fix: Add Spanner admin scope to Spanner tool default Oauth scopes

google-genai-bot · copybara-github · commit b66054dd0d8c · 2025-08-15T10:15:15.000-07:00
PiperOrigin-RevId: 795519063
diff --git a/src/google/adk/tools/spanner/spanner_credentials.py b/src/google/adk/tools/spanner/spanner_credentials.py
@@ -18,7 +18,10 @@
 from .._google_credentials import BaseGoogleCredentialsConfig
 
 SPANNER_TOKEN_CACHE_KEY = "spanner_token_cache"
-SPANNER_DEFAULT_SCOPE = ["https://www.googleapis.com/auth/spanner.data"]
+SPANNER_DEFAULT_SCOPE = [
+    "https://www.googleapis.com/auth/spanner.admin",
+    "https://www.googleapis.com/auth/spanner.data",
+]
 
 
 @experimental
diff --git a/tests/unittests/tools/spanner/test_spanner_credentials.py b/tests/unittests/tools/spanner/test_spanner_credentials.py
@@ -48,6 +48,7 @@ def test_valid_credentials_object_oauth2_credentials(self):
     assert config.client_id == "test_client_id"
     assert config.client_secret == "test_client_secret"
     assert config.scopes == [
+        "https://www.googleapis.com/auth/spanner.admin",
         "https://www.googleapis.com/auth/spanner.data",
     ]
 

Original file line number	Diff line number	Diff line change
`@@ -48,6 +48,7 @@ def test_valid_credentials_object_oauth2_credentials(self):`
`48`	`48`	`assert config.client_id == "test_client_id"`
`49`	`49`	`assert config.client_secret == "test_client_secret"`
`50`	`50`	`assert config.scopes == [`
	`51`	`+ "https://www.googleapis.com/auth/spanner.admin",`
`51`	`52`	`"https://www.googleapis.com/auth/spanner.data",`
`52`	`53`	`]`
`53`	`54`