Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[App Service] az webapp deploy: Add --pull-identity argument to enable MSI authentication for pull based deployments #30807

Open
wants to merge 1 commit into
base: dev
Choose a base branch
from

Conversation

dannysongg
Copy link
Member

Related command
az webapp deploy

Description
Adding --pull-identity argument to allow for MSI based authentication when performing a pull based deployment.

pullIdentity can have 3 states;

  • null: MSI will not be used. This matches the existing behavior (SAS or public access)
  • system: Authenticates using system assigned identity
  • {client-Id}: Authenticates using provided user assigned identity

Testing Guide
az webapp deploy -g {resource-group-name] -n {app-name} --src-url {package-url} --pull-identity system --type zip: Deploys a zip file from {package-url} using the system assigned identity of the web app to authenticate against the storage account.
az webapp deploy -g {resource-group-name] -n {app-name} --src-url {package-url} --pull-identity {client-id} --type zip: Deploys a zip file from {package-url} using the user assigned identity with id {client-id} to authenticate against the storage account
az webapp deploy -g {resource-group-name] -n {app-name} --src-url {package-url} --type zip: Behavior is unchanged. Deployment will pull with anonymous access or SAS token


This checklist is used to make sure that common guidelines for a pull request are followed.

Copy link

Validation for Azure CLI Full Test Starting...

Thanks for your contribution!

Copy link

Validation for Breaking Change Starting...

Thanks for your contribution!

@yonzhan
Copy link
Collaborator

yonzhan commented Feb 12, 2025

Thank you for your contribution! We will review the pull request and get back to you soon.

Copy link

The git hooks are available for azure-cli and azure-cli-extensions repos. They could help you run required checks before creating the PR.

Please sync the latest code with latest dev branch (for azure-cli) or main branch (for azure-cli-extensions).
After that please run the following commands to enable git hooks:

pip install azdev --upgrade
azdev setup -c <your azure-cli repo path> -r <your azure-cli-extensions repo path>

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Auto-Assign Auto assign by bot Web Apps az webapp
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants