Skip to content

{Network} az network application-gateway waf-policy: Remove local validation of rule set versions#31935

Merged
necusjz merged 1 commit intoAzure:devfrom
cxznmhdcxz:appgateway-WAF-version-remove-local-validation
Aug 14, 2025
Merged

{Network} az network application-gateway waf-policy: Remove local validation of rule set versions#31935
necusjz merged 1 commit intoAzure:devfrom
cxznmhdcxz:appgateway-WAF-version-remove-local-validation

Conversation

@cxznmhdcxz
Copy link
Member

Related command
az network application-gateway waf-policy managed-rule rule-set add/update
az network application-gateway waf-policy create

Description

resolve #31932
Remove local validation of rule set version, for increasing release cadence.

Testing Guide

History Notes

[Component Name 1] BREAKING CHANGE: az command a: Make some customer-facing breaking change
[Component Name 2] az command b: Add some customer-facing feature


This checklist is used to make sure that common guidelines for a pull request are followed.

@azure-client-tools-bot-prd
Copy link

azure-client-tools-bot-prd bot commented Aug 12, 2025

️✔️AzureCLI-FullTest
️✔️acr
️✔️latest
️✔️3.12
️✔️3.9
️✔️acs
️✔️latest
️✔️3.12
️✔️3.9
️✔️advisor
️✔️latest
️✔️3.12
️✔️3.9
️✔️ams
️✔️latest
️✔️3.12
️✔️3.9
️✔️apim
️✔️latest
️✔️3.12
️✔️3.9
️✔️appconfig
️✔️latest
️✔️3.12
️✔️3.9
️✔️appservice
️✔️latest
️✔️3.12
️✔️3.9
️✔️aro
️✔️latest
️✔️3.12
️✔️3.9
️✔️backup
️✔️latest
️✔️3.12
️✔️3.9
️✔️batch
️✔️latest
️✔️3.12
️✔️3.9
️✔️batchai
️✔️latest
️✔️3.12
️✔️3.9
️✔️billing
️✔️latest
️✔️3.12
️✔️3.9
️✔️botservice
️✔️latest
️✔️3.12
️✔️3.9
️✔️cdn
️✔️latest
️✔️3.12
️✔️3.9
️✔️cloud
️✔️latest
️✔️3.12
️✔️3.9
️✔️cognitiveservices
️✔️latest
️✔️3.12
️✔️3.9
️✔️compute_recommender
️✔️latest
️✔️3.12
️✔️3.9
️✔️computefleet
️✔️latest
️✔️3.12
️✔️3.9
️✔️config
️✔️latest
️✔️3.12
️✔️3.9
️✔️configure
️✔️latest
️✔️3.12
️✔️3.9
️✔️consumption
️✔️latest
️✔️3.12
️✔️3.9
️✔️container
️✔️latest
️✔️3.12
️✔️3.9
️✔️containerapp
️✔️latest
️✔️3.12
️✔️3.9
️✔️core
️✔️latest
️✔️3.12
️✔️3.9
️✔️cosmosdb
️✔️latest
️✔️3.12
️✔️3.9
️✔️databoxedge
️✔️latest
️✔️3.12
️✔️3.9
️✔️dls
️✔️latest
️✔️3.12
️✔️3.9
️✔️dms
️✔️latest
️✔️3.12
️✔️3.9
️✔️eventgrid
️✔️latest
️✔️3.12
️✔️3.9
️✔️eventhubs
️✔️latest
️✔️3.12
️✔️3.9
️✔️feedback
️✔️latest
️✔️3.12
️✔️3.9
️✔️find
️✔️latest
️✔️3.12
️✔️3.9
️✔️hdinsight
️✔️latest
️✔️3.12
️✔️3.9
️✔️identity
️✔️latest
️✔️3.12
️✔️3.9
️✔️iot
️✔️latest
️✔️3.12
️✔️3.9
️✔️keyvault
️✔️latest
️✔️3.12
️✔️3.9
️✔️lab
️✔️latest
️✔️3.12
️✔️3.9
️✔️managedservices
️✔️latest
️✔️3.12
️✔️3.9
️✔️maps
️✔️latest
️✔️3.12
️✔️3.9
️✔️marketplaceordering
️✔️latest
️✔️3.12
️✔️3.9
️✔️monitor
️✔️latest
️✔️3.12
️✔️3.9
️✔️mysql
️✔️latest
️✔️3.12
️✔️3.9
️✔️netappfiles
️✔️latest
️✔️3.12
️✔️3.9
️✔️network
️✔️latest
️✔️3.12
️✔️3.9
️✔️policyinsights
️✔️latest
️✔️3.12
️✔️3.9
️✔️privatedns
️✔️latest
️✔️3.12
️✔️3.9
️✔️profile
️✔️latest
️✔️3.12
️✔️3.9
️✔️rdbms
️✔️latest
️✔️3.12
️✔️3.9
️✔️redis
️✔️latest
️✔️3.12
️✔️3.9
️✔️relay
️✔️latest
️✔️3.12
️✔️3.9
️✔️resource
️✔️latest
️✔️3.12
️✔️3.9
️✔️role
️✔️latest
️✔️3.12
️✔️3.9
️✔️search
️✔️latest
️✔️3.12
️✔️3.9
️✔️security
️✔️latest
️✔️3.12
️✔️3.9
️✔️servicebus
️✔️latest
️✔️3.12
️✔️3.9
️✔️serviceconnector
️✔️latest
️✔️3.12
️✔️3.9
️✔️servicefabric
️✔️latest
️✔️3.12
️✔️3.9
️✔️signalr
️✔️latest
️✔️3.12
️✔️3.9
️✔️sql
️✔️latest
️✔️3.12
️✔️3.9
️✔️sqlvm
️✔️latest
️✔️3.12
️✔️3.9
️✔️storage
️✔️latest
️✔️3.12
️✔️3.9
️✔️synapse
️✔️latest
️✔️3.12
️✔️3.9
️✔️telemetry
️✔️latest
️✔️3.12
️✔️3.9
️✔️util
️✔️latest
️✔️3.12
️✔️3.9
️✔️vm
️✔️latest
️✔️3.12
️✔️3.9

