sa@$test-project-1.iam.gserviceaccount.com
      source_code_spec:
      - developer_connect_source: []
+        image_spec: []
        inline_source:
        - source_archive: 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
-        python_spec:
-        - entrypoint_module: agent
-          entrypoint_object: agent
-          requirements_file: requirements.txt
-          version: '3.13'
+        python_spec: []
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
    timeouts: null
  module.agent_engine.time_sleep.wait_5_minutes:
    create_duration: 5m
--- a/tests/modules/agent_engine/examples/encryption.yaml
+++ b/tests/modules/agent_engine/examples/encryption.yaml
@@ -39,26 +39,33 @@ values:
    project: project-id
    timeouts: null
  module.agent_engine.google_vertex_ai_reasoning_engine.managed[0]:
+    context_spec: []
+    deletion_policy: null
    description: Terraform managed.
    display_name: my-agent
+    effective_labels:
+      goog-terraform-provisioned: 'true'
    encryption_spec:
    - kms_key_name: projects/project-id/locations/europe-west8/keyRings/my-keyring/cryptoKeys/my-key
+    labels: null
    project: project-id
    region: europe-west8
    spec:
    - agent_framework: google-adk
      class_methods: null
+      container_spec: []
      deployment_spec: []
+      identity_type: null
      package_spec: []
      service_account: my-agent@project-id.iam.gserviceaccount.com
      source_code_spec:
-      - inline_source:
+      - developer_connect_source: []
+        image_spec: []
+        inline_source:
        - source_archive: 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
-        python_spec:
-        - entrypoint_module: agent
-          entrypoint_object: agent
-          requirements_file: requirements.txt
-          version: '3.13'
+        python_spec: []
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
    timeouts: null
  module.agent_engine.time_sleep.wait_5_minutes:
    create_duration: 5m
--- a/tests/modules/agent_engine/examples/environment.yaml
+++ b/tests/modules/agent_engine/examples/environment.yaml
@@ -39,33 +39,41 @@ values:
    project: project-id
    timeouts: null
  module.agent_engine.google_vertex_ai_reasoning_engine.managed[0]:
+    context_spec: []
+    deletion_policy: null
    description: Terraform managed.
    display_name: my-agent
+    effective_labels:
+      goog-terraform-provisioned: 'true'
    encryption_spec: []
+    labels: null
    project: project-id
    region: europe-west8
    spec:
    - agent_framework: google-adk
      class_methods: null
+      container_spec: []
      deployment_spec:
      - env:
        - name: FOO
-          value: my-foo-variable
+          value: bar
+        psc_interface_config: []
        secret_env:
-        - name: BAR
+        - name: MY_SECRET
          secret_ref:
-          - secret: projects/YOUR_PROJECT_NUMBER/secrets/my-bar-secret
+          - secret: projects/project-id/secrets/my-secret
            version: latest
+      identity_type: null
      package_spec: []
      service_account: my-agent@project-id.iam.gserviceaccount.com
      source_code_spec:
-      - inline_source:
+      - developer_connect_source: []
+        image_spec: []
+        inline_source:
        - source_archive: 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
-        python_spec:
-        - entrypoint_module: agent
-          entrypoint_object: agent
-          requirements_file: requirements.txt
-          version: '3.13'
+        python_spec: []
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
    timeouts: null
  module.agent_engine.time_sleep.wait_5_minutes:
    create_duration: 5m
--- a/tests/modules/agent_engine/examples/image-spec.yaml
+++ b/tests/modules/agent_engine/examples/image-spec.yaml
@@ -0,0 +1,84 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#      http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+values:
+  module.agent_engine.google_project_iam_member.default["roles/aiplatform.user"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/aiplatform.user
+  module.agent_engine.google_project_iam_member.default["roles/storage.objectViewer"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/storage.objectViewer
+  module.agent_engine.google_project_iam_member.default["roles/viewer"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/viewer
+  module.agent_engine.google_service_account.service_account[0]:
+    account_id: my-agent
+    create_ignore_already_exists: null
+    description: null
+    disabled: false
+    display_name: my-agent
+    email: my-agent@project-id.iam.gserviceaccount.com
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    timeouts: null
+  module.agent_engine.google_vertex_ai_reasoning_engine.managed[0]:
+    context_spec: []
+    deletion_policy: null
+    description: Terraform managed.
