[KV] Regenerate, add immutable release policy property (Azure#22872)

Author: mccoyp

sdk/keyvault/azure-keyvault-administration/CHANGELOG.md

@@ -10,6 +10,7 @@
 
 ### Other Changes
 - Python 2.7 is no longer supported. Please use Python version 3.6 or later.
+- Updated minimum `azure-core` version to 1.20.0
 
 ## 4.1.0b2 (2021-11-11)
 

sdk/keyvault/azure-keyvault-administration/setup.py

@@ -66,5 +66,5 @@
         ]
     ),
     python_requires=">=3.6",
-    install_requires=["azure-common~=1.1", "azure-core<2.0.0,>=1.15.0", "msrest>=0.6.21", "six>=1.11.0"],
+    install_requires=["azure-common~=1.1", "azure-core<2.0.0,>=1.20.0", "msrest>=0.6.21", "six>=1.11.0"],
 )

sdk/keyvault/azure-keyvault-keys/CHANGELOG.md

@@ -3,13 +3,20 @@
 ## 4.5.0b6 (Unreleased)
 
 ### Features Added
+- Added `immutable` keyword-only argument and property to `KeyReleasePolicy` to support immutable
+  release policies. Once a release policy is marked as immutable, it can no longer be modified.
 
 ### Breaking Changes
+> These changes do not impact the API of stable versions such as 4.4.0.
+> Only code written against a beta version such as 4.5.0b1 may be affected.
+- Renamed the required argument `data` in `KeyReleasePolicy`'s constructor to
+  `encoded_policy`
 
 ### Bugs Fixed
 
 ### Other Changes
 - Python 2.7 is no longer supported. Please use Python version 3.6 or later.
+- Updated minimum `azure-core` version to 1.20.0
 
 ## 4.5.0b5 (2021-11-11)
 

sdk/keyvault/azure-keyvault-keys/azure/keyvault/keys/_client.py

@@ -130,7 +130,9 @@ def create_key(self, name, key_type, **kwargs):
 
         policy = kwargs.pop("release_policy", None)
         if policy is not None:
-            policy = self._models.KeyReleasePolicy(data=policy.encoded_policy, content_type=policy.content_type)
+            policy = self._models.KeyReleasePolicy(
+                encoded_policy=policy.encoded_policy, content_type=policy.content_type, immutable=policy.immutable
+            )
         parameters = self._models.KeyCreateParameters(
             kty=key_type,
             key_size=kwargs.pop("size", None),
@@ -143,11 +145,7 @@ def create_key(self, name, key_type, **kwargs):
         )
 
         bundle = self._client.create_key(
-            vault_base_url=self.vault_url,
-            key_name=name,
-            parameters=parameters,
-            error_map=_error_map,
-            **kwargs
+            vault_base_url=self.vault_url, key_name=name, parameters=parameters, error_map=_error_map, **kwargs
         )
         return KeyVaultKey._from_key_bundle(bundle)
 
@@ -513,7 +511,10 @@ def begin_recover_deleted_key(self, name, **kwargs):
         )
         command = partial(self.get_key, name=name, **kwargs)
         polling_method = DeleteRecoverPollingMethod(
-            finished=False, command=command, final_resource=recovered_key, interval=polling_interval,
+            finished=False,
+            command=command,
+            final_resource=recovered_key,
+            interval=polling_interval,
         )
 
         return KeyVaultOperationPoller(polling_method)
@@ -559,7 +560,9 @@ def update_key_properties(self, name, version=None, **kwargs):
 
         policy = kwargs.pop("release_policy", None)
         if policy is not None:
-            policy = self._models.KeyReleasePolicy(content_type=policy.content_type, data=policy.encoded_policy)
+            policy = self._models.KeyReleasePolicy(
+                content_type=policy.content_type, encoded_policy=policy.encoded_policy, immutable=policy.immutable
+            )
         parameters = self._models.KeyUpdateParameters(
             key_ops=kwargs.pop("key_operations", None),
             key_attributes=attributes,
@@ -568,12 +571,7 @@ def update_key_properties(self, name, version=None, **kwargs):
         )
 
         bundle = self._client.update_key(
-            self.vault_url,
-            name,
-            key_version=version or "",
-            parameters=parameters,
-            error_map=_error_map,
-            **kwargs
+            self.vault_url, name, key_version=version or "", parameters=parameters, error_map=_error_map, **kwargs
         )
         return KeyVaultKey._from_key_bundle(bundle)
 
@@ -676,7 +674,9 @@ def import_key(self, name, key, **kwargs):
 
         policy = kwargs.pop("release_policy", None)
         if policy is not None:
-            policy = self._models.KeyReleasePolicy(content_type=policy.content_type, data=policy.encoded_policy)
+            policy = self._models.KeyReleasePolicy(
+                content_type=policy.content_type, encoded_policy=policy.encoded_policy, immutable=policy.immutable
+            )
         parameters = self._models.KeyImportParameters(
             key=key._to_generated_model(),
             key_attributes=attributes,
@@ -685,13 +685,7 @@ def import_key(self, name, key, **kwargs):
             release_policy=policy,
         )
 
-        bundle = self._client.import_key(
-            self.vault_url,
-            name,
-            parameters=parameters,
-            error_map=_error_map,
-            **kwargs
-        )
+        bundle = self._client.import_key(self.vault_url, name, parameters=parameters, error_map=_error_map, **kwargs)
         return KeyVaultKey._from_key_bundle(bundle)
 
     @distributed_trace
@@ -720,7 +714,9 @@ def release_key(self, name, target_attestation_token, version=None, **kwargs):
             key_name=name,
             key_version=version or "",
             parameters=self._models.KeyReleaseParameters(
-                target=target_attestation_token, nonce=kwargs.pop("nonce", None), enc=kwargs.pop("algorithm", None)
+                target_attestation_token=target_attestation_token,
+                nonce=kwargs.pop("nonce", None),
+                enc=kwargs.pop("algorithm", None),
             ),
             **kwargs
         )

sdk/keyvault/azure-keyvault-keys/azure/keyvault/keys/_generated/_key_vault_client.py

@@ -23,8 +23,6 @@
     # pylint: disable=unused-import,ungrouped-imports
     from typing import Any, Optional
 
-    from azure.core.pipeline.transport import HttpRequest, HttpResponse
-
 class _SDKClient(object):
     def __init__(self, *args, **kwargs):
         """This is a fake class to support current implemetation of MultiApiClientMixin."