From 19e6987cb71d92bddf6473e3ab152c113d0928a6 Mon Sep 17 00:00:00 2001
From: A Vertex SDK engineer <vertex-sdk-bot@google.com>
Date: Thu, 27 Aug 2026 22:39:23 -0700
Subject: [PATCH] feat: Allow setting `ingress_control_config` when creating a
 `SandboxEnvironmentTemplate` via the SDK (Python, Java, JS).

PiperOrigin-RevId: 972355621
---
 .../_sandboxtemplates_converters.ts           | 11 ++++
 src/types/common.ts                           | 62 ++++++++++---------
 2 files changed, 43 insertions(+), 30 deletions(-)

diff --git a/src/converters/_sandboxtemplates_converters.ts b/src/converters/_sandboxtemplates_converters.ts
index 4674cbf1..eae82462 100644
--- a/src/converters/_sandboxtemplates_converters.ts
+++ b/src/converters/_sandboxtemplates_converters.ts
@@ -48,6 +48,17 @@ export function createSandboxEnvironmentTemplateConfigToVertex(
     );
   }
 
+  const fromIngressControlConfig = common.getValueByPath(fromObject, [
+    'ingressControlConfig',
+  ]);
+  if (parentObject !== undefined && fromIngressControlConfig != null) {
+    common.setValueByPath(
+      parentObject,
+      ['ingressControlConfig'],
+      fromIngressControlConfig,
+    );
+  }
+
   return toObject;
 }
 
diff --git a/src/types/common.ts b/src/types/common.ts
index 1a08bb0b..f09a5624 100644
--- a/src/types/common.ts
+++ b/src/types/common.ts
@@ -2639,36 +2639,6 @@ export declare interface SandboxEnvironmentTemplateEgressControlConfig {
   networkAttachment?: string;
 }
 
-/** Config for creating a Sandbox Template. */
-export declare interface CreateSandboxEnvironmentTemplateConfig {
-  /** Used to override HTTP request options. */
-  httpOptions?: genaiTypes.HttpOptions;
-  /** Abort signal which can be used to cancel the request.
-
-  NOTE: AbortSignal is a client-only operation. Using it to cancel an
-  operation will not cancel the request in the service. You will still
-  be charged usage for any applicable operations.
-       */
-  abortSignal?: AbortSignal;
-  /** The custom container environment for the sandbox template. */
-  customContainerEnvironment?: SandboxEnvironmentTemplateCustomContainerEnvironment;
-  /** The default container environment for the sandbox template. */
-  defaultContainerEnvironment?: SandboxEnvironmentTemplateDefaultContainerEnvironment;
-  /** The egress control config for the sandbox template. */
-  egressControlConfig?: SandboxEnvironmentTemplateEgressControlConfig;
-  /** Waits for the operation to complete before returning. */
-  waitForCompletion?: boolean;
-}
-
-/** Parameters for creating Sandbox Environment Templates. */
-export declare interface CreateSandboxEnvironmentTemplateRequestParameters {
-  /** Name of the agent engine to create the template under. */
-  name: string;
-  /** The display name of the sandbox template. */
-  displayName: string;
-  config?: CreateSandboxEnvironmentTemplateConfig;
-}
-
 /** PSC config that is used to automatically create PSC endpoints in the user projects. */
 export declare interface PSCAutomationConfig {
   /** Output only. Error message if the PSC service automation failed. */
@@ -2699,6 +2669,38 @@ export declare interface PrivateServiceConnectConfig {
   serviceAttachment?: string;
 }
 
+/** Config for creating a Sandbox Template. */
+export declare interface CreateSandboxEnvironmentTemplateConfig {
+  /** Used to override HTTP request options. */
+  httpOptions?: genaiTypes.HttpOptions;
+  /** Abort signal which can be used to cancel the request.
+
+  NOTE: AbortSignal is a client-only operation. Using it to cancel an
+  operation will not cancel the request in the service. You will still
+  be charged usage for any applicable operations.
+       */
+  abortSignal?: AbortSignal;
+  /** The custom container environment for the sandbox template. */
+  customContainerEnvironment?: SandboxEnvironmentTemplateCustomContainerEnvironment;
+  /** The default container environment for the sandbox template. */
+  defaultContainerEnvironment?: SandboxEnvironmentTemplateDefaultContainerEnvironment;
+  /** The egress control config for the sandbox template. */
+  egressControlConfig?: SandboxEnvironmentTemplateEgressControlConfig;
+  /** Waits for the operation to complete before returning. */
+  waitForCompletion?: boolean;
+  /** The ingress control config for the sandbox template. */
+  ingressControlConfig?: PrivateServiceConnectConfig;
+}
+
+/** Parameters for creating Sandbox Environment Templates. */
+export declare interface CreateSandboxEnvironmentTemplateRequestParameters {
+  /** Name of the agent engine to create the template under. */
+  name: string;
+  /** The display name of the sandbox template. */
+  displayName: string;
+  config?: CreateSandboxEnvironmentTemplateConfig;
+}
+
 /** A sandbox environment template. */
 export declare interface SandboxEnvironmentTemplate {
   /** Output only. The timestamp when this SandboxEnvironmentTemplate was created. */