feat: add EncryptionSpec for RagCorpus CMEK feature

Google APIs · copybara-github · commit 2a3385136965 · 2025-05-09T14:19:20.000-07:00
PiperOrigin-RevId: 756904146
diff --git a/google/cloud/aiplatform/v1beta1/vertex_rag_data.proto b/google/cloud/aiplatform/v1beta1/vertex_rag_data.proto
@@ -19,6 +19,7 @@ package google.cloud.aiplatform.v1beta1;
 import "google/api/field_behavior.proto";
 import "google/api/resource.proto";
 import "google/cloud/aiplatform/v1beta1/api_auth.proto";
+import "google/cloud/aiplatform/v1beta1/encryption_spec.proto";
 import "google/cloud/aiplatform/v1beta1/io.proto";
 import "google/protobuf/timestamp.proto";
 
@@ -308,6 +309,15 @@ message RagCorpus {
 
   // Output only. Number of RagFiles in the RagCorpus.
   int32 rag_files_count = 11 [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Optional. Immutable. The CMEK key name used to encrypt at-rest data related
+  // to this Corpus. Only applicable to RagManagedDb option for Vector DB. This
+  // field can only be set at corpus creation time, and cannot be updated or
+  // deleted.
+  EncryptionSpec encryption_spec = 12 [
+    (google.api.field_behavior) = IMMUTABLE,
+    (google.api.field_behavior) = OPTIONAL
+  ];
 }
 
 // A RagFile contains user data for chunking, embedding and indexing.
