From f1c8458dd5e4641cb03ff175f0837b6d6017c131 Mon Sep 17 00:00:00 2001 From: A Vertex SDK engineer Date: Thu, 18 Dec 2025 14:39:32 -0800 Subject: [PATCH] fix: Make project_number to project_id mapping fail-open. Fixes regression when deploying with IdentityType.AGENT_IDENTIY PiperOrigin-RevId: 846419699 --- vertexai/agent_engines/templates/adk.py | 11 +++++++++-- vertexai/preview/reasoning_engines/templates/adk.py | 11 +++++++++-- 2 files changed, 18 insertions(+), 4 deletions(-) diff --git a/vertexai/agent_engines/templates/adk.py b/vertexai/agent_engines/templates/adk.py index 2a9620ce57..5e80f549ca 100644 --- a/vertexai/agent_engines/templates/adk.py +++ b/vertexai/agent_engines/templates/adk.py @@ -1654,8 +1654,15 @@ def _warn_if_telemetry_api_disabled(self): def project_id(self) -> Optional[str]: if project := self._tmpl_attrs.get("project"): - from google.cloud.aiplatform.utils import resource_manager_utils + try: + from google.cloud.aiplatform.utils import ( + resource_manager_utils, + ) + from google.api_core import exceptions - return resource_manager_utils.get_project_id(project) + return resource_manager_utils.get_project_id(project) + # Fail open as temporary workaround for identity_type config parameter + except (exceptions.PermissionDenied, exceptions.Unauthenticated): + return project return None diff --git a/vertexai/preview/reasoning_engines/templates/adk.py b/vertexai/preview/reasoning_engines/templates/adk.py index c48ff9e8f8..872de508ef 100644 --- a/vertexai/preview/reasoning_engines/templates/adk.py +++ b/vertexai/preview/reasoning_engines/templates/adk.py @@ -1561,8 +1561,15 @@ def _warn_if_telemetry_api_disabled(self): def project_id(self) -> Optional[str]: if project := self._tmpl_attrs.get("project"): - from google.cloud.aiplatform.utils import resource_manager_utils + try: + from google.cloud.aiplatform.utils import ( + resource_manager_utils, + ) + from google.api_core import exceptions - return resource_manager_utils.get_project_id(project) + return resource_manager_utils.get_project_id(project) + # Fail open as temporary workaround for identity_type config parameter + except (exceptions.PermissionDenied, exceptions.Unauthenticated): + return project return None