Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

az appconfig authentication not working, "object has no attribute '_credential'" #30945

Open
andre-qumulo opened this issue Mar 4, 2025 · 8 comments
Assignees
Labels
App Configuration Auto-Assign Auto assign by bot Auto-Resolve Auto resolve by bot bug This issue requires a change to an existing behavior in the product in order to be resolved. customer-reported Issues that are reported by GitHub users external to the Azure organization. Service Attention This issue is responsible by Azure service team.

Comments

@andre-qumulo
Copy link

Describe the bug

The az appconfig command now no longer supports login auth mode with system assigned identities

Related command

az appconfig kv set

Errors

'MSIAuthenticationWrapper' object has no attribute '_credential'
Traceback (most recent call last):
  File "/opt/az/lib/python3.12/site-packages/knack/cli.py", line 233, in invoke
    cmd_result = self.invocation.execute(args)
                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 666, in execute
    raise ex
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 734, in _run_jobs_serially
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 703, in _run_job
    result = cmd_copy(params)
             ^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 336, in __call__
    return self.handler(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/command_operation.py", line 120, in handler
    return op(**command_args)
           ^^^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/command_modules/appconfig/keyvalue.py", line 443, in set_key
    azconfig_client = get_appconfig_data_client(cmd, name, connection_string, auth_mode, endpoint)
                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/command_modules/appconfig/_utils.py", line 191, in get_appconfig_data_client
    azconfig_client = AzureAppConfigurationClient(credential=AppConfigurationCliCredential(cred._credential, token_audience),  # pylint: disable=protected-access
                                                                                           ^^^^^^^^^^^^^^^^
AttributeError: 'MSIAuthenticationWrapper' object has no attribute '_credential'
To check existing issues, please visit: https://github.com/Azure/azure-cli/issues
    results.append(self._run_job(expanded_arg, cmd_copy))
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Issue script & Debug output

curl -sL https://aka.ms/InstallAzureCLIDeb | sudo bash
az login --identity
az appconfig kv set --auth-mode login --endpoint "https://test-appconfig.azconfig.io/" --key "Sample" --value "SampleValue" --yes

Output

$ az appconfig kv set --auth-mode login --endpoint "https://test-appconfig.azconfig.io/" --key "Sample" --value "SampleValue" --yes --debug
cli.knack.cli: Command arguments: ['appconfig', 'kv', 'set', '--auth-mode', 'login', '--endpoint', 'https://test-appconfig.azconfig.io/', '--key', 'Sample', '--value', 'SampleValue', '--yes', '--debug']
cli.knack.cli: __init__ debug log:
Enable color in terminal.
cli.knack.cli: Event: Cli.PreExecute []
cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x7a8b1fad3740>, <function OutputProducer.on_global_arguments at 0x7a8b1f87e700>, <function CLIQuery.on_globa
l_arguments at 0x7a8b1f8c3c40>]
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
cli.azure.cli.core: Modules found from index for 'appconfig': ['azure.cli.command_modules.appconfig']
cli.azure.cli.core: Loading command modules:
cli.azure.cli.core: Name                  Load Time    Groups  Commands
cli.azure.cli.core: appconfig                 0.003         9        47
cli.azure.cli.core: Total (1)                 0.003         9        47
cli.azure.cli.core: Loaded 9 groups, 47 commands.
cli.azure.cli.core: Found a match in the command table.
cli.azure.cli.core: Raw command  : appconfig kv set
cli.azure.cli.core: Command table: appconfig kv set
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x7a8b1eaf2f20>]
cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to '/home/adminuser/.azure/commands/2025-03-04.19-08-56.appconfig_kv_set.1480.log'.
az_command_data_logger: command args: appconfig kv set --auth-mode {} --endpoint {} --key {} --value {} --yes --debug
cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument.<locals>.add_subscription_parameter at 0x7a8b1eb37ec0>]
cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument.<locals>.add_ids_arguments at 0x7a8b1eb6a2a0>, <function register_cache_arguments.<locals>.add_cache_arguments at 0x7a8b1eb6a3e0>, <function register_upcoming_breaking_change_info.<locals>.update_breaking_change_info at 0x7a8b1eb6a480>]
cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
cli.knack.cli: Event: CommandInvoker.OnPreParseArgs []
cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x7a8b1f87e7a0>, <function CLIQuery.handle_query_parameter at 0x7a8b1f8c3ce0>, <function register_ids_argument.<locals>.parse_ids_arguments at 0x7a8b1eb6a340>]
cli.azure.cli.core.commands.client_factory: Getting management service client client_type=AppConfigurationManagementClient
urllib3.connectionpool: Starting new HTTP connection (1): 169.254.169.254:80
urllib3.connectionpool: [http://169.254.169.254:80](http://169.254.169.254/) "GET /metadata/identity/oauth2/token?resource=https%3A%2F%2Fmanagement.core.windows.net%2F&api-version=2018-02-01 HTTP/1.1" 200 1768
msrestazure.azure_active_directory: MSI: Retrieving a token from http://169.254.169.254/metadata/identity/oauth2/token, with payload {'resource': 'https://management.core.windows.net/', 'api-version': '2018-02-01'}
msrestazure.azure_active_directory: MSI: Token retrieved
urllib3.connectionpool: Starting new HTTP connection (1): 169.254.169.254:80
urllib3.connectionpool: [http://169.254.169.254:80](http://169.254.169.254/) "GET /metadata/identity/oauth2/token?resource=https%3A%2F%2Fmanagement.core.windows.net%2F&api-version=2018-02-01 HTTP/1.1" 200 1768
msrestazure.azure_active_directory: MSI: Retrieving a token from http://169.254.169.254/metadata/identity/oauth2/token, with payload {'resource': 'https://management.core.windows.net/', 'api-version': '2018-02-01'}
msrestazure.azure_active_directory: MSI: Token retrieved
cli.azure.cli.core.azclierror: Traceback (most recent call last):
cli.azure.cli.core.azclierror: Traceback (most recent call last):
  File "/opt/az/lib/python3.12/site-packages/knack/cli.py", line 233, in invoke
    cmd_result = self.invocation.execute(args)
                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 666, in execute
    raise ex
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 734, in _run_jobs_serially
    results.append(self._run_job(expanded_arg, cmd_copy))
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 703, in _run_job
    result = cmd_copy(params)
             ^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 336, in __call__
    return self.handler(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/command_operation.py", line 120, in handler
    return op(**command_args)
           ^^^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/command_modules/appconfig/keyvalue.py", line 443, in set_key
    azconfig_client = get_appconfig_data_client(cmd, name, connection_string, auth_mode, endpoint)
                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/command_modules/appconfig/_utils.py", line 191, in get_appconfig_data_client
    azconfig_client = AzureAppConfigurationClient(credential=AppConfigurationCliCredential(cred._credential, token_audience),  # pylint: disable=protected-access
                                                                                           ^^^^^^^^^^^^^^^^
AttributeError: 'MSIAuthenticationWrapper' object has no attribute '_credential'

cli.azure.cli.core.azclierror: The command failed with an unexpected error. Here is the traceback:
az_command_data_logger: The command failed with an unexpected error. Here is the traceback:
cli.azure.cli.core.azclierror: 'MSIAuthenticationWrapper' object has no attribute '_credential'
Traceback (most recent call last):
  File "/opt/az/lib/python3.12/site-packages/knack/cli.py", line 233, in invoke
    cmd_result = self.invocation.execute(args)
                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 666, in execute
    raise ex
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 734, in _run_jobs_serially
    results.append(self._run_job(expanded_arg, cmd_copy))
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 703, in _run_job
    result = cmd_copy(params)
             ^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 336, in __call__
    return self.handler(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/command_operation.py", line 120, in handler
    return op(**command_args)
          ^^^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/command_modules/appconfig/keyvalue.py", line 443, in set_key
    azconfig_client = get_appconfig_data_client(cmd, name, connection_string, auth_mode, endpoint)
                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/command_modules/appconfig/_utils.py", line 191, in get_appconfig_data_client
    azconfig_client = AzureAppConfigurationClient(credential=AppConfigurationCliCredential(cred._credential, token_audience),  # pylint: disable=protected-access
                                                                                           ^^^^^^^^^^^^^^^^
AttributeError: 'MSIAuthenticationWrapper' object has no attribute '_credential'
az_command_data_logger: 'MSIAuthenticationWrapper' object has no attribute '_credential'
Traceback (most recent call last):
  File "/opt/az/lib/python3.12/site-packages/knack/cli.py", line 233, in invoke
    cmd_result = self.invocation.execute(args)
                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 666, in execute
    raise ex
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 734, in _run_jobs_serially
    results.append(self._run_job(expanded_arg, cmd_copy))
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 703, in _run_job
    result = cmd_copy(params)
             ^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 336, in __call__
    return self.handler(*args, **kwargs)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/command_operation.py", line 120, in handler
    return op(**command_args)
           ^^^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/command_modules/appconfig/keyvalue.py", line 443, in set_key
    azconfig_client = get_appconfig_data_client(cmd, name, connection_string, auth_mode, endpoint)
                      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/az/lib/python3.12/site-packages/azure/cli/command_modules/appconfig/_utils.py", line 191, in get_appconfig_data_client
    azconfig_client = AzureAppConfigurationClient(credential=AppConfigurationCliCredential(cred._credential, token_audience),  # pylint: disable=protected-access
                                                                                           ^^^^^^^^^^^^^^^^
AttributeError: 'MSIAuthenticationWrapper' object has no attribute '_credential'
To check existing issues, please visit: https://github.com/Azure/azure-cli/issues
cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x7a8b1eaf31a0>]
az_command_data_logger: exit code: 1
cli.__main__: Command ran in 0.397 seconds (init: 0.116, invoke: 0.281)
telemetry.main: Begin splitting cli events and extra events, total events: 1
telemetry.client: Accumulated 0 events. Flush the clients.
telemetry.main: Finish splitting cli events and extra events, cli events: 1
telemetry.save: Save telemetry record of length 8021 in cache file under /home/adminuser/.azure/telemetry/20250304190856956
telemetry.main: Begin creating telemetry upload process.
telemetry.process: Creating upload process: "/opt/az/bin/python3 /opt/az/lib/python3.12/site-packages/azure/cli/telemetry/__init__.py /home/adminuser/.azure /home/adminuser/.azure/telemetry/20250304190856956"
telemetry.process: Return from creating process 1485
telemetry.main: Finish creating telemetry upload process.

Expected behavior

Failed to retrieve key-values from config store. Operation returned an invalid status 'Forbidden'

Environment Summary

Azure Linux vm with
azure-cli: 2.70

azure-cli: 2.69.0 works fine

Additional context

This change is what is causing the failure:
5fc3ec1

@andre-qumulo andre-qumulo added the bug This issue requires a change to an existing behavior in the product in order to be resolved. label Mar 4, 2025
Copy link

Hi @andre-qumulo,

2.69.0 is not the latest Azure CLI(2.70.0).

If you haven't already attempted to do so, please upgrade to the latest Azure CLI version by following https://learn.microsoft.com/en-us/cli/azure/update-azure-cli.

@azure-client-tools-bot-prd azure-client-tools-bot-prd bot added the Auto-Resolve Auto resolve by bot label Mar 4, 2025
@microsoft-github-policy-service microsoft-github-policy-service bot added customer-reported Issues that are reported by GitHub users external to the Azure organization. Auto-Assign Auto assign by bot Account az login/account labels Mar 4, 2025
@microsoft-github-policy-service microsoft-github-policy-service bot added Azure CLI Team The command of the issue is owned by Azure CLI team question The issue doesn't require a change to the product in order to be resolved. Most issues start as that App Configuration Service Attention This issue is responsible by Azure service team. labels Mar 4, 2025
@yonzhan yonzhan removed Account az login/account question The issue doesn't require a change to the product in order to be resolved. Most issues start as that Azure CLI Team The command of the issue is owned by Azure CLI team labels Mar 4, 2025
@yonzhan
Copy link
Collaborator

yonzhan commented Mar 4, 2025

route to service team

@andre-qumulo
Copy link
Author

I opened a support ticket for this issue: 2503040010002096

@pixelsnbits
Copy link

pixelsnbits commented Mar 5, 2025

I am also experiencing this issue on latest version of az cli with a managed identity (App Config Contributor/Reader/Data Reader):

bash-5.1$ az appconfig kv list -n (REDACTED) --all --auth-mode login
ERROR: The command failed with an unexpected error. Here is the traceback:
ERROR: 'MSIAuthenticationWrapper' object has no attribute '_credential'
Traceback (most recent call last):
  File "/usr/lib64/az/lib/python3.9/site-packages/knack/cli.py", line 233, in invoke
    cmd_result = self.invocation.execute(args)
  File "/usr/lib64/az/lib/python3.9/site-packages/azure/cli/core/commands/__init__.py", line 666, in execute
    raise ex
  File "/usr/lib64/az/lib/python3.9/site-packages/azure/cli/core/commands/__init__.py", line 734, in _run_jobs_serially
    results.append(self._run_job(expanded_arg, cmd_copy))
  File "/usr/lib64/az/lib/python3.9/site-packages/azure/cli/core/commands/__init__.py", line 703, in _run_job
    result = cmd_copy(params)
  File "/usr/lib64/az/lib/python3.9/site-packages/azure/cli/core/commands/__init__.py", line 336, in __call__
    return self.handler(*args, **kwargs)
  File "/usr/lib64/az/lib/python3.9/site-packages/azure/cli/core/commands/command_operation.py", line 120, in handler
    return op(**command_args)
  File "/usr/lib64/az/lib/python3.9/site-packages/azure/cli/command_modules/appconfig/keyvalue.py", line 791, in list_key
    azconfig_client = get_appconfig_data_client(cmd, name, connection_string, auth_mode, endpoint)
  File "/usr/lib64/az/lib/python3.9/site-packages/azure/cli/command_modules/appconfig/_utils.py", line 191, in get_appconfig_data_client
    azconfig_client = AzureAppConfigurationClient(credential=AppConfigurationCliCredential(cred._credential, token_audience),  # pylint: disable=protected-access
AttributeError: 'MSIAuthenticationWrapper' object has no attribute '_credential'
To check existing issues, please visit: https://github.com/Azure/azure-cli/issues


bash-5.1$ az --version
azure-cli                         2.70.0

core                              2.70.0
telemetry                          1.1.0

Extensions:
site-recovery                      1.0.0

Dependencies:
msal                            1.31.2b1
azure-mgmt-resource               23.1.1

Python location '/usr/bin/python3.9'
Config directory '/home/runner/.azure'
Extensions directory '/home/runner/.azure/cliextensions'

Python (Linux) 3.9.21 (main, Dec  5 2024, 00:00:00) 
[GCC 11.5.0 20240719 (Red Hat 11.5.0-2)]

Legal docs and information: aka.ms/AzureCliLegal

Update:
If I run the command in with --auth-mode key I am able to retrieve the expected data (Keys are enabled via the Portal but no key is set in the Environment, so not sure how it's getting access with the MSI)

az appconfig kv list -n (REDACTED) --all --auth-mode key --endpoint https://(REDACTED).azconfig.io

@Sakthi770
Copy link

Sakthi770 commented Mar 5, 2025

I am also facing the same issue while exporting using below az command, In my case we have az cli logged in selfhosted runner.

Workflow failing because of this issue. Even Not able to use --auth mode as key as its not enabled in our app configuration service.

command executed:
az appconfig kv export -n test-appconfig --auth-mode login --destination file --path testingfile.yaml --format yaml

Traceback (most recent call last): File "/opt/az/lib/python3.12/site-packages/knack/cli.py", line 233, in invoke cmd_result = self.invocation.execute(args) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 666, in execute raise ex File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 734, in _run_jobs_serially results.append(self._run_job(expanded_arg, cmd_copy)) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 703, in _run_job result = cmd_copy(params) ^^^^^^^^^^^^^^^^ File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/__init__.py", line 336, in __call__ return self.handler(*args, **kwargs) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/az/lib/python3.12/site-packages/azure/cli/core/commands/command_operation.py", line 120, in handler return op(**command_args) ^^^^^^^^^^^^^^^^^^ File "/opt/az/lib/python3.12/site-packages/azure/cli/command_modules/appconfig/keyvalue.py", line 296, in export_config azconfig_client = get_appconfig_data_client(cmd, name, connection_string, auth_mode, endpoint) ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ File "/opt/az/lib/python3.12/site-packages/azure/cli/command_modules/appconfig/_utils.py", line 191, in get_appconfig_data_client azconfig_client = AzureAppConfigurationClient(credential=AppConfigurationCliCredential(cred._credential, token_audience), # pylint: disable=protected-access ^^^^^^^^^^^^^^^^ AttributeError: 'MSIAuthenticationWrapper' object has no attribute '_credential

`az --version
azure-cli 2.70.0

core 2.70.0
telemetry 1.1.0

Dependencies:
msal 1.31.2b1
azure-mgmt-resource 23.1.1

Python location '/opt/az/bin/python3'
Config directory '/home/runner/.azure'
Extensions directory '/home/runner/.azure/cliextensions'

Python (Linux) 3.12.8 (main, Feb 26 2025, 06:47:10) [GCC 11.4.0]

Legal docs and information: aka.ms/AzureCliLegal
Your CLI is up-to-date.`

Can anyone let me know the timeline by when this error will resolve or any alternative for this because our pipeline depends on multiple az appconfig cli commands with authmode login.

@jakubtrebacz-dev
Copy link

Same issue here after upgrading to the latest version

Error log:

Executing: az appconfig kv export --auth-mode login --name "name" --label "prd" --prefix "Prefix_" --key "Prefix_*" --separator ":" --destination "file" --path "./temp.json" --format "json" --yes --skip-features --skip-keyvault "True" 
ERROR: The command failed with an unexpected error. Here is the traceback:
ERROR: 'MSIAuthenticationWrapper' object has no attribute '_credential'
Traceback (most recent call last):
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\knack/cli.py", line 233, in invoke
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 666, in execute
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 734, in _run_jobs_serially
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 703, in _run_job
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 336, in __call__
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/command_operation.py", line 120, in handler
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/appconfig/keyvalue.py", line 296, in export_config
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/appconfig/_utils.py", line 191, in get_appconfig_data_client
AttributeError: 'MSIAuthenticationWrapper' object has no attribute '_credential'
To check existing issues, please visit: https://github.com/Azure/azure-cli/issues

Versions yesterday (04.03.2025):

WARNING: You have 2 update(s) available. Consider updating your CLI installation with 'az upgrade'
azure-cli                         2.69.0 *

core                              2.69.0 *
telemetry                          1.1.0

Dependencies:
msal                            1.31.2b1
azure-mgmt-resource               23.1.1

Python location 'C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe'
Config directory 'C:\Users\AzDevOps\.azure'
Extensions directory 'C:\Users\AzDevOps\.azure\cliextensions'

Python (Windows) 3.12.8 (tags/v3.12.8:2dc476b, Dec  3 2024, 19:30:04) [MSC v.1942 64 bit (AMD64)]

Versions this morning (05.03.2025):

azure-cli                         2.70.0

core                              2.70.0
telemetry                          1.1.0

Dependencies:
msal                            1.31.2b1
azure-mgmt-resource               23.1.1

Python location 'C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe'
Config directory 'C:\Users\AzDevOps\.azure'
Extensions directory 'C:\Users\AzDevOps\.azure\cliextensions'

Python (Windows) 3.12.8 (tags/v3.12.8:2dc476b, Dec  3 2024, 19:30:04) [MSC v.1942 64 bit (AMD64)]

I'm rolling back to last working version right now, hopefully that fixes the broken pipelines for us

@albertofori albertofori self-assigned this Mar 7, 2025
@albertofori
Copy link
Member

Hi @andre-qumulo,

This is indeed a bug introduced in the latest release. I will work on this and have a fix out shortly.

Rolling back to version 2.69.0 should work fine.
My apologies for the inconvenience.

@andre-qumulo
Copy link
Author

@albertofori Thank you, I'm honestly surprised there isn't better testing around this feature to catch the regression.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
App Configuration Auto-Assign Auto assign by bot Auto-Resolve Auto resolve by bot bug This issue requires a change to an existing behavior in the product in order to be resolved. customer-reported Issues that are reported by GitHub users external to the Azure organization. Service Attention This issue is responsible by Azure service team.
Projects
None yet
Development

No branches or pull requests

7 participants