+    display_name: my-agent
+    effective_labels:
+      goog-terraform-provisioned: 'true'
+    encryption_spec: []
+    labels: null
+    project: project-id
+    region: europe-west8
+    spec:
+    - agent_framework: google-adk
+      class_methods: null
+      container_spec: []
+      deployment_spec: []
+      identity_type: null
+      package_spec: []
+      service_account: my-agent@project-id.iam.gserviceaccount.com
+      source_code_spec:
+      - developer_connect_source: []
+        image_spec:
+        - build_args:
+            ENV: production
+        inline_source:
+        - source_archive: H4sIAMCUSmkAA+1Y727bNhB3CwzbtM/b55v7oQmQyPprJyk8QE2y1ahrZ7HTriiKgJFom4skqhRV2yj6Hvu8PdL2AgP2CHuAHWXZiZP+C5C4WKsfQNjiHY+/I3l3og7I5AElARU1/VjQFxkTNKKxTHU5kZVrgmEYdceBSiMHVCy34Vo2qP4ZXAdM17Qs1eomGJZp160KTK6LwLuQpZIIpBJmPkkElfQteolgERHToeBZ8ib5zBNY/P5PYDqQsaC5ZWw5DUuzDYgki2jTbNTrzrbrGNt6fatuGbhljvaxuZa4ftxc1J9hHv+24dqGbVyKf8uxl+PfbNgNtwLG9VO5jM88/itffPdl5Xal8oj40O3BL1BA9VW+xmZhe4FNPf/xYSa9fv+w+KtG/Ibtmwsqt876v/V5pJMkCameCP6SxiT2aeXW7cpf//z+1b9/b/15DU6WeBsOFvX/5vLA++o/Bv3F+m869bL+rwJXqf9uA9qt+97h7oPW4319QqQU+puCt+n93PLMbo/tHvRH3c4jzdmGHg5qP33XoHMRX75prAw3X/3fX//Ni/FvNsy6Udb/VWDI+TCkm37Is2CTsCQkcsBF9IwM8UQc03jIYpo+/6Fp6qZl6IZW6JPgNO9zdVPLxybMPw1ps2nrSutje1XiQ3Fw7v6f77meTK97jivc/03LdVX8u65R1v9V4J3139natnXbMvA2ZrlbZVR/gri5qD/DFe7/Rfy7bt0u6/9KUN7/P2uc1f+bywNXuP/P679tO2X9XwWuUv/L+/+nh5uv/u+t/5btXIx/13adsv6vAne+r2WpqJ2wuEbjl5BM5YjHtqbdgV2eTAUbjiSoz3/wU37xh3Z7V7uD0jbzaZzSALIYiwfIEQUvIT7+FJINeExFyngMlm7AmlKoFqLq+j20MOUZRGQKMZeQpRRNsBQGDOegE58mElgMmCiSkKn0AGMmR/k0hREdTTwtTPATSVCboH6CT4PzekBkTlhhJGWS7tRq4/EY849iq3MxrIUzzbTWbu3ud3r7m8g4H3MUhzRNofhGFsDJFFTaYj45QZohGQMXQIaCokxyRXgsmGTxcANSPpBjIihaCVgqBTvJ5NJqzemh0+cVcL1IDFWvB61eFe57vVZvA208afUfdI/68MQ7PPQ6/dZ+D7qHsNvt7LX6rW4Hn34Er/MUHrY6extAca1wGjrBA438kSRT60gDtWg9SpcIDPiMUJpQnw2Yj37FwwzzAgwxN4sY3YGEioilajdTpBeglZBFTBKZ91xySte0geARzD4W6SQ41fM8kyoeXEhoh5GnOmZqOIukE8L0pY9Oc10vOPWSRNO0gA5gSFE+8UdIkR4LIumapjbWz4SgsT89VvZ2AJcTmlA96u1VN5blki+k+0eHF6UBGlzIQ3xIJaqs76BWQUYdBexNsQeXNuFqAZuLXh3pzQgBDKrz00YSpg8EiU8HGfopVOWrvVqa83VBBCAhgkRp85UGC1SVT9WdZR83zitIfl4seSF7rZTWc6YyE/GCsP5ryuO1dS0PckFxfvD2HkK++EWYcR6mmuBczm6H6OJ8x2buRTygYbM6pBGLGYaLuzkISToq3GAxLmHmq8PRrKoYxTjA4BzRMBlkIRA8SJh0Y1moxwRfOO4u+C+2N5/67kwnZ9R8dmn7n+P2aNqc5OyorOWPzTP66+X7RIkSJUpcwn+2Vos4ACgAAA==
+        python_spec: []
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
+    timeouts: null
+  module.agent_engine.time_sleep.wait_5_minutes:
+    create_duration: 5m
+    destroy_duration: null
+    triggers: null
+
+counts:
+  google_project_iam_member: 3
+  google_service_account: 1
+  google_vertex_ai_reasoning_engine: 1
+  modules: 1
+  resources: 6
+  time_sleep: 1
+
+outputs: {}
--- a/tests/modules/agent_engine/examples/minimal-pickle.yaml
+++ b/tests/modules/agent_engine/examples/minimal-pickle.yaml
@@ -79,6 +79,7 @@ values:
    name: dependencies.tar.gz
    retention: []
    source: assets/src/dependencies.tar.gz
+    source_md5hash: 49a4c43e6bef605c2fa6ddabac48ba6a
    temporary_hold: null
    timeouts: null
  module.agent_engine.google_storage_bucket_object.pickle[0]:
@@ -97,6 +98,7 @@ values:
    name: pickle.pkl
    retention: []
    source: assets/src/pickle.pkl
+    source_md5hash: 493cf9bf3e59e39913e61916549f95a5
    temporary_hold: null
    timeouts: null
  module.agent_engine.google_storage_bucket_object.requirements[0]:
@@ -115,18 +117,26 @@ values:
    name: requirements.txt
    retention: []
