data "google_project" "current" {
  project_id = var.project_id
}

resource "google_storage_bucket" "batch" {
  name                        = "${var.project_id}-vertex-batch"
  location                    = "US-CENTRAL1"
  uniform_bucket_level_access = true
  public_access_prevention    = "enforced"

  soft_delete_policy {
    retention_duration_seconds = 0
  }
}

resource "google_storage_bucket_iam_member" "batch" {
  bucket = google_storage_bucket.batch.name
  role   = "roles/storage.objectAdmin"
  member = "serviceAccount:${google_service_account.agentgateway_vertex_ai.email}"
}

resource "google_storage_bucket_iam_member" "batch_vertex" {
  bucket = google_storage_bucket.batch.name
  role   = "roles/storage.objectAdmin"
  member = "serviceAccount:service-${data.google_project.current.number}@gcp-sa-aiplatform.iam.gserviceaccount.com"
}