Skip to content

[Compute] az vm create/update: Add new parameters --wire-server-mode --wire-server-access-control-profile-reference-id to support setting wireserver endpoint settings#31279

Merged
zhoxing-ms merged 2 commits intoAzure:devfrom
Jing-song:jins-matadatav2
Apr 18, 2025

Conversation

@Jing-song
Copy link
Contributor

@Jing-song Jing-song commented Apr 15, 2025

Related command

az vm create/update
az vmss create/update

Description

VM/VMSS to support v2 Version of Azure Metadata Security Protocol
close #29279

Testing Guide

History Notes

[Compute] az vm create/update: Add new parameters --wire-server-mode and --wire-server-access-control-profile-reference-id to support setting wireserver endpoint settings
[Compute] az vmss create/update: Add new parameters --wire-server-mode and --wire-server-access-control-profile-reference-id to support setting wireserver endpoint settings
[Compute] az vm create/update: Add new parameters --imds-mode and --imds-access-control-profile-reference-id to support setting IMDS endpoint settings
[Compute] az vmss create/update: Add new parameters --imds-mode and --imds-access-control-profile-reference-id to support setting IMDS endpoint settings
[Compute] az vm create/update: Add new parameter --key-incarnation-id to support setting key incarnation id
[Compute] az vmss create/update: Add new parameter --key-incarnation-id to support setting key incarnation id


This checklist is used to make sure that common guidelines for a pull request are followed.