    source: assets/src/requirements.txt
+    source_md5hash: 0acf2b14e855722af60e03e8fa8b04ff
    temporary_hold: null
    timeouts: null
  module.agent_engine.google_vertex_ai_reasoning_engine.managed[0]:
+    context_spec: []
+    deletion_policy: null
    description: Terraform managed.
    display_name: my-agent
+    effective_labels:
+      goog-terraform-provisioned: 'true'
    encryption_spec: []
+    labels: null
    project: project-id
    region: europe-west8
    spec:
    - agent_framework: google-adk
      class_methods: null
+      container_spec: []
      deployment_spec: []
+      identity_type: null
      package_spec:
      - dependency_files_gcs_uri: gs://my-agent/dependencies.tar.gz
        pickle_object_gcs_uri: gs://my-agent/pickle.pkl
@@ -134,6 +144,8 @@ values:
        requirements_gcs_uri: gs://my-agent/requirements.txt
      service_account: my-agent@project-id.iam.gserviceaccount.com
      source_code_spec: []
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
    timeouts: null
  module.agent_engine.time_sleep.wait_5_minutes:
    create_duration: 5m
--- a/tests/modules/agent_engine/examples/minimal.yaml
+++ b/tests/modules/agent_engine/examples/minimal.yaml
@@ -39,25 +39,32 @@ values:
    project: project-id
    timeouts: null
  module.agent_engine.google_vertex_ai_reasoning_engine.managed[0]:
+    context_spec: []
+    deletion_policy: null
    description: Terraform managed.
    display_name: my-agent
+    effective_labels:
+      goog-terraform-provisioned: 'true'
    encryption_spec: []
+    labels: null
    project: project-id
    region: europe-west8
    spec:
    - agent_framework: google-adk
      class_methods: null
+      container_spec: []
      deployment_spec: []
+      identity_type: null
      package_spec: []
      service_account: my-agent@project-id.iam.gserviceaccount.com
      source_code_spec:
-      - inline_source:
+      - developer_connect_source: []
+        image_spec: []
+        inline_source:
        - source_archive: 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
-        python_spec:
-        - entrypoint_module: agent
-          entrypoint_object: agent
-          requirements_file: requirements.txt
-          version: '3.13'
+        python_spec: []
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
    timeouts: null
  module.agent_engine.time_sleep.wait_5_minutes:
    create_duration: 5m
--- a/tests/modules/agent_engine/examples/pickle-gcs.yaml
+++ b/tests/modules/agent_engine/examples/pickle-gcs.yaml
@@ -38,23 +38,57 @@ values:
    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
    project: project-id
    timeouts: null
+  module.agent_engine.google_storage_bucket.default[0]:
+    autoclass: []
+    cors: []
+    custom_placement_config: []
+    default_event_based_hold: null
+    effective_labels:
+      goog-terraform-provisioned: 'true'
+    enable_object_retention: null
+    encryption: []
+    force_destroy: false
+    hierarchical_namespace: []
+    ip_filter: []
+    labels: null
+    lifecycle_rule: []
+    location: EUROPE-WEST8
+    logging: []
+    name: my-agent
+    project: project-id
+    requester_pays: null
+    retention_policy: []
+    storage_class: STANDARD
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
+    timeouts: null
+    uniform_bucket_level_access: true
  module.agent_engine.google_vertex_ai_reasoning_engine.managed[0]:
+    context_spec: []
+    deletion_policy: null
    description: Terraform managed.
