[dataprotection] Add UAMI Support for Backup Instances (Azure#8632)

* new gitignore rule to ignore patches

* Fix update backup vault so identity type can be switched away from user assigned/system and user assigned.

* Changes for BI create and update

* Changes for other existing functions - update, restore. Also bugfixes from previous commit

* Add changes for update-msi-permissions

* New command init

* Validate For Update, and some mroe fixes

* Validate call gets made, moving for today

* temp hack - fix for validate-for-update issueus

* Updated the temp fix for missing response type

* Tests.

* Fix for tests.

* All tests locally on

* Update BackupVault to 2025-01-01 and add AAZ bits for the same

* Fix style

* Updated runs for backup vault tests

* Fix params for new system assigned option in update, init, and init restores

* Update history

* Fix help text

* Update BackupVault to use standard MI process

* Update Backup Instances to use standard MI process

* Add help texts and better logging

* Fix incorrect parameter format

* Fix incorrect backup-vault identity remove behaviour

---------

Co-authored-by: Zubair Abid <[email protected]>

Author: zubairabid

src/dataprotection/.gitignore

@@ -1 +1,2 @@
 *.json
+*.patch

src/dataprotection/HISTORY.rst

@@ -3,6 +3,18 @@
 Release History
 ===============
 
+1.6.0
++++++
+* Added support for User-Assigned Managed Identities for Backup Instances.
+* Fixed a bug with Backup Vault update where a vault with UserAssigned or SystemAssigned,UserAssigned could not be switched to SystemAssigned or None.
+* `az dataprotection backup-instance validate-for-update`: New command, can be used to verify if a backup instance update will be successful or not. Supports all the parameters `az dataprotection backup-instance update` does.
+* `az dataprotection backup-instance initialize`: New parameters: `--use-system-identity` and `--uami`, which allow users to set a backup instance's Identity details for backup instance creation and validation.
+* `az dataprotection backup-instance update`: New parameters: `--use-system-identity` and `--uami`, which allow users to update a backup instance's Identity details.
+* `az dataprotection backup-instance restore initialize-for-data-recovery`: New parameters: `--use-system-identity` and `--uami`, which allow users to set a backup instance's Identity details for a restore operation.
+* `az dataprotection backup-instance restore initialize-for-data-recovery-as-files`: New parameters: `--use-system-identity` and `--uami`, which allow users to set a backup instance's Identity details for a restore operation.
+* `az dataprotection backup-instance restore initialize-for-item-recovery`: New parameters: `--use-system-identity` and `--uami`, which allow users to set a backup instance's Identity details for a restore operation.
+* `az dataprotection backup-instance update-msi-permissions`: New parameter `--uami` allows us to set permissions on a user-managed identity associated with a Backup Vault.
+
 1.5.6
 +++++
 * Updated the packaged AKS-preview SDK.

src/dataprotection/azext_dataprotection/aaz/latest/dataprotection/backup_instance/__init__.py

@@ -20,4 +20,5 @@
 from ._update import *
 from ._validate_for_backup import *
 from ._validate_for_restore import *
+from ._validate_for_update import *
 from ._wait import *

src/dataprotection/azext_dataprotection/aaz/latest/dataprotection/backup_instance/_create.py

@@ -263,6 +263,7 @@ def _build_schema_on_200_201(cls):
             )
             properties.protection_error_details = AAZObjectType(
                 serialized_name="protectionErrorDetails",
+                flags={"read_only": True},
             )
             _CreateHelper._build_schema_user_facing_error_read(properties.protection_error_details)
             properties.protection_status = AAZObjectType(

src/dataprotection/azext_dataprotection/aaz/latest/dataprotection/backup_instance/_list.py

@@ -210,6 +210,7 @@ def _build_schema_on_200(cls):
             )
             properties.protection_error_details = AAZObjectType(
                 serialized_name="protectionErrorDetails",
+                flags={"read_only": True},
             )
             _ListHelper._build_schema_user_facing_error_read(properties.protection_error_details)
             properties.protection_status = AAZObjectType(

src/dataprotection/azext_dataprotection/aaz/latest/dataprotection/backup_instance/_show.py

@@ -210,6 +210,7 @@ def _build_schema_on_200(cls):
             )
             properties.protection_error_details = AAZObjectType(
                 serialized_name="protectionErrorDetails",
+                flags={"read_only": True},
             )
             _ShowHelper._build_schema_user_facing_error_read(properties.protection_error_details)
             properties.protection_status = AAZObjectType(

src/dataprotection/azext_dataprotection/aaz/latest/dataprotection/backup_instance/_update.py

@@ -680,6 +680,7 @@ def _build_schema_backup_instance_resource_read(cls, _schema):
         )
         properties.protection_error_details = AAZObjectType(
             serialized_name="protectionErrorDetails",
+            flags={"read_only": True},
         )
         cls._build_schema_user_facing_error_read(properties.protection_error_details)
         properties.protection_status = AAZObjectType(

src/dataprotection/azext_dataprotection/aaz/latest/dataprotection/backup_instance/_validate_for_update.py

@@ -206,6 +206,7 @@ def _build_schema_on_200(cls):
             )
             properties.protection_error_details = AAZObjectType(
                 serialized_name="protectionErrorDetails",
+                flags={"read_only": True},
             )
             _WaitHelper._build_schema_user_facing_error_read(properties.protection_error_details)
             properties.protection_status = AAZObjectType(

src/dataprotection/azext_dataprotection/aaz/latest/dataprotection/backup_instance/_wait.py

@@ -209,6 +209,7 @@ def _build_schema_on_200(cls):
             )
             properties.protection_error_details = AAZObjectType(
                 serialized_name="protectionErrorDetails",
+                flags={"read_only": True},
             )
             _ListHelper._build_schema_user_facing_error_read(properties.protection_error_details)
             properties.protection_status = AAZObjectType(