Skip to content

[Network] Fix #33981: az network application-gateway show: Bump parent Application Gateway API version to 2025-07-01 so Managed HSM SSL certificate fields are preserved - #34039

Closed
Aditya Pujara (a0x1ab) wants to merge 1 commit into
Azure:devfrom
a0x1ab:agent-assist/azure-azure-cli-issue-33981-ef9e71dface1

Conversation

@a0x1ab

Copy link
Copy Markdown
Member

Description

Fixes #33981.

Related command
az network application-gateway show / az network application-gateway create / az network application-gateway update

Description

The parent application_gateway AAZ operations (show, create, update) were using API version 2024-10-01, while the ssl_cert sub-group already used 2025-07-01. This mismatch caused sslCertificates[].properties.hsm.keyId and hsm.publicCertData (Managed HSM–backed certificate fields, introduced in 2025-07-01) to be silently dropped on any GET or PUT round-trip through the parent resource.

  • _show.py / _create.py / _update.py: Bumped _aaz_info["version"], the resources entry, and all api-version query parameters from 2024-10-012025-07-01.
  • Response schema (_show.py, _create.py, _update.py): Added sslCertificates[].properties.hsm (AAZObjectType) with hsm.key_id (keyId) and hsm.public_cert_data (publicCertData) to match the schema already present in the ssl_cert sub-group.

Testing Guide

New unit tests in test_network_unit_tests.py:

  • test_application_gateway_parent_api_version — asserts all three operations declare 2025-07-01 in _aaz_info and resources.
  • test_application_gateway_show_ssl_cert_hsm_schema — introspects the built ApplicationGatewaysGet response schema at runtime, asserting hsm, key_id, and public_cert_data are present under ssl_certificates.Element.properties.

History Notes

[Network] az network application-gateway show: Bump API version to 2025-07-01 so Managed HSM SSL certificate fields (hsm.keyId / hsm.publicCertData) are preserved on show/create/update

Generation source

Azure/aaz#1071

Generation source

Azure/aaz#1071

…p parent Application Gateway API version to 2025-07-01 so Managed HSM SSL certificate fields are preserved

* Initial plan

* Bump Application Gateway API version to 2025-07-01 and add Managed HSM SSL certificate fields

Co-authored-by: a0x1ab <59631311+a0x1ab@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: a0x1ab <59631311+a0x1ab@users.noreply.github.com>
@yonzhan

Copy link
Copy Markdown
Collaborator

Network

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

act-quality-productivity-squad Auto-Assign Auto assign by bot Network az network vnet/lb/nic/dns/etc...

Projects

None yet

Development

Successfully merging this pull request may close these issues.

The latest Azure CLI release (2.89.1) still generates the parent Application Gateway GET command with API version 2024-10-01

4 participants