    display_name: my-agent
+    effective_labels:
+      goog-terraform-provisioned: 'true'
    encryption_spec: []
+    labels: null
    project: project-id
    region: europe-west8
    spec:
    - agent_framework: google-adk
      class_methods: null
+      container_spec: []
      deployment_spec: []
+      identity_type: null
      package_spec:
-      - dependency_files_gcs_uri: dependencies.tar.gz
-        pickle_object_gcs_uri: pickle.pkl
+      - dependency_files_gcs_uri: gs://my-bucket/dependencies.tar.gz
+        pickle_object_gcs_uri: gs://my-bucket/pickle.pkl
        python_version: '3.13'
-        requirements_gcs_uri: requirements.txt
+        requirements_gcs_uri: gs://my-bucket/requirements.txt
      service_account: my-agent@project-id.iam.gserviceaccount.com
      source_code_spec: []
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
    timeouts: null
  module.agent_engine.time_sleep.wait_5_minutes:
    create_duration: 5m
@@ -64,9 +98,10 @@ values:
 counts:
  google_project_iam_member: 3
  google_service_account: 1
+  google_storage_bucket: 1
  google_vertex_ai_reasoning_engine: 1
  modules: 1
-  resources: 6
+  resources: 7
  time_sleep: 1

 outputs: {}
--- a/tests/modules/agent_engine/examples/psc-i.yaml
+++ b/tests/modules/agent_engine/examples/psc-i.yaml
@@ -13,17 +13,6 @@
 # limitations under the License.

 values:
-  google_compute_network_attachment.network_attachment:
-    connection_preference: ACCEPT_MANUAL
-    description: Network attachment for Agent Engine PSC-I
-    name: network-attachment
-    producer_accept_lists: null
-    producer_reject_lists: null
-    project: project-id
-    region: europe-west8
-    subnetworks:
-    - subnet_self_link
-    timeouts: null
  module.agent_engine.google_project_iam_member.default["roles/aiplatform.user"]:
    condition: []
    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
@@ -50,35 +39,40 @@ values:
    project: project-id
    timeouts: null
  module.agent_engine.google_vertex_ai_reasoning_engine.managed[0]:
+    context_spec: []
+    deletion_policy: null
    description: Terraform managed.
    display_name: my-agent
+    effective_labels:
+      goog-terraform-provisioned: 'true'
    encryption_spec: []
+    labels: null
    project: project-id
    region: europe-west8
    spec:
    - agent_framework: google-adk
      class_methods: null
+      container_spec: []
      deployment_spec:
      - env: []
        psc_interface_config:
        - dns_peering_configs:
-          - domain: example.com
-            target_network: my-vpc-1
+          - domain: googleapis.com.
+            target_network: my-network
            target_project: project-id
-          - domain: my-company.local
-            target_network: my-vpc-2
-            target_project: my-other-project
+          network_attachment: projects/project-id/regions/europe-west8/networkAttachments/my-nat
        secret_env: []
+      identity_type: null
      package_spec: []
      service_account: my-agent@project-id.iam.gserviceaccount.com
      source_code_spec:
-      - inline_source:
+      - developer_connect_source: []
+        image_spec: []
+        inline_source:
        - source_archive: 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
-        python_spec:
-        - entrypoint_module: agent
-          entrypoint_object: agent
-          requirements_file: requirements.txt
-          version: '3.13'
+        python_spec: []
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
    timeouts: null
  module.agent_engine.time_sleep.wait_5_minutes:
    create_duration: 5m
@@ -86,12 +80,11 @@ values:
    triggers: null

 counts:
-  google_compute_network_attachment: 1
  google_project_iam_member: 3
  google_service_account: 1
  google_vertex_ai_reasoning_engine: 1
  modules: 1
-  resources: 7
+  resources: 6
  time_sleep: 1

 outputs: {}
--- a/tests/modules/agent_engine/examples/sa-custom.yaml
+++ b/tests/modules/agent_engine/examples/sa-custom.yaml
@@ -14,25 +14,32 @@

 values:
  module.agent_engine.google_vertex_ai_reasoning_engine.managed[0]:
+    context_spec: []
+    deletion_policy: null
    description: Terraform managed.
