agent-starter-pack 0.0.1b0__py3-none-any.whl

src/base_template/deployment/cd/staging.yaml

@@ -0,0 +1,215 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+steps:
+{%- if cookiecutter.data_ingestion %}
+  - name: "python:3.11"
+    id: deploy-data-ingestion-pipeline-prod
+    entrypoint: bash
+    args:
+      - -c
+      - |
+        cd data_ingestion && pip install uv --user && uv sync --frozen && \
+        uv run python data_ingestion_pipeline/submit_pipeline.py
+    env:
+      - "PIPELINE_ROOT=${_PIPELINE_GCS_ROOT}"
+      - "REGION=${_REGION}"
+      - "DATA_STORE_REGION=${_DATA_STORE_REGION}"
+      - "DATA_STORE_ID=${_DATA_STORE_ID}"
+      - "PROJECT_ID=${_STAGING_PROJECT_ID}"
+      - "SERVICE_ACCOUNT=${_PIPELINE_SA_EMAIL}"
+      - "PIPELINE_NAME=${_PIPELINE_NAME}"
+      - 'PATH=/usr/local/bin:/usr/bin:~/.local/bin'
+{%- endif %}
+{%- if cookiecutter.deployment_target == 'cloud_run' %}
+  # Build and Push
+  - name: "gcr.io/cloud-builders/docker"
+    args:
+      [
+        "build",
+        "-t",
+        "$_REGION-docker.pkg.dev/$PROJECT_ID/$_ARTIFACT_REGISTRY_REPO_NAME/$_CONTAINER_NAME",
+        ".",
+      ]
+  - name: "gcr.io/cloud-builders/docker"
+    args:
+      [
+        "push",
+        "$_REGION-docker.pkg.dev/$PROJECT_ID/$_ARTIFACT_REGISTRY_REPO_NAME/$_CONTAINER_NAME",
+      ]
+
+  # Deploy to Staging
+  - name: "gcr.io/cloud-builders/gcloud"
+    id: deploy-staging
+    entrypoint: gcloud
+    args:
+      - "run"
+      - "deploy"
+      - "{{cookiecutter.project_name}}"
+      - "--image"
+      - "$_REGION-docker.pkg.dev/$PROJECT_ID/$_ARTIFACT_REGISTRY_REPO_NAME/$_CONTAINER_NAME"
+      - "--region"
+      - "${_REGION}"
+      - "--project"
+      - "${_STAGING_PROJECT_ID}"
+      - "--min-instances"
+      - "1"
+      - "--no-cpu-throttling"
+      - "--cpu"
+      - "4"
+      - "--memory"
+      - "4Gi"
+      - "--concurrency"
+      - "40"
+      - "--service-account"
+      - "${_CLOUD_RUN_APP_SA_NAME}@${_STAGING_PROJECT_ID}.iam.gserviceaccount.com"
+      - "--set-env-vars"
+      - "COMMIT_SHA=${COMMIT_SHA}{%- if cookiecutter.data_ingestion %},DATA_STORE_ID=${_DATA_STORE_ID},DATA_STORE_REGION=${_DATA_STORE_REGION}{%- endif %}"
+
+  # Fetch Staging Service URL
+  - name: "gcr.io/cloud-builders/gcloud"
+    id: fetch-staging-url
+    entrypoint: /bin/bash
+    args:
+      - "-c"
+      - |
+        echo $(gcloud run services describe {{cookiecutter.project_name}} \
+        --region ${_REGION} --project ${_STAGING_PROJECT_ID} --format="value(status.url)") > staging_url.txt
+
+  # Fetch ID Token
+  - name: gcr.io/cloud-builders/gcloud
+    id: fetch-id-token
+    entrypoint: /bin/bash
+    args:
+      - "-c"
+      - |
+        echo $(gcloud auth print-identity-token -q) > id_token.txt
+{%- elif cookiecutter.deployment_target == 'agent_engine' %}
+  - name: "python:3.11" 
+    id: install-dependencies
+    entrypoint: /bin/bash
+    args:
+      - "-c"
+      - |
+        pip install uv --user && uv sync --frozen
+    env:
+      - 'PATH=/usr/local/bin:/usr/bin:~/.local/bin'
+
+  - name: "python:3.11"
+    id: deploy-staging
+    entrypoint: /bin/bash
+    args:
+      - "-c"
+      - |
+        uv export --no-hashes --no-sources --no-header --no-emit-project --frozen > .requirements.txt
+        uv run app/agent_engine_app.py \
+          --project ${_STAGING_PROJECT_ID} \
+          --location ${_REGION} \
