feat: add EncryptionSpec field for RagCorpus CMEK feature to v1

Google APIs · copybara-github · commit 3a45aa38968f · 2025-06-12T16:23:47.000-07:00
PiperOrigin-RevId: 770837205
diff --git a/google/cloud/aiplatform/v1/vertex_rag_data.proto b/google/cloud/aiplatform/v1/vertex_rag_data.proto
@@ -19,6 +19,7 @@ package google.cloud.aiplatform.v1;
 import "google/api/field_behavior.proto";
 import "google/api/resource.proto";
 import "google/cloud/aiplatform/v1/api_auth.proto";
+import "google/cloud/aiplatform/v1/encryption_spec.proto";
 import "google/cloud/aiplatform/v1/io.proto";
 import "google/protobuf/timestamp.proto";
 
@@ -263,6 +264,15 @@ message RagCorpus {
 
   // Output only. RagCorpus state.
   CorpusStatus corpus_status = 8 [(google.api.field_behavior) = OUTPUT_ONLY];
+
+  // Optional. Immutable. The CMEK key name used to encrypt at-rest data related
+  // to this Corpus. Only applicable to RagManagedDb option for Vector DB. This
+  // field can only be set at corpus creation time, and cannot be updated or
+  // deleted.
+  EncryptionSpec encryption_spec = 12 [
+    (google.api.field_behavior) = IMMUTABLE,
+    (google.api.field_behavior) = OPTIONAL
+  ];
 }
 
 // A RagFile contains user data for chunking, embedding and indexing.
