Skip to content

[App Service] Fix #28836, #30100: Wire through --protocol and --domain-validation-method params#33063

Closed
seligj95 wants to merge 2 commits intoAzure:devfrom
seligj95:fix/28836-30100-param-wiring
Closed

[App Service] Fix #28836, #30100: Wire through --protocol and --domain-validation-method params#33063
seligj95 wants to merge 2 commits intoAzure:devfrom
seligj95:fix/28836-30100-param-wiring

Conversation

@seligj95
Copy link
Copy Markdown
Contributor

Description

Fixes #28836 and #30100 by wiring through two existing SDK parameters that were missing from CLI commands.

Fix #28836--protocol for az webapp config storage-account add/update

The AzureStorageInfoValue model in azure-mgmt-web already supports a protocol parameter (Smb/Nfs), but neither add_azure_storage_account() nor update_azure_storage_account() passed it through. This blocked users from mounting NFS Azure Files shares.

Changes:

  • Added --protocol parameter (choices: Smb, Nfs) to the webapp config storage-account argument context in _params.py
  • Updated both functions in custom.py to accept and pass protocol to AzureStorageInfoValue()
  • Added help examples in _help.py

Fix #30100--domain-validation-method for az webapp config ssl create

The Certificate model already supports domain_validation_method, but create_managed_ssl_cert() did not pass it. This prevented managed certificate creation for child DNS zones that require TXT record validation.

Changes:

  • Added --domain-validation-method parameter to the config ssl create argument context in _params.py
  • Updated create_managed_ssl_cert() in custom.py to accept and pass the parameter
  • Added help example in _help.py

Testing

  • Added 3 unit tests in test_webapp_commands_thru_mock.py
  • All 32 tests pass
  • azdev style appservice passes (pylint + flake8)

This checklist is used to make sure that common guidelines for a pull request are followed.

Co-authored-by: Copilot 223556219+Copilot@users.noreply.github.com

… and `--domain-validation-method` params

Add --protocol (Smb/Nfs) parameter to `az webapp config storage-account add/update`
to support NFS protocol for Azure Files storage mounts (fixes Azure#28836).

Add --domain-validation-method parameter to `az webapp config ssl create`
to support managed certificate creation for child DNS zones (fixes Azure#30100).

Both parameters were already supported by the underlying SDK models but were
not wired through the CLI commands.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot AI review requested due to automatic review settings March 26, 2026 13:56
@azure-client-tools-bot-prd
Copy link
Copy Markdown

azure-client-tools-bot-prd bot commented Mar 26, 2026

️✔️AzureCLI-FullTest
️✔️acr
️✔️latest
️✔️3.12
️✔️3.13
️✔️acs
️✔️latest
️✔️3.12
️✔️3.13
️✔️advisor
️✔️latest
️✔️3.12
️✔️3.13
️✔️ams
️✔️latest
️✔️3.12
️✔️3.13
️✔️apim
️✔️latest
️✔️3.12
️✔️3.13
️✔️appconfig
️✔️latest
️✔️3.12
️✔️3.13
️✔️appservice
️✔️latest
️✔️3.12
️✔️3.13
️✔️aro
️✔️latest
️✔️3.12
️✔️3.13
️✔️backup
️✔️latest
️✔️3.12
️✔️3.13
️✔️batch
️✔️latest
️✔️3.12
️✔️3.13
️✔️batchai
️✔️latest
️✔️3.12
️✔️3.13
️✔️billing
️✔️latest
️✔️3.12
️✔️3.13
️✔️botservice
️✔️latest
️✔️3.12
️✔️3.13
️✔️cdn
️✔️latest
️✔️3.12
️✔️3.13
️✔️cloud
️✔️latest
️✔️3.12
️✔️3.13
️✔️cognitiveservices
️✔️latest
️✔️3.12
️✔️3.13
️✔️compute_recommender
️✔️latest
️✔️3.12
️✔️3.13
️✔️computefleet
️✔️latest
️✔️3.12
️✔️3.13
️✔️config
️✔️latest
️✔️3.12
️✔️3.13
️✔️configure
️✔️latest
️✔️3.12
️✔️3.13
️✔️consumption
️✔️latest
️✔️3.12
️✔️3.13
️✔️container
️✔️latest
️✔️3.12
️✔️3.13
️✔️containerapp
️✔️latest
️✔️3.12
️✔️3.13
️✔️core
️✔️latest
️✔️3.12
️✔️3.13
️✔️cosmosdb
️✔️latest
️✔️3.12
️✔️3.13
️✔️databoxedge
️✔️latest
️✔️3.12
️✔️3.13
️✔️dls
️✔️latest
️✔️3.12
️✔️3.13
️✔️dms
️✔️latest
️✔️3.12
️✔️3.13
️✔️eventgrid
️✔️latest
️✔️3.12
️✔️3.13
️✔️eventhubs
️✔️latest
️✔️3.12
️✔️3.13
️✔️feedback
️✔️latest
️✔️3.12
️✔️3.13
️✔️find
️✔️latest
️✔️3.12
️✔️3.13
️✔️hdinsight
️✔️latest
️✔️3.12
️✔️3.13
️✔️identity
️✔️latest
️✔️3.12
️✔️3.13
️✔️iot
️✔️latest
️✔️3.12
️✔️3.13
️✔️keyvault
️✔️latest
️✔️3.12
️✔️3.13
️✔️lab
️✔️latest
️✔️3.12
️✔️3.13
️✔️managedservices
️✔️latest
️✔️3.12
️✔️3.13
️✔️maps
️✔️latest
️✔️3.12
️✔️3.13
️✔️marketplaceordering
️✔️latest
️✔️3.12
️✔️3.13
️✔️monitor
️✔️latest
️✔️3.12
️✔️3.13
️✔️mysql
️✔️latest
️✔️3.12
️✔️3.13
️✔️netappfiles
️✔️latest
️✔️3.12
️✔️3.13
️✔️network
️✔️latest
️✔️3.12
️✔️3.13
️✔️policyinsights
️✔️latest
️✔️3.12
️✔️3.13
️✔️postgresql
️✔️latest
️✔️3.12
️✔️3.13
️✔️privatedns
️✔️latest
️✔️3.12
️✔️3.13
️✔️profile
️✔️latest
️✔️3.12
️✔️3.13
️✔️rdbms
️✔️latest
️✔️3.12
️✔️3.13
️✔️redis
️✔️latest
️✔️3.12
️✔️3.13
️✔️relay
️✔️latest
️✔️3.12
️✔️3.13
️✔️resource
️✔️latest
️✔️3.12
️✔️3.13
️✔️role
️✔️latest
️✔️3.12
️✔️3.13
️✔️search
️✔️latest
️✔️3.12
️✔️3.13
️✔️security
️✔️latest
️✔️3.12
️✔️3.13
️✔️servicebus
️✔️latest
️✔️3.12
️✔️3.13
️✔️serviceconnector
️✔️latest
️✔️3.12
️✔️3.13
️✔️servicefabric
️✔️latest
️✔️3.12
️✔️3.13
️✔️signalr
️✔️latest
️✔️3.12
️✔️3.13
️✔️sql
️✔️latest
️✔️3.12
️✔️3.13
️✔️sqlvm
️✔️latest
️✔️3.12
️✔️3.13
️✔️storage
️✔️latest
️✔️3.12
️✔️3.13
️✔️synapse
️✔️latest
️✔️3.12
️✔️3.13
️✔️telemetry
️✔️latest
️✔️3.12
️✔️3.13
️✔️util
️✔️latest
️✔️3.12
️✔️3.13
️✔️vm
️✔️latest
️✔️3.12
️✔️3.13

