Update aiplatform go lib version

Author: maqiuyujoyce

go.mod

@@ -7,7 +7,7 @@ toolchain go1.23.4
 replace github.com/GoogleCloudPlatform/k8s-config-connector/mockgcp => ./mockgcp
 
 require (
-	cloud.google.com/go/aiplatform v1.74.0
+	cloud.google.com/go/aiplatform v1.78.0
 	cloud.google.com/go/alloydb v1.14.0
 	cloud.google.com/go/apikeys v1.1.12
 	cloud.google.com/go/apphub v0.2.3
@@ -94,7 +94,7 @@ require (
 	google.golang.org/api v0.224.0
 	google.golang.org/genproto v0.0.0-20250303144028-a0af3efb3deb
 	google.golang.org/genproto/googleapis/api v0.0.0-20250303144028-a0af3efb3deb
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20250227231956-55c901821b1e
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20250303144028-a0af3efb3deb
 	google.golang.org/grpc v1.71.0
 	google.golang.org/protobuf v1.36.5
 	gopkg.in/dnaeon/go-vcr.v3 v3.2.0

go.sum

@@ -68,13 +68,6 @@ func (m *runtimeTemplateModel) client(ctx context.Context, projectID, location s
 
 	endpoint := fmt.Sprintf("https://%s-aiplatform.googleapis.com", location)
 	opts = append(opts, option.WithEndpoint(endpoint))
-	// Setting the logger to debug level is the only way to figure out the error details.
-	//lvl := new(slog.LevelVar)
-	//lvl.Set(slog.LevelDebug)
-	//logger := slog.New(slog.NewTextHandler(os.Stdout, &slog.HandlerOptions{
-	//	Level: lvl,
-	//}))
-	//opts = append(opts, option.WithLogger(logger))
 	gcpClient, err := gcp.NewNotebookRESTClient(ctx, opts...)
 	if err != nil {
 		return nil, fmt.Errorf("building colabruntimetemplate client: %w", err)
@@ -204,7 +197,6 @@ func (a *runtimeTemplateAdapter) Create(ctx context.Context, createOp *directbas
 		NotebookRuntimeTemplate:   desiredPb,
 		NotebookRuntimeTemplateId: a.id.ID(),
 	}
-	// Note: The returned error doesn't contain any error message details.
 	op, err := a.gcpClient.CreateNotebookRuntimeTemplate(ctx, req)
 	if err != nil {
 		return fmt.Errorf("creating colabruntimetemplate %s: %w", a.id.String(), err)
@@ -271,8 +263,8 @@ func (a *runtimeTemplateAdapter) Update(ctx context.Context, updateOp *directbas
 		UpdateMask:              updateMask,
 		NotebookRuntimeTemplate: desiredPb,
 	}
-	// Note: There doesn't seem to be any update mask allowed by the API.
-	// Note: The returned error doesn't contain any error message details.
+	// Currently, the only allowed update mask path is
+	// "encryption_spec.kms_key_name".
 	updated, err := a.gcpClient.UpdateNotebookRuntimeTemplate(ctx, req)
 	if err != nil {
 		return fmt.Errorf("updating colabruntimetemplate %s: %w", a.id.String(), err)

pkg/controller/direct/colab/runtimetemplate_controller.go

@@ -35,11 +35,12 @@ func colabRuntimeTemplateFuzzer() fuzztesting.KRMFuzzer {
 
 	f.UnimplementedFields.Insert(".name")       // special field
 	f.UnimplementedFields.Insert(".is_default") // deprecated field
-	// "software_config" field is unsupported in third_party because we use an
+	// The following fields are unsupported in third_party because we use an
 	// old googleapis version. Automation tools don't know this field.
 	// However, it is supported in the version of cloud.google.com/go/aiplatform
 	// we define in go.mod.
 	f.UnimplementedFields.Insert(".software_config")
+	f.UnimplementedFields.Insert(".machine_spec.multihost_gpu_node_count")
 
 	f.SpecFields.Insert(".display_name")
 	f.SpecFields.Insert(".description")

pkg/controller/direct/colab/runtimetemplate_fuzzer.go

@@ -14,3 +14,8 @@ spec:
       name: computenetwork-${uniqueId}
     subnetworkRef:
       name: computesubnetwork-${uniqueId}
+# The only updatable field is encryptionSpec.kmsKeyRef, but setting the field
+# triggers a quota issue so update can't be tested.
+#  encryptionSpec:
+#    kmsKeyRef:
+#      name: kmscryptokey-1-${uniqueId}

pkg/test/resourcefixture/testdata/basic/colab/v1alpha1/colabruntimetemplate/basiccolabruntimetemplate/create.yaml

@@ -24,3 +24,35 @@ spec:
   region: us-central1
   networkRef:
     name: computenetwork-${uniqueId}
+#---
+#apiVersion: iam.cnrm.cloud.google.com/v1beta1
+#kind: IAMPolicyMember
+#metadata:
+#  name: iampolicymember-${uniqueId}
+#spec:
+#  member: serviceAccount:service-${projectNumber}@gcp-sa-aiplatform.iam.gserviceaccount.com
+#  role: roles/cloudkms.cryptoKeyEncrypterDecrypter # required by cloud run service agent to access KMS keys
+#  resourceRef:
+#    apiVersion: resourcemanager.cnrm.cloud.google.com/v1beta1
+#    kind: Project
+#    external: projects/${projectId}
+#---
+#apiVersion: kms.cnrm.cloud.google.com/v1beta1
+#kind: KMSKeyRing
+#metadata:
+#  annotations:
+#    cnrm.cloud.google.com/project-id: ${projectId}
+#  name: kmskeyring-${uniqueId}
+#spec:
+#  location: us-central1
+#---
+#apiVersion: kms.cnrm.cloud.google.com/v1beta1
+#kind: KMSCryptoKey
+#metadata:
+#  annotations:
+#    cnrm.cloud.google.com/project-id: ${projectId}
+#  name: kmscryptokey-1-${uniqueId}
+#spec:
+#  keyRingRef:
+#    name: kmskeyring-${uniqueId}
+#  purpose: ENCRYPT_DECRYPT