{AKS} Specify principal type in Web App Routing live test

[FumingZhang]

🤖 PR Validation — ️✔️ All clear

Breaking Changes
️✔️ None

---

Related command

az role assignment create in test_aks_create_and_update_web_application_routing_dns_zone

Description

The Web App Routing live test creates a DNS Zone Contributor assignment for a managed identity by passing its object ID through --assignee. Azure CLI then attempts to query Microsoft Graph to infer the principal type. In app-only environments without Graph directory permissions, the GUID fallback leaves the type unset and omits principalType from the role-assignment request.

Use --assignee-object-id with --assignee-principal-type ServicePrincipal so the request is unambiguous and compliant with PIM Only Mode enforcement without requiring Graph inference.

This is a test-only compliance hardening change and does not alter customer-facing aks-preview behavior. It was split from #10262 so that the Data Protection product fix and this AKS live-test fix can be reviewed independently.

Validation

• azdev style aks-preview --pep8 --pylint
• python -m py_compile src/aks-preview/azext_aks_preview/tests/latest/test_aks_commands.py
• python scripts/ci/test_index.py -q — 9 passed, 2 skipped

The live scenario was not run because it provisions an AKS cluster and DNS resources. No extension version bump is needed for a test-only change.

General Guidelines

• Have you run azdev style <YOUR_EXT> locally? (pip install azdev required)
• Have you run python scripts/ci/test_index.py -q locally? (pip install azdev required)
• My extension version conforms to the Extension version schema

For new extensions:

• My extension description/summary conforms to the Extension Summary Guidelines.

About Extension Publish

This PR changes only a live test, so it intentionally does not change the aks-preview version, history, or generated index.

[azure-client-tools-bot-prd]

Hi FumingZhang,
Please write the description of changes which can be perceived by customers into HISTORY.rst.
If you want to release a new extension version, please update the version in pyproject.toml (or setup.py, if the extension has not migrated yet) as well.

[Copilot]

Pull request overview

Updates the AKS Preview live test for Web App Routing so RBAC role assignment creation is explicit about the assignee’s identity type, avoiding Microsoft Graph principal-type inference in app-only environments.

Changes:

• Switches the test’s az role assignment create invocation from --assignee to --assignee-object-id.
• Adds --assignee-principal-type ServicePrincipal to ensure principalType is included in the request (PIM Only Mode compliant).

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Yong Zhang (yonzhan)]

AKS