[Key Vault] Added API 2026-07-01-preview with EKM Private Endpoint support

[Nicola Camillucci (ncamillucci)]

Description

Please add an informative description that covers that changes made by the pull request and link all relevant issues.

If an SDK is being regenerated based on a new API spec, a link to the pull request containing these API spec changes should be included above.

All SDK Contribution checklist:

• The pull request does not introduce [breaking changes]
• CHANGELOG is updated for new features, bug fixes or other significant changes.
• I have read the contribution guidelines.

General Guidelines and Best Practices

• Title of the pull request is clear and informative.
• There are a small number of commits, each of which have an informative message. This means that previously merged commits do not appear in the history of the PR. For more information on cleaning up the commits in your PR, see this page.

Testing Guidelines

• Pull request includes test coverage for the included changes.

[azure-pipelines]

Azure Pipelines:
Successfully started running 1 pipeline(s).
10 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

[github-actions]

[Pilot] PR Pipeline Failure Analysis

What failed

Azure Pipeline build 6811603 failed. All 12 test artifacts for azure-keyvault-administration (wheel and sdist, across platforms macos311, ubuntu2404_310, ubuntu2404_310_coverage, Ubuntu2404_313, Ubuntu2404_314, windows2022_312) report the same 22 failing tests each (288 failures total):

• test_access_control(_async): test_role_definitions, test_role_assignment
• test_backup_client(_async): test_full_backup_and_restore, test_full_backup_and_restore_rehydration, test_selective_key_restore, test_backup_client_polling
• test_ekm_client(_async): test_ekm_connection, test_ekm_private_endpoint
• test_examples_administration(_async): test_example_backup_and_restore, test_example_selective_key_restore
• test_settings_client(_async): test_list_settings, test_update_settings

All failing tests are parameterized on [2026-07-01-preview], the new API version introduced by this PR.

Root cause

Every failure shares the identical root cause — the test proxy cannot find a recording for the new 2026-07-01-preview API version:

azure.core.exceptions.HttpResponseError: {"Message":"Recording file path
/mnt/vss/_work/1/s/.assets_distributed/.../tests/recordings/test_access_control.pyTestAccessControltest_role_definitions[2026-07-01-preview].json
does not exist.","Status":"NotFound"}

This PR adds a new preview API version (2026-07-01-preview) and new tests (e.g. test_ekm_client* for EKM private endpoint support), but no corresponding recordings have been added/pushed to the shared .assets recordings repository (or assets.json wasn't bumped) for this API version. Since tests run in playback mode in CI, they fail immediately when the recording file is missing.

Relevant pipeline output

test_id = 'sdk/keyvault/azure-keyvault-administration/tests/recordings/test_access_control.pyTestAccessControltest_role_definitions[2026-07-01-preview]'
...
if result.status != 200:
    raise HttpResponseError(message=result.data)
E   azure.core.exceptions.HttpResponseError: b'{"Message":"Recording file path
.../test_access_control.pyTestAccessControltest_role_definitions[2026-07-01-preview].json
does not exist.","Status":"NotFound"}'

Same pattern repeats identically for all 22 tests across all 6 platforms and 2 artifact types (whl/sdist) — 288 total failure entries, with no other error type present in the results.

Recommended next steps

• Re-record the new/updated tests for API version 2026-07-01-preview (requires live Azure Key Vault/Managed HSM credentials) using devtools_testutils, then push the new recordings to the .assets repo and update the assets.json pointer for sdk/keyvault/azure-keyvault-administration.
• Verify the recordings cover the new EKM private endpoint tests (test_ekm_client, test_ekm_client_async) added in this PR.
• After recordings are pushed, re-run the pipeline to confirm playback succeeds.
• See https://aka.ms/ci-fix

Copilot detected the failing pipeline and generated the analysis above. To have it attempt a
fix automatically, reply with @copilot please fix the failing pipeline on this PR.

Generated by Pipeline Analysis Next Steps · auto · 84.1 AIC · ⌖ 3.66 AIC · ⊞ 9.2K · ◷