    display_name: my-agent
+    effective_labels:
+      goog-terraform-provisioned: 'true'
    encryption_spec: []
+    labels: null
    project: project-id
    region: europe-west8
    spec:
    - agent_framework: google-adk
      class_methods: null
+      container_spec: []
      deployment_spec: []
+      identity_type: null
      package_spec: []
-      service_account: my-sa@project-id.iam.gserviceaccount.com
+      service_account: my-agent@project-id.iam.gserviceaccount.com
      source_code_spec:
-      - inline_source:
+      - developer_connect_source: []
+        image_spec: []
+        inline_source:
        - source_archive: H4sIAMCUSmkAA+1Y727bNhB3CwzbtM/b55v7oQmQyPprJyk8QE2y1ahrZ7HTriiKgJFom4skqhRV2yj6Hvu8PdL2AgP2CHuAHWXZiZP+C5C4WKsfQNjiHY+/I3l3og7I5AElARU1/VjQFxkTNKKxTHU5kZVrgmEYdceBSiMHVCy34Vo2qP4ZXAdM17Qs1eomGJZp160KTK6LwLuQpZIIpBJmPkkElfQteolgERHToeBZ8ib5zBNY/P5PYDqQsaC5ZWw5DUuzDYgki2jTbNTrzrbrGNt6fatuGbhljvaxuZa4ftxc1J9hHv+24dqGbVyKf8uxl+PfbNgNtwLG9VO5jM88/itffPdl5Xal8oj40O3BL1BA9VW+xmZhe4FNPf/xYSa9fv+w+KtG/Ibtmwsqt876v/V5pJMkCameCP6SxiT2aeXW7cpf//z+1b9/b/15DU6WeBsOFvX/5vLA++o/Bv3F+m869bL+rwJXqf9uA9qt+97h7oPW4319QqQU+puCt+n93PLMbo/tHvRH3c4jzdmGHg5qP33XoHMRX75prAw3X/3fX//Ni/FvNsy6Udb/VWDI+TCkm37Is2CTsCQkcsBF9IwM8UQc03jIYpo+/6Fp6qZl6IZW6JPgNO9zdVPLxybMPw1ps2nrSutje1XiQ3Fw7v6f77meTK97jivc/03LdVX8u65R1v9V4J3139natnXbMvA2ZrlbZVR/gri5qD/DFe7/Rfy7bt0u6/9KUN7/P2uc1f+bywNXuP/P679tO2X9XwWuUv/L+/+nh5uv/u+t/5btXIx/13adsv6vAne+r2WpqJ2wuEbjl5BM5YjHtqbdgV2eTAUbjiSoz3/wU37xh3Z7V7uD0jbzaZzSALIYiwfIEQUvIT7+FJINeExFyngMlm7AmlKoFqLq+j20MOUZRGQKMZeQpRRNsBQGDOegE58mElgMmCiSkKn0AGMmR/k0hREdTTwtTPATSVCboH6CT4PzekBkTlhhJGWS7tRq4/EY849iq3MxrIUzzbTWbu3ud3r7m8g4H3MUhzRNofhGFsDJFFTaYj45QZohGQMXQIaCokxyRXgsmGTxcANSPpBjIihaCVgqBTvJ5NJqzemh0+cVcL1IDFWvB61eFe57vVZvA208afUfdI/68MQ7PPQ6/dZ+D7qHsNvt7LX6rW4Hn34Er/MUHrY6extAca1wGjrBA438kSRT60gDtWg9SpcIDPiMUJpQnw2Yj37FwwzzAgwxN4sY3YGEioilajdTpBeglZBFTBKZ91xySte0geARzD4W6SQ41fM8kyoeXEhoh5GnOmZqOIukE8L0pY9Oc10vOPWSRNO0gA5gSFE+8UdIkR4LIumapjbWz4SgsT89VvZ2AJcTmlA96u1VN5blki+k+0eHF6UBGlzIQ3xIJaqs76BWQUYdBexNsQeXNuFqAZuLXh3pzQgBDKrz00YSpg8EiU8HGfopVOWrvVqa83VBBCAhgkRp85UGC1SVT9WdZR83zitIfl4seSF7rZTWc6YyE/GCsP5ryuO1dS0PckFxfvD2HkK++EWYcR6mmuBczm6H6OJ8x2buRTygYbM6pBGLGYaLuzkISToq3GAxLmHmq8PRrKoYxTjA4BzRMBlkIRA8SJh0Y1moxwRfOO4u+C+2N5/67kwnZ9R8dmn7n+P2aNqc5OyorOWPzTP66+X7RIkSJUpcwn+2Vos4ACgAAA==
-        python_spec:
-        - entrypoint_module: agent
-          entrypoint_object: agent
-          requirements_file: requirements.txt
-          version: '3.13'
+        python_spec: []
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
    timeouts: null
  module.agent_engine.time_sleep.wait_5_minutes:
    create_duration: 5m
--- a/tests/modules/agent_engine/examples/sa-default.yaml