+          --set-env-vars COMMIT_SHA=${COMMIT_SHA}{%- if cookiecutter.data_ingestion %},DATA_STORE_ID=${_DATA_STORE_ID},DATA_STORE_REGION=${_DATA_STORE_REGION}{%- endif %}
+    env:
+      - 'PATH=/usr/local/bin:/usr/bin:~/.local/bin'
+
+
+  - name: gcr.io/cloud-builders/gcloud
+    id: fetch-auth-token
+    entrypoint: /bin/bash
+    args:
+      - "-c"
+      - |
+        echo $(gcloud auth print-access-token -q) > auth_token.txt
+{%- endif %}
+
+  # Load Testing
+  - name: "python:3.11"
+    id: load_test
+    entrypoint: /bin/bash
+    args:
+      - "-c"
+      - |
+{%- if cookiecutter.deployment_target == 'cloud_run' %}
+        export _ID_TOKEN=$(cat id_token.txt)
+        export _STAGING_URL=$(cat staging_url.txt)
+        pip install uv --user && uv sync --frozen
+{%- elif cookiecutter.deployment_target == 'agent_engine' %}
+        export _AUTH_TOKEN=$(cat auth_token.txt)
+{%- endif %}
+        uv add locust==2.32.6
+        uv run locust -f tests/load_test/load_test.py \
+        --headless \
+{%- if cookiecutter.deployment_target == 'cloud_run' %}
+        -H $$_STAGING_URL \
+        -t 30s -u 10 -r 0.5 \
+{%- elif cookiecutter.deployment_target == 'agent_engine' %}
+        -t 30s -u 2 -r 0.5 \
+{%- endif %}
+        --csv=tests/load_test/.results/results \
+        --html=tests/load_test/.results/report.html
+    env:
+      - 'PATH=/usr/local/bin:/usr/bin:~/.local/bin'
+
+  # Export Load Test Results to GCS
+  - name: gcr.io/cloud-builders/gcloud
+    id: export-results-to-gcs
+    entrypoint: /bin/bash
+    args:
+      - "-c"
+      - |
+        export _TIMESTAMP=$(date +%Y%m%d-%H%M%S)
+        gsutil -m cp -r tests/load_test/.results gs://${_BUCKET_NAME_LOAD_TEST_RESULTS}/results-$${_TIMESTAMP}
+        echo "_________________________________________________________________________"
+        echo "Load test results copied to gs://${_BUCKET_NAME_LOAD_TEST_RESULTS}/results-$${_TIMESTAMP}"
+        echo "HTTP link: https://console.cloud.google.com/storage/browser/${_BUCKET_NAME_LOAD_TEST_RESULTS}/results-$${_TIMESTAMP}"
+        echo "_________________________________________________________________________"
+
+  # Trigger Prod Deployment
+  - name: gcr.io/cloud-builders/gcloud
+    id: trigger-prod-deployment
+    entrypoint: gcloud
+    args:
+      - "beta"
+      - "builds"
+      - "triggers"
+      - "run"
+      - "deploy-to-prod-pipeline"
+      - "--region"
+      - "$LOCATION"
+      - "--project"
+      - "$PROJECT_ID"
+      - "--sha"
+      - $COMMIT_SHA
+
+  - name: gcr.io/cloud-builders/gcloud
+    id: echo-view-build-trigger-link
+    entrypoint: /bin/bash
+    args:
+      - "-c"
+      - |
+        echo "_________________________________________________________________________"
+        echo "Production deployment triggered. View progress and / or approve on the Cloud Build Console:"
+        echo "https://console.cloud.google.com/cloud-build/builds;region=$LOCATION"
+        echo "_________________________________________________________________________"
+
+substitutions:
+  _STAGING_PROJECT_ID: YOUR_STAGING_PROJECT_ID
+  _BUCKET_NAME_LOAD_TEST_RESULTS: ${PROJECT_ID}-cicd-load-test-results
+  _REGION: us-central1
+{%- if cookiecutter.data_ingestion %}
+  _DATA_STORE_REGION: us
+  _PIPELINE_NAME: genai_sample_data_ingestion
+{%- endif %}
+
+logsBucket: gs://${PROJECT_ID}-logs-data/build-logs
+options:
+  substitutionOption: ALLOW_LOOSE
+  defaultLogsBucketBehavior: REGIONAL_USER_OWNED_BUCKET

