Azure / azure-cli

Azure Command-Line Interface
MIT License
4.02k stars 2.99k forks source link

WebApp:az webapp config ssl import web app is required parameter #20983

Open SamWhitby opened 2 years ago

SamWhitby commented 2 years ago

az feedback auto-generates most of the information requested below, as of CLI version 2.0.62

Describe the bug running the command "az webapp config ssl import --key-vault example-kv --key-vault-certificate-name example-cert --resource-group exampe-rg" results in the error "(--name | --ids) are required" image However is is possible to import a certificate to a resource group without the need for an app service existing first via the api directly as seen in this terrafrom module https://github.com/hashicorp/terraform-provider-azurerm/blob/f2ac777d484662c83bb45ece1ca808e39357921b/vendor/github.com/Azure/azure-sdk-for-go/services/web/mgmt/2021-02-01/web/certificates.go#L82.

To Reproduce Run "az webapp config ssl import --key-vault example-kv --key-vault-certificate-name example-cert --resource-group exampe-rg"

Expected behavior App service name or id should not be required and the cert should be imported to the specified resource group and made available to all app services that are created in the future.

ghost commented 2 years ago

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @AzureAppServiceCLI, @antcp.

Issue Details
> ### `az feedback` auto-generates most of the information requested below, as of CLI version 2.0.62 **Describe the bug** running the command "az webapp config ssl import --key-vault example-kv --key-vault-certificate-name example-cert --resource-group exampe-rg" results in the error "(--name | --ids) are required" ![image](https://user-images.githubusercontent.com/3334161/149425153-42590210-da7b-4987-8059-2ece79001045.png) However is is possible to import a certificate to a resource group without the need for an app service existing first via the api directly as seen in this terrafrom module https://github.com/hashicorp/terraform-provider-azurerm/blob/f2ac777d484662c83bb45ece1ca808e39357921b/vendor/github.com/Azure/azure-sdk-for-go/services/web/mgmt/2021-02-01/web/certificates.go#L82. **To Reproduce** Run "az webapp config ssl import --key-vault example-kv --key-vault-certificate-name example-cert --resource-group exampe-rg" **Expected behavior** App service name or id should not be required and the cert should be imported to the specified resource group and made available to all app services that are created in the future.
Author: SamWhitby
Assignees: -
Labels: `Web Apps`, `Service Attention`, `customer-reported`
Milestone: -
yonzhan commented 2 years ago

route to service team

Kotasudhakarreddy commented 2 years ago

@SamWhitby Thanks for your feedback! we will review and check the feasibility. cc @panchagnula

panchagnula commented 2 years ago

@SamWhitby this is correct Certificates on App Service currently are not associated with a webapp but rather a webspace (note not RG) hence --name is not necessary