+++ b/tests/modules/agent_engine/examples/sa-default.yaml
@@ -13,26 +13,58 @@
 # limitations under the License.

 values:
+  module.agent_engine.google_project_iam_member.default["roles/aiplatform.user"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/aiplatform.user
+  module.agent_engine.google_project_iam_member.default["roles/storage.objectViewer"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/storage.objectViewer
+  module.agent_engine.google_project_iam_member.default["roles/viewer"]:
+    condition: []
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    role: roles/viewer
+  module.agent_engine.google_service_account.service_account[0]:
+    account_id: my-agent
+    create_ignore_already_exists: null
+    description: null
+    disabled: false
+    display_name: my-agent
+    email: my-agent@project-id.iam.gserviceaccount.com
+    member: serviceAccount:my-agent@project-id.iam.gserviceaccount.com
+    project: project-id
+    timeouts: null
  module.agent_engine.google_vertex_ai_reasoning_engine.managed[0]:
+    context_spec: []
+    deletion_policy: null
    description: Terraform managed.
    display_name: my-agent
+    effective_labels:
+      goog-terraform-provisioned: 'true'
    encryption_spec: []
+    labels: null
    project: project-id
    region: europe-west8
    spec:
    - agent_framework: google-adk
      class_methods: null
+      container_spec: []
      deployment_spec: []
+      identity_type: null
      package_spec: []
-      service_account: null
+      service_account: my-agent@project-id.iam.gserviceaccount.com
      source_code_spec:
-      - inline_source:
+      - developer_connect_source: []
+        image_spec: []
+        inline_source:
        - source_archive: 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
-        python_spec:
-        - entrypoint_module: agent
-          entrypoint_object: agent
-          requirements_file: requirements.txt
-          version: '3.13'
+        python_spec: []
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
    timeouts: null
  module.agent_engine.time_sleep.wait_5_minutes:
    create_duration: 5m
@@ -40,9 +72,11 @@ values:
    triggers: null

 counts:
+  google_project_iam_member: 3
+  google_service_account: 1
  google_vertex_ai_reasoning_engine: 1
  modules: 1
-  resources: 2
+  resources: 6
  time_sleep: 1

 outputs: {}
--- a/tests/modules/agent_engine/examples/unmanaged.yaml
+++ b/tests/modules/agent_engine/examples/unmanaged.yaml
@@ -39,25 +39,32 @@ values:
    project: project-id
    timeouts: null
  module.agent_engine.google_vertex_ai_reasoning_engine.unmanaged[0]:
+    context_spec: []
+    deletion_policy: null
    description: Terraform managed.
