feat(vertexai): Make it possible to use Private Service Connect in Vertex AI Index Endpoint

mmv1/products/vertexai/IndexEndpoint.yaml

@@ -53,14 +53,18 @@ examples:
       network_name: "network-name"
     test_vars_overrides:
       network_name: 'acctest.BootstrapSharedTestNetwork(t, "vertex-ai-index-endpoint")'
+  - !ruby/object:Provider::Terraform::Examples
+    name: "vertex_ai_index_endpoint_with_psc"
+    primary_resource_id: "index_endpoint"
+    test_vars_overrides:
+      network_name: 'acctest.BootstrapSharedTestNetwork(t, "vertex-ai-index-endpoint")'
 parameters:
   - !ruby/object:Api::Type::String
     name: region
     description: The region of the index endpoint. eg us-central1
     url_param_only: true
     immutable: true
 properties:
-  # Intentionally deployedIndexes[] is not included because it's an output-only field and another terraform resource will manage a deployed index.
   - !ruby/object:Api::Type::String
     name: 'name'
     description: The resource name of the Index.
@@ -97,3 +101,47 @@ properties:
       [Format](https://cloud.google.com/compute/docs/reference/rest/v1/networks/insert): `projects/{project}/global/networks/{network}`.
       Where `{project}` is a project number, as in `12345`, and `{network}` is network name.
     immutable: true
+  - !ruby/object:Api::Type::NestedObject
+    name: privateServiceConnectConfig
+    immutable: true
+    description: |-
+      Optional. Configuration for private service connect. `network` and `privateServiceConnectConfig` are mutually exclusive.
+    properties:
+      - !ruby/object:Api::Type::Boolean
+        name: enablePrivateServiceConnect
+        description: If set to true, the IndexEndpoint is created without private service access.
+      - !ruby/object:Api::Type::Array
+        name: projectAllowlist
+        description: A list of Projects from which the forwarding rule will target the service attachment.
+        item_type: Api::Type::String
+  - !ruby/object:Api::Type::Array
+    name: deployedIndexes
+    description: Output only. The indexes deployed in this endpoint.
+    output: true
+    item_type: !ruby/object:Api::Type::NestedObject
+      properties:
+        - !ruby/object:Api::Type::String
+          name: id
+          output: true
+          description: The user specified ID of the DeployedIndex. The ID can be up to 128 characters long and must start with a letter and only contain letters, numbers, and underscores.
+        - !ruby/object:Api::Type::String
+          name: index
+          output: true
+          description: The name of the Index this is the deployment of. We may refer to this Index as the DeployedIndex's "original" Index.
+        - !ruby/object:Api::Type::String
+          name: displayName
+          output: true
+          description: The display name of the DeployedIndex. If not provided upon creation, the Index's displayName is used.
+        - !ruby/object:Api::Type::NestedObject
+          name: privateEndpoints
+          output: true
+          description: Provides paths for users to send requests directly to the deployed index services running on Cloud via private services access.
+          properties:
+            - !ruby/object:Api::Type::String
+              name: matchGrpcAddress
+              output: true
+              description: The ip address used to send match gRPC requests.
+            - !ruby/object:Api::Type::String
+              name: serviceAttachment
+              output: true
+              description: The name of the service attachment resource. Populated if private service connect is enabled.

mmv1/templates/terraform/examples/vertex_ai_index_endpoint_with_psc.tf.erb

@@ -0,0 +1,17 @@
+resource "google_vertex_ai_index_endpoint" "<%= ctx[:primary_resource_id] %>" {
+  display_name = "sample-endpoint"
+  description  = "A sample vertex endpoint"
+  region       = "us-central1"
+  labels       = {
+    label-one = "value-one"
+  }
+
+  private_service_connect_config {
+    enable_private_service_connect = true
+    project_allowlist = [
+        data.google_project.project.number,
+    ]
+  }
+}
+
+data "google_project" "project" {}