Add IAM policy support for google_iap_agent_registry_agent

mmv1/products/iap/AgentRegistryAgent.yaml

@@ -0,0 +1,58 @@
+---
+# Copyright 2026 Google Inc.
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+name: AgentRegistryAgent
+description: |
+  Only used to generate IAM resources
+docs:
+base_url: projects/{{project}}/locations/{{location}}/iap_web/agentRegistry/agents/{{agentId}}
+self_link: projects/{{project}}/locations/{{location}}/iap_web/agentRegistry/agents/{{agentId}}
+iam_policy:
+  method_name_separator: ':'
+  parent_resource_type: google_project_service
+  parent_is_resource_id: true
+  fetch_iam_policy_verb: POST
+  allowed_iam_role: roles/iap.egressor
+  parent_resource_attribute: agent_id
+  sample_config_body: templates/terraform/iam/example_config_body/iap_agent_registry_agent.tf.tmpl
+  iam_conditions_request_type: REQUEST_BODY
+# This resource is only used to generate IAM resources. They do not correspond to real
+# GCP resources, and should not be used to generate anything other than IAM support.
+exclude_resource: true
+id_format: projects/{{project}}/locations/{{location}}/iap_web/agentRegistry/agents/{{agentId}}
+import_format:
+  - projects/{{project}}/locations/{{location}}/iap_web/agentRegistry/agents/{{agentId}}
+  - '{{agentId}}'
+timeouts:
+  insert_minutes: 20
+  update_minutes: 20
+  delete_minutes: 20
+exclude_tgc: true
+samples:
+  - name: project
+    primary_resource_id: project_service
+    steps:
+      - name: project
+        config_path: templates/terraform/samples/services/iap/iap_existing_project_agent.tf.tmpl
+        test_env_vars:
+          project: PROJECT_NAME
+parameters:
+  - name: location
+    type: String
+    required: true
+    description: The location of the resource.
+properties:
+  - name: agentId
+    type: String
+    description: The ID of the Agent.
+    required: true

mmv1/templates/terraform/iam/example_config_body/iap_agent_registry_agent.tf.tmpl

@@ -0,0 +1,3 @@
+  project = "%{project}"
+  location = "us-central1"
+  agent_id = basename(google_agent_registry_service.default.registry_resource)

mmv1/templates/terraform/samples/services/iap/iap_existing_project_agent.tf.tmpl

@@ -0,0 +1,15 @@
+resource "google_agent_registry_service" "default" {
+  location     = "us-central1"
+  service_id   = "tf-test-agent-%{random_suffix}"
+  description  = "My basic agent registry service for IAM test"
+  display_name = "My Service"
+
+  interfaces {
+    url              = "https://www.google.com/service-%{random_suffix}"
+    protocol_binding = "GRPC"
+  }
+
+  agent_spec {
+    type = "NO_SPEC"
+  }
+}