@azure-client-tools-bot-prd
Copy link

azure-client-tools-bot-prd bot commented Apr 15, 2025

️✔️AzureCLI-FullTest
️✔️acr
️✔️2020-09-01-hybrid
️✔️3.12
️✔️3.9
️✔️latest
️✔️3.12
️✔️3.9
️✔️acs
️✔️2020-09-01-hybrid
️✔️3.12
️✔️3.9
️✔️latest
️✔️3.12
️✔️3.9
️✔️advisor
️✔️latest
️✔️3.12
️✔️3.9
️✔️ams
️✔️latest
️✔️3.12
️✔️3.9
️✔️apim
️✔️latest
️✔️3.12
️✔️3.9
️✔️appconfig
️✔️latest
️✔️3.12
️✔️3.9
️✔️appservice
️✔️latest
️✔️3.12
️✔️3.9
️✔️aro
️✔️latest
️✔️3.12
️✔️3.9
️✔️backup
️✔️latest
️✔️3.12
️✔️3.9
️✔️batch
️✔️latest
️✔️3.12
️✔️3.9
️✔️batchai
️✔️latest
️✔️3.12
️✔️3.9
️✔️billing
️✔️latest
️✔️3.12
️✔️3.9
️✔️botservice
️✔️latest
️✔️3.12
️✔️3.9
️✔️cdn
️✔️latest
️✔️3.12
️✔️3.9
️✔️cloud
️✔️latest
️✔️3.12
️✔️3.9
️✔️cognitiveservices
️✔️latest
️✔️3.12
️✔️3.9
️✔️compute_recommender
️✔️latest
️✔️3.12
️✔️3.9
️✔️computefleet
️✔️latest
️✔️3.12
️✔️3.9
️✔️config
️✔️latest
️✔️3.12
️✔️3.9
️✔️configure
️✔️latest
️✔️3.12
️✔️3.9
️✔️consumption
️✔️latest
️✔️3.12
️✔️3.9
️✔️container
️✔️latest
️✔️3.12
️✔️3.9
️✔️containerapp
️✔️latest
️✔️3.12
️✔️3.9
️✔️core
️✔️2018-03-01-hybrid
️✔️3.12
️✔️3.9
️✔️2019-03-01-hybrid
️✔️3.12
️✔️3.9
️✔️2020-09-01-hybrid
️✔️3.12
️✔️3.9
️✔️latest
️✔️3.12
️✔️3.9
️✔️cosmosdb
️✔️latest
️✔️3.12
️✔️3.9
️✔️databoxedge
️✔️2019-03-01-hybrid
️✔️3.12
️✔️3.9
️✔️2020-09-01-hybrid
️✔️3.12
️✔️3.9
️✔️latest
️✔️3.12
️✔️3.9
️✔️dls
️✔️latest
️✔️3.12
️✔️3.9
️✔️dms
️✔️latest
️✔️3.12
️✔️3.9
️✔️eventgrid
️✔️latest
️✔️3.12
️✔️3.9
️✔️eventhubs
️✔️latest
️✔️3.12
️✔️3.9
️✔️feedback
️✔️latest
️✔️3.12
️✔️3.9
️✔️find
️✔️latest
️✔️3.12
️✔️3.9
️✔️hdinsight
️✔️latest
️✔️3.12
️✔️3.9
️✔️identity
️✔️latest
️✔️3.12
️✔️3.9
️✔️iot
️✔️2019-03-01-hybrid
️✔️3.12
️✔️3.9
️✔️2020-09-01-hybrid
️✔️3.12
️✔️3.9
️✔️latest
️✔️3.12
️✔️3.9
️✔️keyvault
️✔️2018-03-01-hybrid
️✔️3.12
️✔️3.9
️✔️2020-09-01-hybrid
️✔️3.12
️✔️3.9
️✔️latest
️✔️3.12
️✔️3.9
️✔️lab
️✔️latest
️✔️3.12
️✔️3.9
️✔️managedservices
️✔️latest
️✔️3.12
️✔️3.9
️✔️maps
️✔️latest
️✔️3.12
️✔️3.9
️✔️marketplaceordering
️✔️latest
️✔️3.12
️✔️3.9
️✔️monitor
️✔️latest
️✔️3.12
️✔️3.9
️✔️mysql
️✔️latest
️✔️3.12
️✔️3.9
️✔️netappfiles
️✔️latest
️✔️3.12
️✔️3.9
️✔️network
️✔️2018-03-01-hybrid
️✔️3.12
️✔️3.9
️✔️latest
️✔️3.12
️✔️3.9
️✔️policyinsights
️✔️latest
️✔️3.12
️✔️3.9
️✔️privatedns
️✔️latest
️✔️3.12
️✔️3.9
️✔️profile
️✔️latest
️✔️3.12
️✔️3.9
️✔️rdbms
️✔️latest
️✔️3.12
️✔️3.9
️✔️redis
️✔️latest
️✔️3.12
️✔️3.9
️✔️relay
️✔️latest
️✔️3.12
️✔️3.9
️✔️resource
️✔️2018-03-01-hybrid
️✔️3.12
️✔️3.9
️✔️2019-03-01-hybrid
️✔️3.12
️✔️3.9
️✔️latest
️✔️3.12
️✔️3.9
️✔️role
️✔️latest
️✔️3.12
️✔️3.9
️✔️search
️✔️latest
️✔️3.12
️✔️3.9
️✔️security
️✔️latest
️✔️3.12
️✔️3.9
️✔️servicebus
️✔️latest
️✔️3.12
️✔️3.9
️✔️serviceconnector
️✔️latest
️✔️3.12
️✔️3.9
️✔️servicefabric
️✔️latest
️✔️3.12
️✔️3.9
️✔️signalr
️✔️latest
️✔️3.12
️✔️3.9
️✔️sql
️✔️latest
️✔️3.12
️✔️3.9
️✔️sqlvm
️✔️latest
️✔️3.12
️✔️3.9
️✔️storage
️✔️2018-03-01-hybrid
️✔️3.12
️✔️3.9
️✔️2019-03-01-hybrid
️✔️3.12
️✔️3.9
️✔️2020-09-01-hybrid
️✔️3.12
️✔️3.9
️✔️latest
️✔️3.12
️✔️3.9
️✔️synapse
️✔️latest
️✔️3.12
️✔️3.9
️✔️telemetry
️✔️2018-03-01-hybrid
️✔️3.12
️✔️3.9
️✔️2019-03-01-hybrid
️✔️3.12
️✔️3.9
️✔️2020-09-01-hybrid
️✔️3.12
️✔️3.9
️✔️latest
️✔️3.12
️✔️3.9
️✔️util
️✔️latest
️✔️3.12
️✔️3.9
️✔️vm
️✔️2018-03-01-hybrid
️✔️3.12
️✔️3.9
️✔️2019-03-01-hybrid
️✔️3.12
️✔️3.9
️✔️2020-09-01-hybrid
️✔️3.12
️✔️3.9
️✔️latest
️✔️3.12
️✔️3.9

@azure-client-tools-bot-prd
Copy link

Hi @Jing-song,
Since the current milestone time is less than 7 days, this pr will be reviewed in the next milestone.