src/base_template/deployment/ci/pr_checks.yaml

@@ -0,0 +1,51 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+steps:
+  # Install uv package manager and sync dependencies
+  - name: "python:3.11"
+    id: install-dependencies
+    entrypoint: /bin/bash
+    args:
+      - "-c"
+      - |
+        pip install uv --user && uv sync --frozen
+    env:
+      - 'PATH=/usr/local/bin:/usr/bin:~/.local/bin'
+
+  # Run unit tests using pytest
+  - name: "python:3.11"
+    id: unit-tests
+    entrypoint: /bin/bash
+    args:
+      - "-c"
+      - |
+        uv run pytest tests/unit
+    env:
+      - 'PATH=/usr/local/bin:/usr/bin:~/.local/bin'
+
+  # Run integration tests
+  - name: "python:3.11"
+    id: integration-tests
+    entrypoint: /bin/bash
+    args:
+      - "-c"
+      - |
+        uv run pytest tests/integration
+    env:
+      - 'PATH=/usr/local/bin:/usr/bin:~/.local/bin'
+
+logsBucket: gs://${PROJECT_ID}-logs-data/build-logs
+options:
+  defaultLogsBucketBehavior: REGIONAL_USER_OWNED_BUCKET

src/base_template/deployment/terraform/apis.tf

@@ -0,0 +1,34 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+resource "google_project_service" "cicd_services" {
+  count              = length(local.cicd_services)
+  project            = var.cicd_runner_project_id
+  service            = local.cicd_services[count.index]
+  disable_on_destroy = false
+}
+
+resource "google_project_service" "shared_services" {
+  for_each = {
+    for pair in setproduct(keys(local.deploy_project_ids), local.shared_services) :
+    "${pair[0]}_${replace(pair[1], ".", "_")}" => {
+      project = local.deploy_project_ids[pair[0]]
+      service = pair[1]
+    }
+  }
+  project            = each.value.project
+  service            = each.value.service
+  disable_on_destroy = false
+}
+

src/base_template/deployment/terraform/build_triggers.tf

@@ -0,0 +1,122 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+# a. Create PR checks trigger
+resource "google_cloudbuild_trigger" "pr_checks" {
+  name            = "pr-checks"
+  project         = var.cicd_runner_project_id
+  location        = var.region
+  description     = "Trigger for PR checks"
+  service_account = resource.google_service_account.cicd_runner_sa.id
+
+  repository_event_config {
+    repository = "projects/${var.cicd_runner_project_id}/locations/${var.region}/connections/${var.host_connection_name}/repositories/${var.repository_name}"
+    pull_request {
+      branch = "main"
+    }
+  }
+
+  filename = "deployment/ci/pr_checks.yaml"
+  included_files = [
+    "app/**",
+    "data_ingestion/**",
+    "tests/**",
+    "deployment/**",
+    "poetry.lock",
+  {%- if cookiecutter.data_ingestion %}
+    "data_ingestion/**",
+  {%- endif %}
+  ]
+  depends_on = [resource.google_project_service.cicd_services, resource.google_project_service.shared_services]
+}
+
+# b. Create CD pipeline trigger
+resource "google_cloudbuild_trigger" "cd_pipeline" {
+  name            = "cd-pipeline"
+  project         = var.cicd_runner_project_id
+  location        = var.region
+  service_account = resource.google_service_account.cicd_runner_sa.id
+  description     = "Trigger for CD pipeline"
+
+  repository_event_config {
