-
Notifications
You must be signed in to change notification settings - Fork 3.4k
az containerapp --yaml fails parsing to json when user assigned identity is included #23307
Copy link
Copy link
Open
Labels
Auto-AssignAuto assign by botAuto assign by botContainer Instancesaz containeraz containerContainerAppService AttentionThis issue is responsible by Azure service team.This issue is responsible by Azure service team.act-observability-squadcustomer-reportedIssues that are reported by GitHub users external to the Azure organization.Issues that are reported by GitHub users external to the Azure organization.questionThe issue doesn't require a change to the product in order to be resolved. Most issues start as thatThe issue doesn't require a change to the product in order to be resolved. Most issues start as that
Metadata
Metadata
Assignees
Labels
Auto-AssignAuto assign by botAuto assign by botContainer Instancesaz containeraz containerContainerAppService AttentionThis issue is responsible by Azure service team.This issue is responsible by Azure service team.act-observability-squadcustomer-reportedIssues that are reported by GitHub users external to the Azure organization.Issues that are reported by GitHub users external to the Azure organization.questionThe issue doesn't require a change to the product in order to be resolved. Most issues start as thatThe issue doesn't require a change to the product in order to be resolved. Most issues start as that
Related command
az containerapp create -n container-name -g resource-group --yaml file.yamlDescribe the bug
Using the yaml specification for creating a containerapp, when user assigned identities are specified, it will always say:
The 'UserAssignedIdentities' property keys should only be empty json objects, null or the resource exisiting property.(actually the response also has a typoexisiting😄 )Upon checking running again with
--verboseon, it seems the empty json object{}, still get parsed to json as:I understand that the use of
identityin the yaml specification isn't actually listed in the documentation, but it seems that it is possible to use it, just that the parsing of empty{}values in yaml creates those nullprincipalIdandclientIdproperties.To Reproduce
az containerapp create -n container-name -g example-rg --yaml file.yamlExpected behavior
I'd expect the container app to be created with the managed identity assigned to the ACA
Environment summary
My az version:
2.38.0Additional context
After finding checking out the request body via
--verbose, I've tried it myself via rest , and changing the identity value to empty json works.i.e