Getting token from Cloud Shell intermittently fails with 400 Client Error: Bad Request
- Dominant language
- Python
- Stars
- 4.6k
- Forks
- 3.5k
- Avg merge
- 3d 2h
- Merged PRs (30d)
- 60
Description
I'm getting following when I'm running following command :
ARM_CLIENT_SECRET=$(az ad sp create-for-rbac \
--name http://tf-sp-$UNIQUE_ID \
--role Contributor \
--scopes "/subscriptions/$ARM_SUBSCRIPTION_ID" \
--query password \
--output tsv)
Please note that I've stored ARM Subscription ID successfully and ran above command as part of creating Service Principal.
### **This is autogenerated. Please review and update as needed.**
## Describe the bug
**Command Name**
`az ad sp create-for-rbac`
**Errors:**
```
400 Client Error: Bad Request for url: http://localhost:50342/oauth2/token
Traceback (most recent call last):
python3.6/site-packages/knack/cli.py, ln 206, in invoke
cmd_result = self.invocation.execute(args)
cli/core/commands/__init__.py, ln 608, in execute
raise ex
cli/core/commands/__init__.py, ln 666, in _run_jobs_serially
results.append(self._run_job(expanded_arg, cmd_copy))
...
python3.6/site-packages/msrestazure/azure_active_directory.py, ln 486, in get_msi_token
result.raise_for_status()
python3.6/site-packages/requests/models.py, ln 940, in raise_for_status
raise HTTPError(http_error_msg, response=self)
requests.exceptions.HTTPError: 400 Client Error: Bad Request for url: http://localhost:50342/oauth2/token
```
## To Reproduce:
Steps to reproduce the behavior. Note that argument values have been redacted, as they may contain sensitive information.
- _Put any pre-requisite steps here..._
- `az ad sp create-for-rbac --name {} --role {} --scopes {} --query {} --output {}`
## Expected Behavior
## Environment Summary
```
Linux-4.15.0-1064-azure-x86_64-with-debian-stretch-sid
Python 3.6.5
Shell: bash
azure-cli 2.0.78
```
## Additional Context
Contributor guide
Assessment
This issue has not been assessed yet.