search.SearchService: support new resource fields via latest API version 2026-04-01

[BogdanRusuUiPath]

Describe the current behavior

search.SearchService does not expose properties.encryptionWithCmk on the spec. The underlying ARM resource Microsoft.Search/searchServices supports a service-level setting encryptionWithCmk.enforcement (values: Enabled / Disabled / Unspecified) that, when Enabled, enforces that every child object (indexes, indexers, data sources, skillsets, synonym maps) carries its own encryptionKey. Without ASO exposing this, operators have no declarative way to require CMK at the service boundary — the only path today is direct ARM PATCH or az search service update, which then drifts every reconcile.

Describe the improvement

Add an optional encryptionWithCmk field to SearchServiceSpec mirroring the ARM shape:

apiVersion: search.azure.com/v1api20231101
kind: SearchService
metadata:
  name: my-search
spec:
  encryptionWithCmk:
    enforcement: Enabled
  # ... existing fields ...

Optional and backward compatible — existing manifests without encryptionWithCmk keep behaving as today. The Go SDK (armsearch.Service.Properties.EncryptionWithCmk) already has full coverage, so the generator should pick it up cleanly.

Additional context

• ARM property reference: https://learn.microsoft.com/rest/api/searchservice/management/services/create-or-update#encryptionwithcmk

[theunrepentantgeek]

Looking at our docs for v1api20231101 of search.SearchService, our spec includes this:

Isn't this what you're looking for? Or have I misunderstood your request?

[BogdanRusuUiPath]

@theunrepentantgeek
This is what we would need in the ASO spec to not make the call to arm ourselves:
https://github.com/Azure/azure-rest-api-specs/blob/main/specification/search/data-plane/Search/stable/2026-04-01/search.json#L15410C5-L15436C9
These are new fields in the latest API version.

[matthchr]

So just confirming: You need a new version of this resource, but you need it for the semanticConfiguration, semanticErrorHandling, and other new fields, not encryptionWithCmk?

[BogdanRusuUiPath]

Hello! The only thing we need is the ASO counterpart of these fields, the link probably got broken in the meantime:
https://github.com/Azure/azure-rest-api-specs/blob/465402d314b9a9ce96f122c5b10fdf416e7ef727/specification/search/data-plane/Search/stable/2026-04-01/search.json#L15459

Thank you, @matthchr!