Skip to content

feat: make Vertex AI quotaProjectId optional and support dynamic credential stubs#295

Open
fbricon wants to merge 1 commit into
onecli:mainfrom
fbricon:worktree-optional_quota_projectId
Open

feat: make Vertex AI quotaProjectId optional and support dynamic credential stubs#295
fbricon wants to merge 1 commit into
onecli:mainfrom
fbricon:worktree-optional_quota_projectId

Conversation

@fbricon

@fbricon fbricon commented May 20, 2026

Copy link
Copy Markdown
Contributor

I have read the CONTRIBUTING.md file.

YES

What kind of change does this PR introduce?

The quotaProjectId (GCP project ID) is optional for Vertex AI authentication.
Users can authenticate via service account or authorized user credentials
without specifying a quota project ID. However, the connection validation was
incorrectly treating it as required, causing configuration failures when
the field was omitted.

What is the current behavior?

Configuring the vertex ai app from API fails with a "GCP Project ID is required" error. See openkaiden/kaiden#1882

What is the new behavior?

Changes:

  • Add optional field type to credentials_import connection method
  • Mark quotaProjectId as optional in both service_account and authorized_user groups
  • Update validation logic to respect optional field declarations
  • Support dynamic credential stub generation via functions
  • Only include quota_project_id in generated ADC stub if actually provided

This allows users with minimal credentials to connect to Vertex AI without
redundant configuration, while still including the field when available.

@johnnyfish johnnyfish force-pushed the worktree-optional_quota_projectId branch from 0d4a559 to eeb8974 Compare May 24, 2026 14:49
@johnnyfish johnnyfish added the feature New feature or request label May 28, 2026
@fbricon

fbricon commented Jun 1, 2026

Copy link
Copy Markdown
Contributor Author

@johnnyfish any update on this one?

…ential stubs

The quotaProjectId (GCP project ID) is optional for Vertex AI authentication.
Users can authenticate via service account or authorized user credentials
without specifying a project ID. However, the connection validation was
incorrectly treating it as required, causing configuration failures when
the field was omitted (see openkaiden/kaiden#1882).

Changes:
- Add `optional` field type to credentials_import connection method
- Mark quotaProjectId as optional in both service_account and authorized_user groups
- Update validation logic to respect optional field declarations
- Support dynamic credential stub generation via functions
- Only include quota_project_id in generated ADC stub if actually provided

This allows users with minimal credentials to connect to Vertex AI without
redundant configuration, while still including the field when available.
@fbricon fbricon force-pushed the worktree-optional_quota_projectId branch from eeb8974 to 84c0203 Compare June 3, 2026 10:34
@johnnyfish

Copy link
Copy Markdown
Contributor

hey @fbricon sorry for the delay on this one. we'll try to get to it over the weekend and update here. thanks for the patience 🙏

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

feature New feature or request

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants