Skip to content

[Network] az network application-gateway : Upgrade API version to 2025-07-01 to support Managed HSM certificates - #33999

Open
Jian Hui (huiii99) wants to merge 3 commits into
Azure:devfrom
huiii99:fix/ag-root-version-upgrade
Open

[Network] az network application-gateway : Upgrade API version to 2025-07-01 to support Managed HSM certificates#33999
Jian Hui (huiii99) wants to merge 3 commits into
Azure:devfrom
huiii99:fix/ag-root-version-upgrade

Conversation

@huiii99

@huiii99 Jian Hui (huiii99) commented Aug 27, 2026

Copy link
Copy Markdown
Member

🤖 PR Validation — ⚠️ Review suggested

Breaking Changes Tests
⚠️ None ️✔️ 130/130
⚠️AzureCLI-BreakingChangeTest
⚠️network
rule cmd_name rule_message suggest_message
⚠️ 1006 - ParaAdd network application-gateway update cmd network application-gateway update added parameter entra_jwt_validation_configs

Related command
az network application-gateway create
az network application-gateway delete
az network application-gateway list
az network application-gateway show
az network application-gateway update
az network application-gateway wait

Description
Upgrade the Application Gateway root commands from API version 2024-10-01 to 2025-07-01.

Fixes #33981
AAZ Azure/aaz#1073

Testing Guide
azdev test test_network_app_gateway_ssl_cert_managed_hsm --live

History Notes
[Network] az network application-gateway: Upgrade API version to 2025-07-01 to support Managed HSM certificates


This checklist is used to make sure that common guidelines for a pull request are followed.

@microsoft-github-policy-service microsoft-github-policy-service Bot added the Auto-Assign Auto assign by bot label Aug 27, 2026
@huiii99 Jian Hui (huiii99) changed the title [Network] az network application-gateway: Upgrade API version to 2025-07-01 to support Managed HSM certificates [Network] az network application-gateway : Upgrade API version to 2025-07-01 to support Managed HSM certificates Aug 27, 2026
@yonzhan

Copy link
Copy Markdown
Collaborator

Network

@huiii99
Jian Hui (huiii99) marked this pull request as ready for review August 27, 2026 08:36
@huiii99
Jian Hui (huiii99) requested a review from a team as a code owner August 27, 2026 08:36
Copilot AI lite review requested due to automatic review settings August 27, 2026 08:36
@huiii99
Jian Hui (huiii99) requested a review from a team as a code owner August 27, 2026 08:36
@huiii99

Copy link
Copy Markdown
Member Author

/azp run

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
Successfully started running 3 pipeline(s).

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Upgrades the generated AAZ az network application-gateway root command group to use Network RP API version 2025-07-01, so the parent Application Gateway GET/PUT/DELETE flows return and preserve Managed HSM SSL certificate fields (fixing the API-version mismatch described in #33981).

Changes:

  • Bump Application Gateway root AAZ command API version from 2024-10-01 to 2025-07-01.
  • Extend the live test to assert parent application-gateway show and application-gateway update preserve HSM-backed certificate properties.
  • Update test recordings to reflect the new api-version used on Application Gateway requests.

Reviewed changes

Copilot reviewed 31 out of 39 changed files in this pull request and generated no comments.

Show a summary per file
File Description
src/azure-cli/azure/cli/command_modules/network/tests/latest/test_network_commands.py Adds coverage ensuring parent show/update preserve Managed HSM SSL certificate fields.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_public_ip_ddos_settings.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_nic_app_gateway.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_nic_ag_address_pools.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_application_gateway_http_settings_validate_flags.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_appgw_creation_with_public_and_private_ip.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_app_gateway_with_waf_v2_sku.yaml Updates recorded Application Gateway list/show request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_app_gateway_with_ssl_profile.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_app_gateway_with_private_ip.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_app_gateway_waf_policy_with_application_gateway.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_app_gateway_waf_config.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_app_gateway_rewrite_rulesets.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_app_gateway_redirect_config.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_ag_zone.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_ag_url_path_map.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_ag_url_path_map_edge_case.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_ag_rule.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_ag_http_listener.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_ag_http_listener_with_waf_policy.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_ag_frontend_port.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_ag_frontend_ip_public.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_ag_frontend_ip_private.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_network_ag_address_pool.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_manage_appgw_private_endpoint.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_appgw_with_tcp.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_appgw_private_endpoint_with_overwrite_default.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_appgw_private_endpoint_with_default.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_ag_with_non_v2_sku.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/tests/latest/recordings/test_ag_rule_create_preserves_http_settings_validate_flags.yaml Updates recorded Application Gateway request api-version to 2025-07-01.
src/azure-cli/azure/cli/command_modules/network/aaz/latest/network/application_gateway/_delete.py Updates root delete command to 2025-07-01 and refreshes help/example metadata.
src/azure-cli/azure/cli/command_modules/monitor/tests/latest/recordings/test_metric_alert_special_char_scenario.yaml Updates recorded Application Gateway request api-version to 2025-07-01 in monitor scenario recording.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

@necusjz

Ethan Yang (necusjz) commented Aug 28, 2026

Copy link
Copy Markdown
Member

contacted Jack Stromberg (@JackStromberg) for private build testing upon this pr.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

act-quality-productivity-squad Auto-Assign Auto assign by bot Network az network vnet/lb/nic/dns/etc...

Projects

None yet

Development

Successfully merging this pull request may close these issues.

The latest Azure CLI release (2.89.1) still generates the parent Application Gateway GET command with API version 2024-10-01

4 participants