@azure-client-tools-bot-prd
Copy link
Copy Markdown

Hi @seligj95,
Since the current milestone time is less than 7 days, this pr will be reviewed in the next milestone.

@azure-client-tools-bot-prd
Copy link
Copy Markdown

azure-client-tools-bot-prd bot commented Mar 26, 2026

⚠️AzureCLI-BreakingChangeTest
⚠️appservice
rule cmd_name rule_message suggest_message
⚠️ 1006 - ParaAdd functionapp config ssl create cmd functionapp config ssl create added parameter domain_validation_method
⚠️ 1006 - ParaAdd webapp config ssl create cmd webapp config ssl create added parameter domain_validation_method
⚠️ 1006 - ParaAdd webapp config storage-account add cmd webapp config storage-account add added parameter protocol
⚠️ 1006 - ParaAdd webapp config storage-account update cmd webapp config storage-account update added parameter protocol

@yonzhan
Copy link
Copy Markdown
Collaborator

yonzhan commented Mar 26, 2026

Thank you for your contribution! We will review the pull request and get back to you soon.

@github-actions
Copy link
Copy Markdown

The git hooks are available for azure-cli and azure-cli-extensions repos. They could help you run required checks before creating the PR.

Please sync the latest code with latest dev branch (for azure-cli) or main branch (for azure-cli-extensions).
After that please run the following commands to enable git hooks:

pip install azdev --upgrade
azdev setup -c <your azure-cli repo path> -r <your azure-cli-extensions repo path>

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Wires through previously-unexposed SDK fields in the App Service CLI module so users can (1) set Azure Files mount protocol (SMB/NFS) for storage-account configs and (2) choose managed certificate domain validation method when creating SSL certs.

Changes:

  • Added --protocol to az webapp config storage-account add/update and passed it through to AzureStorageInfoValue.
  • Added --domain-validation-method to az webapp config ssl create and passed it through to the Certificate model.
  • Added unit tests and updated help examples covering both new parameters.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated no comments.

File Description
src/azure-cli/azure/cli/command_modules/appservice/custom.py Plumbs protocol into storage-account add/update and domain_validation_method into managed cert creation.
src/azure-cli/azure/cli/command_modules/appservice/_params.py Exposes new CLI parameters --protocol and --domain-validation-method.
src/azure-cli/azure/cli/command_modules/appservice/_help.py Adds help examples demonstrating NFS mounts and TXT-based domain validation.
src/azure-cli/azure/cli/command_modules/appservice/tests/latest/test_webapp_commands_thru_mock.py Adds unit tests asserting both parameters are forwarded into the corresponding SDK models.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

- Add --validation-method as shorter alias for --domain-validation-method
  to satisfy option_length_too_long (HIGH severity) linter rule
- Add missing_parameter_test_coverage exclusions for new params:
  domain_validation_method (webapp/functionapp config ssl create)
  protocol (webapp config storage-account add/update)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
@seligj95
Copy link
Copy Markdown
Contributor Author

Consolidated into #33067 — all commits from this PR have been cherry-picked into the primary branch.

@seligj95 seligj95 closed this Mar 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

az webapp config ssl create - Doesn't support child DNS zone You forgot to add support for NFS into az webapp config storage-account command

5 participants