Azure / Azure/azure-rest-api-specs

[BUG] ContainerService managedClusters/agentPools

Open
#40,740 0 comments 0 reactions 0 assignees View on GitHub
bug
Dominant language
TypeSpec
Stars
3.1k
Forks
5.9k
Avg merge
3d 2h
Merged PRs (30d)
424

Description

### API Spec link

https://github.com/Azure/azure-rest-api-specs/blob/main/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/stable/2025-10-01/managedClusters.json

### API Spec version

2025-10-01

### Describe the bug

In the agent pool security profile, `sshAccess` is not recognised by the RP:

```text
{
"code": "UnmarshalError",
"details": null,
"message": "UnmarshalEntity encountered error: json: unknown field \"sshAccess\" Check that the field is in the right location, is spelled correctly, and is supported in the API version. Visit aka.ms/aks/apiversions for more API version information..",
"subcode": ""
}
```

The docs state that this is the correct key name:

https://learn.microsoft.com/en-us/azure/templates/microsoft.containerservice/2025-10-01/managedclusters?pivots=deployment-language-terraform

https://github.com/Azure/azure-rest-api-specs/blob/2d03e26f69760a52d120a67ff9e4aac6916bc1c8/specification/containerservice/resource-manager/Microsoft.ContainerService/aks/stable/2025-10-01/managedClusters.json#L4595

### Expected behavior

securityProfile.sshAccess is correctly deserialized and set in the resource.

### Actual behavior

JSON unmarshal error from RP

### Reproduction Steps

PUT agentPool with securityProfile.sshAccess set to "LocalUser"

### Environment

Error surfaced via Microsoft's AzAPI Terraform provider (a low level REST API provider)

Contributor guide

Open the contributing guide

Research direction

Start with the linked specification/containerservice/resource-manager/Microsoft.ContainerService/aks/stable/2025-10-01/managedClusters.json file and inspect the agent pool security profile around line 4595. Compare the documented sshAccess field with the API payload and related source definitions, then verify a PUT using securityProfile.sshAccess set to LocalUser no longer produces an unknown-field unmarshal error.

Written by the indexing model from the issue text.

Assessment

Tech stack
azure, openapi
Domain
api, cloud
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.