+    repository = "projects/${var.cicd_runner_project_id}/locations/${var.region}/connections/${var.host_connection_name}/repositories/${var.repository_name}"
+    push {
+      branch = "main"
+    }
+  }
+
+  filename = "deployment/cd/staging.yaml"
+  included_files = [
+    "app/**",
+    "data_ingestion/**",
+    "tests/**",
+    "deployment/**",
+    "poetry.lock"
+  ]
+  substitutions = {
+    _STAGING_PROJECT_ID            = var.staging_project_id
+    _BUCKET_NAME_LOAD_TEST_RESULTS = resource.google_storage_bucket.bucket_load_test_results.name
+    _REGION                        = var.region
+{%- if cookiecutter.deployment_target == 'cloud_run' %}
+    _CONTAINER_NAME                = var.cloud_run_app_sa_name
+    _ARTIFACT_REGISTRY_REPO_NAME   = var.artifact_registry_repo_name
+    _CLOUD_RUN_APP_SA_NAME         = var.cloud_run_app_sa_name
+{%- endif %}
+{%- if cookiecutter.data_ingestion %}
+    _PIPELINE_GCS_ROOT             = "gs://${resource.google_storage_bucket.data_ingestion_pipeline_gcs_root["staging"].name}"
+    _PIPELINE_SA_EMAIL             = "${var.vertexai_pipeline_sa_name}@${var.staging_project_id}.iam.gserviceaccount.com"
+    _PIPELINE_CRON_SCHEDULE        = var.pipeline_cron_schedule
+    _DATA_STORE_ID                 = resource.google_discovery_engine_data_store.data_store_staging.data_store_id
+    _DATA_STORE_REGION             = var.data_store_region
+{%- endif %}
+    # Your other CD Pipeline substitutions
+  }
+  depends_on = [resource.google_project_service.cicd_services, resource.google_project_service.shared_services]
+
+}
+
+# c. Create Deploy to production trigger
+resource "google_cloudbuild_trigger" "deploy_to_prod_pipeline" {
+  name            = "deploy-to-prod-pipeline"
+  project         = var.cicd_runner_project_id
+  location        = var.region
+  description     = "Trigger for deployment to production"
+  service_account = resource.google_service_account.cicd_runner_sa.id
+  repository_event_config {
+    repository = "projects/${var.cicd_runner_project_id}/locations/${var.region}/connections/${var.host_connection_name}/repositories/${var.repository_name}"
+  }
+  filename = "deployment/cd/deploy-to-prod.yaml"
+  approval_config {
+    approval_required = true
+  }
+  substitutions = {
+    _PROD_PROJECT_ID             = var.prod_project_id
+    _REGION                      = var.region
+{%- if cookiecutter.deployment_target == 'cloud_run' %}
+    _CONTAINER_NAME              = var.cloud_run_app_sa_name
+    _ARTIFACT_REGISTRY_REPO_NAME = var.artifact_registry_repo_name
+    _CLOUD_RUN_APP_SA_NAME       = var.cloud_run_app_sa_name
+{%- endif %}
+{%- if cookiecutter.data_ingestion %}
+    _PIPELINE_GCS_ROOT             = "gs://${resource.google_storage_bucket.data_ingestion_pipeline_gcs_root["prod"].name}"
+    _PIPELINE_SA_EMAIL             = "${var.vertexai_pipeline_sa_name}@${var.prod_project_id}.iam.gserviceaccount.com"
+    _PIPELINE_CRON_SCHEDULE        = var.pipeline_cron_schedule
+    _DATA_STORE_ID                 = resource.google_discovery_engine_data_store.data_store_prod.data_store_id
+    _DATA_STORE_REGION             = var.data_store_region
+{%- endif %}
+    # Your other Deploy to Prod Pipeline substitutions
+  }
+  depends_on = [resource.google_project_service.cicd_services, resource.google_project_service.shared_services]
+
+}

