Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Auxiliary tokens missing in the latest version of CLI #30976

Open
yanzhudd opened this issue Mar 7, 2025 · 2 comments · May be fixed by #30977
Open

Auxiliary tokens missing in the latest version of CLI #30976

yanzhudd opened this issue Mar 7, 2025 · 2 comments · May be fixed by #30977
Assignees
@zhoxing-ms @yanzhudd
Labels
Auto-Assign Auto assign by bot Auto-Resolve Auto resolve by bot Azure CLI Team The command of the issue is owned by Azure CLI team bug This issue requires a change to an existing behavior in the product in order to be resolved. Compute az vm/vmss/image/disk/snapshot
Milestone
Backlog

Comments

@yanzhudd
Copy link
Contributor

yanzhudd commented Mar 7, 2025 •
edited
Loading

Describe the bug

Before opening the case Cx was using direct shared gallery, and it was working fine unti 21st of february. THey starting getting errors (mentioned later) and as testing, they've disabled it, and not the option is greyed out.

  • The main goal is for Cx to be able to re-enable the direct shared gallery
          
    as the goad is to share the gallery across tenants, Cx doesn't mind to use RBAC sharing instead. Still, no matter which option, customer is not able to access an image located in another tenant.
    It was working fine until 21st Feb

Command used:
az sig image-version create --gallery-image-definition ado_image --gallery-image-version 1.3.0_test --gallery-name packer_shareimages --resource-group RG-SHARED-AMI --image-version /subscriptions/e6b5053b-4c38-4475-a835-a025aeb3d8c7/resourceGroups/RG-SHARED-AMI/providers/Microsoft.Compute/galleries/packer_shareimages/images/ado_image/versions/1.3.0

Error:
Code: LinkedAuthorizationFailed
Message: The client has permission to perform action 'Microsoft.Compute/galleries/images/versions/read' on scope '/subscriptions/9ab65d81-930d-4cc0-a93d-367e14676bc0/resourceGroups/RG-SHARED-AMI/providers/Microsoft.Compute/galleries/packer_shareimages/images/ado_image/versions/1.3.0_test', however the current tenant '77f54315-6dde-4fe7-9e17-74762c3eb096' is not authorized to access linked subscription 'e6b5053b-4c38-4475-a835-a025aeb3d8c7'.

(happen also with other image versions)

Production (target):
/subscriptions/9ab65d81-930d-4cc0-a93d-367e14676bc0/resourceGroups/RG-SHARED-AMI/providers/Microsoft.Compute/galleries/packer_shareimages
type: Microsoft.Compute/galleries
location: uksouth
      
Non prod (source):
/subscriptions/e6b5053b-4c38-4475-a835-a025aeb3d8c7/resourceGroups/RG-SHARED-AMI/providers/Microsoft.Compute/galleries/packer_shareimages
type: Microsoft.Compute/galleries
location: uksouth

Related command

az sig image-vresion create

Errors

Code: LinkedAuthorizationFailed

Message: The client has permission to perform action 'Microsoft.Compute/galleries/images/versions/read' on scope '/subscriptions/9ab65d81-930d-4cc0-a93d-367e14676bc0/resourceGroups/RG-SHARED-AMI/providers/Microsoft.Compute/galleries/packer_shareimages/images/ado_image/versions/1.3.0_test', however the current tenant '77f54315-6dde-4fe7-9e17-74762c3eb096' is not authorized to access linked subscription 'e6b5053b-4c38-4475-a835-a025aeb3d8c7'.

Issue script & Debug output

Auxiliary tokens missing in the latest version of CLI.

Image

Expected behavior

N/A

Environment Summary

azure-cli 2.69.0

Additional context

No response
@yanzhudd yanzhudd added the bug This issue requires a change to an existing behavior in the product in order to be resolved. label Mar 7, 2025
@azure-client-tools-bot-prd azure-client-tools-bot-prd
Copy link

Hi @yanzhudd,

2.69.0 is not the latest Azure CLI(2.70.0).

If you haven't already attempted to do so, please upgrade to the latest Azure CLI version by following https://learn.microsoft.com/en-us/cli/azure/update-azure-cli.

@azure-client-tools-bot-prd azure-client-tools-bot-prd bot added the Auto-Resolve Auto resolve by bot label Mar 7, 2025
@yonzhan
Copy link
Collaborator

yonzhan commented Mar 7, 2025 •
edited
Loading

Compute bug fix

@microsoft-github-policy-service microsoft-github-policy-service bot added the Compute az vm/vmss/image/disk/snapshot label Mar 7, 2025
@microsoft-github-policy-service microsoft-github-policy-service bot added Auto-Assign Auto assign by bot Azure CLI Team The command of the issue is owned by Azure CLI team question The issue doesn't require a change to the product in order to be resolved. Most issues start as that labels Mar 7, 2025
@yonzhan yonzhan removed the question The issue doesn't require a change to the product in order to be resolved. Most issues start as that label Mar 7, 2025
@yonzhan yonzhan added this to the Backlog milestone Mar 7, 2025
@yanzhudd yanzhudd linked a pull request Mar 7, 2025 that will close this issue
Open
3 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@zhoxing-ms zhoxing-ms

@yanzhudd yanzhudd

Labels
Auto-Assign Auto assign by bot Auto-Resolve Auto resolve by bot Azure CLI Team The command of the issue is owned by Azure CLI team bug This issue requires a change to an existing behavior in the product in order to be resolved. Compute az vm/vmss/image/disk/snapshot
Projects
None yet
Milestone
Backlog
Development

Successfully merging a pull request may close this issue.

[Compute] Fix #30976: az sig image-version create: Fix missing auxiliary tokens yanzhudd/azure-cli
3 participants
@zhoxing-ms @yonzhan @yanzhudd