Azure / Azure/azure-cli

Az cli in script asks raw.githubusercontent.com behind private firewall

Open
#29,294 4 comments 3 reactions 0 assignees View on GitHub
act-observability-squad AKS Auto-Assign customer-reported question Service Attention
Dominant language
Python
Stars
4.6k
Forks
3.5k
Avg merge
3d 2h
Merged PRs (30d)
60

Description

### Describe the bug

We have a script that utilizes az cli for doing a job in AKS. The AKS cluster itself are behond a firewall for outgoing requests and when we run simple commands like `az --version` or `az login ...` it seems like requests towards `raw.githubusercontent.com` are done. This means that we need to open the firewall for `raw.githubusercontent.com` which again means that we open the firewall to all the public content on github which can include malware. Is this by design?

Github search on `raw.githubusercontent.com` in azure-cli github repository:

https://github.com/search?q=repo%3AAzure%2Fazure-cli%20raw.githubusercontent.com&type=code

There is also references to private repositories in the URLs used that seem to be archived and not updated anymore, for example: https://github.com/danielsollondon/azvmimagebuilder

### Related command

```
az -h
az login
az account set --subscription xxxxxxxxxxxxx
az aks get-credentials --resource-group xxxxxxxxxx --name xxxxxxxx --overwrite-existing
```

### Errors

No particular errors in place other than request we don't use that might fail in the background.

### Issue script & Debug output

No direct error

### Expected behavior

We expect the cli to have the information need in the Cli itself?

### Environment Summary

```
az version
{
"azure-cli": "2.61.0",
"azure-cli-core": "2.61.0",
"azure-cli-telemetry": "1.1.0",
"extensions": {
"account": "0.2.5",
"resource-graph": "2.1.0"
}
}
```

### Additional context

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.