@azure-client-tools-bot-prd
Copy link

azure-client-tools-bot-prd bot commented Apr 15, 2025

⚠️AzureCLI-BreakingChangeTest
⚠️vm
rule cmd_name rule_message suggest_message
⚠️ 1006 - ParaAdd vm create cmd vm create added parameter imds_access_control_profile_reference_id
⚠️ 1006 - ParaAdd vm create cmd vm create added parameter imds_mode
⚠️ 1006 - ParaAdd vm create cmd vm create added parameter key_incarnation_id
⚠️ 1006 - ParaAdd vm create cmd vm create added parameter wire_server_access_control_profile_reference_id
⚠️ 1006 - ParaAdd vm create cmd vm create added parameter wire_server_mode
⚠️ 1008 - ParaPropAdd vm create cmd vm create update parameter proxy_agent_mode: added property deprecate_info_redirect=--wire-server-mode
⚠️ 1008 - ParaPropAdd vm create cmd vm create update parameter proxy_agent_mode: added property deprecate_info_target=--proxy-agent-mode
⚠️ 1006 - ParaAdd vm update cmd vm update added parameter imds_access_control_profile_reference_id
⚠️ 1006 - ParaAdd vm update cmd vm update added parameter imds_mode
⚠️ 1006 - ParaAdd vm update cmd vm update added parameter key_incarnation_id
⚠️ 1006 - ParaAdd vm update cmd vm update added parameter wire_server_access_control_profile_reference_id
⚠️ 1006 - ParaAdd vm update cmd vm update added parameter wire_server_mode
⚠️ 1008 - ParaPropAdd vm update cmd vm update update parameter proxy_agent_mode: added property deprecate_info_redirect=--wire-server-mode
⚠️ 1008 - ParaPropAdd vm update cmd vm update update parameter proxy_agent_mode: added property deprecate_info_target=--proxy-agent-mode
⚠️ 1006 - ParaAdd vmss create cmd vmss create added parameter imds_access_control_profile_reference_id
⚠️ 1006 - ParaAdd vmss create cmd vmss create added parameter imds_mode
⚠️ 1006 - ParaAdd vmss create cmd vmss create added parameter wire_server_access_control_profile_reference_id
⚠️ 1006 - ParaAdd vmss create cmd vmss create added parameter wire_server_mode
⚠️ 1008 - ParaPropAdd vmss create cmd vmss create update parameter proxy_agent_mode: added property deprecate_info_redirect=--wire-server-mode
⚠️ 1008 - ParaPropAdd vmss create cmd vmss create update parameter proxy_agent_mode: added property deprecate_info_target=--proxy-agent-mode
⚠️ 1006 - ParaAdd vmss update cmd vmss update added parameter imds_access_control_profile_reference_id
⚠️ 1006 - ParaAdd vmss update cmd vmss update added parameter imds_mode
⚠️ 1006 - ParaAdd vmss update cmd vmss update added parameter wire_server_access_control_profile_reference_id
⚠️ 1006 - ParaAdd vmss update cmd vmss update added parameter wire_server_mode
⚠️ 1008 - ParaPropAdd vmss update cmd vmss update update parameter proxy_agent_mode: added property deprecate_info_redirect=--wire-server-mode
⚠️ 1008 - ParaPropAdd vmss update cmd vmss update update parameter proxy_agent_mode: added property deprecate_info_target=--proxy-agent-mode

@yonzhan
Copy link
Collaborator

yonzhan commented Apr 15, 2025

Thank you for your contribution! We will review the pull request and get back to you soon.

@github-actions
Copy link

The git hooks are available for azure-cli and azure-cli-extensions repos. They could help you run required checks before creating the PR.

Please sync the latest code with latest dev branch (for azure-cli) or main branch (for azure-cli-extensions).
After that please run the following commands to enable git hooks:

pip install azdev --upgrade
azdev setup -c <your azure-cli repo path> -r <your azure-cli-extensions repo path>

])

self.cmd('vmss create -g {rg} -n {vmss1} --image ubuntu2204 --enable-proxy-agent --proxy-agent-mode Audit --vm-sku Standard_D2s_v3 --orchestration-mode Flexible', checks=[
self.cmd('vmss create -g {rg} -n {vmss1} --image Win2022Datacenter --nsg {nsg} --enable-proxy-agent --wire-server-mode Audit --imds-mode Audit --vm-sku Standard_D2s_v3 --orchestration-mode Flexible --admin-password Password001!', checks=[
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

May I ask why do we need to replace the test image?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

These new parameters are not available for ubuntu2204 ,so replaced it with Win2022Datacenter

Comment on lines 1715 to 1717
if enable_proxy_agent is not None or wire_server_mode is not None or imds_mode is not None or \
wire_server_access_control_profile_reference_id is not None or \
imds_access_control_profile_reference_id is not None or key_incarnation_id is not None:
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This judgment condition seems too complex. Is there any way to simplify it or make it more readable?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Done

@zhoxing-ms zhoxing-ms merged commit 125a749 into Azure:dev Apr 18, 2025
53 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Auto-Assign Auto assign by bot Compute az vm/vmss/image/disk/snapshot

Projects

None yet

Development

Successfully merging this pull request may close these issues.

VM/VMSS to support v2 Version of Azure Metadata Security Protocol

4 participants