@azure-client-tools-bot-prd
Copy link

azure-client-tools-bot-prd bot commented Aug 12, 2025

⚠️AzureCLI-BreakingChangeTest
⚠️network
rule cmd_name rule_message suggest_message
⚠️ 1009 - ParaPropRemove network application-gateway waf-policy create cmd network application-gateway waf-policy create update parameter rule_set_version: removed property choices=['0.1', '1.0', '1.1', '2.1', '2.2.9', '3.0', '3.1', '3.2']
⚠️ 1009 - ParaPropRemove network application-gateway waf-policy managed-rule exclusion rule-set add cmd network application-gateway waf-policy managed-rule exclusion rule-set add update parameter rule_set_version: removed property choices=['0.1', '1.0', '1.1', '2.1', '2.2.9', '3.0', '3.1', '3.2']
⚠️ 1009 - ParaPropRemove network application-gateway waf-policy managed-rule exclusion rule-set remove cmd network application-gateway waf-policy managed-rule exclusion rule-set remove update parameter rule_set_version: removed property choices=['0.1', '1.0', '1.1', '2.1', '2.2.9', '3.0', '3.1', '3.2']
⚠️ 1009 - ParaPropRemove network application-gateway waf-policy managed-rule rule-set add cmd network application-gateway waf-policy managed-rule rule-set add update parameter rule_set_version: removed property choices=['0.1', '1.0', '1.1', '2.1', '2.2.9', '3.0', '3.1', '3.2']
⚠️ 1009 - ParaPropRemove network application-gateway waf-policy managed-rule rule-set remove cmd network application-gateway waf-policy managed-rule rule-set remove update parameter rule_set_version: removed property choices=['0.1', '1.0', '1.1', '2.1', '2.2.9', '3.0', '3.1', '3.2']
⚠️ 1009 - ParaPropRemove network application-gateway waf-policy managed-rule rule-set update cmd network application-gateway waf-policy managed-rule rule-set update update parameter rule_set_version: removed property choices=['0.1', '1.0', '1.1', '2.1', '2.2.9', '3.0', '3.1', '3.2']

@yonzhan
Copy link
Collaborator

yonzhan commented Aug 12, 2025

Thank you for your contribution! We will review the pull request and get back to you soon.

@github-actions
Copy link

The git hooks are available for azure-cli and azure-cli-extensions repos. They could help you run required checks before creating the PR.

Please sync the latest code with latest dev branch (for azure-cli) or main branch (for azure-cli-extensions).
After that please run the following commands to enable git hooks:

pip install azdev --upgrade
azdev setup -c <your azure-cli repo path> -r <your azure-cli-extensions repo path>

@microsoft-github-policy-service microsoft-github-policy-service bot added the Auto-Assign Auto assign by bot label Aug 12, 2025
@cxznmhdcxz cxznmhdcxz marked this pull request as ready for review August 12, 2025 10:23
Copilot AI review requested due to automatic review settings August 12, 2025 10:23
Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR removes local validation of rule set versions for the WAF (Web Application Firewall) policy commands to support Azure's increasing release cadence. The change allows the CLI to accept any version string instead of being restricted to a predefined list of versions.

  • Removes the RULESET_VERSION constant that defined allowed versions
  • Updates WAF policy commands to accept any version string without local validation
  • Maintains backward compatibility by keeping the default version as "2.1"

Reviewed Changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
src/azure-cli/azure/cli/command_modules/network/custom.py Removes RULESET_VERSION constant and enum validation from rule set version parameter
src/azure-cli/azure/cli/command_modules/network/_params.py Removes import and usage of RULESET_VERSION enum in parameter definition
Comments suppressed due to low confidence (1)

@necusjz
Copy link
Member

necusjz commented Aug 14, 2025

let's add a test case for 2.2.

@necusjz necusjz merged commit 4f8ec32 into Azure:dev Aug 14, 2025
53 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Auto-Assign Auto assign by bot

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add support for az network application-gateway waf-policy Microsoft_DefaultRuleSet 2.2 ruleset

4 participants