    display_name: my-agent
+    effective_labels:
+      goog-terraform-provisioned: 'true'
    encryption_spec: []
+    labels: null
    project: project-id
    region: europe-west8
    spec:
    - agent_framework: google-adk
      class_methods: null
+      container_spec: []
      deployment_spec: []
+      identity_type: null
      package_spec: []
      service_account: my-agent@project-id.iam.gserviceaccount.com
      source_code_spec:
-      - inline_source:
+      - developer_connect_source: []
+        image_spec: []
+        inline_source:
        - source_archive: H4sIAMCUSmkAA+1Y727bNhB3CwzbtM/b55v7oQmQyPprJyk8QE2y1ahrZ7HTriiKgJFom4skqhRV2yj6Hvu8PdL2AgP2CHuAHWXZiZP+C5C4WKsfQNjiHY+/I3l3og7I5AElARU1/VjQFxkTNKKxTHU5kZVrgmEYdceBSiMHVCy34Vo2qP4ZXAdM17Qs1eomGJZp160KTK6LwLuQpZIIpBJmPkkElfQteolgERHToeBZ8ib5zBNY/P5PYDqQsaC5ZWw5DUuzDYgki2jTbNTrzrbrGNt6fatuGbhljvaxuZa4ftxc1J9hHv+24dqGbVyKf8uxl+PfbNgNtwLG9VO5jM88/itffPdl5Xal8oj40O3BL1BA9VW+xmZhe4FNPf/xYSa9fv+w+KtG/Ibtmwsqt876v/V5pJMkCameCP6SxiT2aeXW7cpf//z+1b9/b/15DU6WeBsOFvX/5vLA++o/Bv3F+m869bL+rwJXqf9uA9qt+97h7oPW4319QqQU+puCt+n93PLMbo/tHvRH3c4jzdmGHg5qP33XoHMRX75prAw3X/3fX//Ni/FvNsy6Udb/VWDI+TCkm37Is2CTsCQkcsBF9IwM8UQc03jIYpo+/6Fp6qZl6IZW6JPgNO9zdVPLxybMPw1ps2nrSutje1XiQ3Fw7v6f77meTK97jivc/03LdVX8u65R1v9V4J3139natnXbMvA2ZrlbZVR/gri5qD/DFe7/Rfy7bt0u6/9KUN7/P2uc1f+bywNXuP/P679tO2X9XwWuUv/L+/+nh5uv/u+t/5btXIx/13adsv6vAne+r2WpqJ2wuEbjl5BM5YjHtqbdgV2eTAUbjiSoz3/wU37xh3Z7V7uD0jbzaZzSALIYiwfIEQUvIT7+FJINeExFyngMlm7AmlKoFqLq+j20MOUZRGQKMZeQpRRNsBQGDOegE58mElgMmCiSkKn0AGMmR/k0hREdTTwtTPATSVCboH6CT4PzekBkTlhhJGWS7tRq4/EY849iq3MxrIUzzbTWbu3ud3r7m8g4H3MUhzRNofhGFsDJFFTaYj45QZohGQMXQIaCokxyRXgsmGTxcANSPpBjIihaCVgqBTvJ5NJqzemh0+cVcL1IDFWvB61eFe57vVZvA208afUfdI/68MQ7PPQ6/dZ+D7qHsNvt7LX6rW4Hn34Er/MUHrY6extAca1wGjrBA438kSRT60gDtWg9SpcIDPiMUJpQnw2Yj37FwwzzAgwxN4sY3YGEioilajdTpBeglZBFTBKZ91xySte0geARzD4W6SQ41fM8kyoeXEhoh5GnOmZqOIukE8L0pY9Oc10vOPWSRNO0gA5gSFE+8UdIkR4LIumapjbWz4SgsT89VvZ2AJcTmlA96u1VN5blki+k+0eHF6UBGlzIQ3xIJaqs76BWQUYdBexNsQeXNuFqAZuLXh3pzQgBDKrz00YSpg8EiU8HGfopVOWrvVqa83VBBCAhgkRp85UGC1SVT9WdZR83zitIfl4seSF7rZTWc6YyE/GCsP5ryuO1dS0PckFxfvD2HkK++EWYcR6mmuBczm6H6OJ8x2buRTygYbM6pBGLGYaLuzkISToq3GAxLmHmq8PRrKoYxTjA4BzRMBlkIRA8SJh0Y1moxwRfOO4u+C+2N5/67kwnZ9R8dmn7n+P2aNqc5OyorOWPzTP66+X7RIkSJUpcwn+2Vos4ACgAAA==
-        python_spec:
-        - entrypoint_module: agent
-          entrypoint_object: agent
-          requirements_file: requirements.txt
-          version: '3.13'
+        python_spec: []
+    terraform_labels:
+      goog-terraform-provisioned: 'true'
    timeouts: null
  module.agent_engine.time_sleep.wait_5_minutes:
    create_duration: 5m