src/base_template/deployment/terraform/dev/apis.tf

@@ -0,0 +1,42 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+locals {
+  services = [
+    "aiplatform.googleapis.com",
+    "cloudbuild.googleapis.com",
+    "run.googleapis.com",
+    "bigquery.googleapis.com",
+    "discoveryengine.googleapis.com",
+    "cloudresourcemanager.googleapis.com",
+    "iam.googleapis.com",
+    "bigquery.googleapis.com",
+    "serviceusage.googleapis.com",
+    "logging.googleapis.com",
+    "cloudtrace.googleapis.com"
+  ]
+}
+
+resource "google_project_service" "services" {
+  count              = length(local.services)
+  project            = var.dev_project_id
+  service            = local.services[count.index]
+  disable_on_destroy = false
+}
+
+resource "google_project_service_identity" "vertex_sa" {
+  provider = google-beta
+  project = var.dev_project_id
+  service = "aiplatform.googleapis.com"
+}

src/base_template/deployment/terraform/dev/iam.tf

@@ -0,0 +1,90 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+locals {
+  project_ids = {
+    dev = var.dev_project_id
+  }
+}
+
+
+# Get the project number for the dev project
+data "google_project" "dev_project" {
+  project_id = var.dev_project_id
+}
+
+# Grant Storage Object Creator role to default compute service account
+resource "google_project_iam_member" "default_compute_sa_storage_object_creator" {
+  project    = var.dev_project_id
+  role       = "roles/cloudbuild.builds.builder"
+  member     = "serviceAccount:${data.google_project.dev_project.number}-compute@developer.gserviceaccount.com"
+  depends_on = [resource.google_project_service.services]
+}
+
+{%- if cookiecutter.deployment_target == 'cloud_run' %}
+# Grant Cloud Run SA the required permissions to run the application
+resource "google_project_iam_member" "cloud_run_app_sa_roles" {
+  for_each = {
+    for pair in setproduct(keys(local.project_ids), var.cloud_run_app_roles) :
+    join(",", pair) => {
+      project = local.project_ids[pair[0]]
+      role    = pair[1]
+    }
+  }
+
+  project    = each.value.project
+  role       = each.value.role
+  member     = "serviceAccount:${google_service_account.cloud_run_app_sa.email}"
+  depends_on = [resource.google_project_service.services]
+}
+{%- elif cookiecutter.deployment_target == 'agent_engine' %}
+# Grant required permissions to Vertex AI service account
+resource "google_project_iam_member" "vertex_ai_sa_permissions" {
+  for_each = {
+    for pair in setproduct(keys(local.project_ids), var.agentengine_sa_roles) :
+    join(",", pair) => pair[1]
+  }
+
+  project = var.dev_project_id
+  role    = each.value
+  member  = google_project_service_identity.vertex_sa.member
+  depends_on = [resource.google_project_service.services]
+}
+{%- endif %}
+{%- if cookiecutter.data_ingestion %}
+# Service account to run Vertex AI pipeline
+resource "google_service_account" "vertexai_pipeline_app_sa" {
+  for_each = local.project_ids
+
+  account_id   = var.vertexai_pipeline_sa_name
+  display_name = "Vertex AI Pipeline app SA"
+  project      = each.value
+  depends_on   = [resource.google_project_service.services]
+}
+
+resource "google_project_iam_member" "vertexai_pipeline_sa_roles" {
+  for_each = {
+    for pair in setproduct(keys(local.project_ids), var.pipelines_roles) :
+    join(",", pair) => {
+      project = local.project_ids[pair[0]]
+      role    = pair[1]
+    }
+  }
+
+  project    = each.value.project
+  role       = each.value.role
+  member     = "serviceAccount:${google_service_account.vertexai_pipeline_app_sa[split(",", each.key)[0]].email}"
+  depends_on = [resource.google_project_service.services]
+}
+{%- endif %}

src/base_template/deployment/terraform/dev/log_sinks.tf

@@ -0,0 +1,66 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+resource "google_project_iam_member" "bigquery_data_editor" {
+
+  project = var.dev_project_id
+  role    = "roles/bigquery.dataEditor"
+  member  = module.log_export_to_bigquery.writer_identity
+}
+
+
+module "log_export_to_bigquery" {
+
+  source  = "terraform-google-modules/log-export/google"
+  version = "10.0.0"
+
+  log_sink_name          = var.telemetry_sink_name
+  parent_resource_type   = "project"
+  parent_resource_id     = var.dev_project_id
+  destination_uri        = "bigquery.googleapis.com/projects/${var.dev_project_id}/datasets/${var.telemetry_bigquery_dataset_id}"
+  filter                 = var.telemetry_logs_filter
+  bigquery_options       = { use_partitioned_tables = true }
+  unique_writer_identity = true
+  depends_on             = [resource.google_project_service.services]
+}
+
+resource "google_bigquery_dataset" "feedback_dataset" {
+  project       = var.dev_project_id
+  dataset_id    = var.feedback_bigquery_dataset_id
+  friendly_name = var.feedback_bigquery_dataset_id
+  location      = var.region
+  depends_on    = [resource.google_project_service.services]
+}
+
+module "feedback_export_to_bigquery" {
+  source                 = "terraform-google-modules/log-export/google"
+  version                = "10.0.0"
+  log_sink_name          = var.feedback_sink_name
+  parent_resource_type   = "project"
+  parent_resource_id     = var.dev_project_id
+  destination_uri        = "bigquery.googleapis.com/projects/${var.dev_project_id}/datasets/${var.feedback_bigquery_dataset_id}"
+  filter                 = var.feedback_logs_filter
+  bigquery_options       = { use_partitioned_tables = true }
+  unique_writer_identity = true
+  depends_on             = [resource.google_project_service.services]
+
+}
+
+resource "google_bigquery_dataset" "telemetry_logs_dataset" {
+  project       = var.dev_project_id
+  dataset_id    = var.telemetry_bigquery_dataset_id
+  friendly_name = var.telemetry_bigquery_dataset_id
+  location      = var.region
+  depends_on    = [resource.google_project_service.services]
+}

src/base_template/deployment/terraform/dev/providers.tf

@@ -0,0 +1,29 @@
+# Copyright 2025 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+terraform {
+  required_version = ">= 1.0.0"
+  required_providers {
+    google = {
+      source  = "hashicorp/google"
+      version = "< 7.0.0"
+    }
+  }
+}
+
+provider "google" {
+  alias                 = "dev_billing_override"
+  billing_project       = var.dev_project_id
+  user_project_override = true
+}