Skip to content

Fix akv secrete provider update operation fail#9573

Open
charleswool wants to merge 1 commit intoAzure:mainfrom
charleswool:yuewu2/fix-secret-provider-cli
Open

Fix akv secrete provider update operation fail#9573
charleswool wants to merge 1 commit intoAzure:mainfrom
charleswool:yuewu2/fix-secret-provider-cli

Conversation

@charleswool
Copy link

…vider flags

The AKSPreviewManagedClusterUpdateDecorator.update_addon_profiles() method was overriding the parent class method without calling super(), which caused the following flags to be silently ignored during 'az aks update':

  • --enable-secret-rotation
  • --disable-secret-rotation
  • --rotation-poll-interval

This fix adds a call to super().update_addon_profiles(mc) to ensure the parent class logic for Azure Keyvault Secrets Provider addon profile updates is preserved.


This checklist is used to make sure that common guidelines for a pull request are followed.

Related command

General Guidelines

  • Have you run azdev style <YOUR_EXT> locally? (pip install azdev required)
  • Have you run python scripts/ci/test_index.py -q locally? (pip install wheel==0.30.0 required)
  • My extension version conforms to the Extension version schema

For new extensions:

About Extension Publish

There is a pipeline to automatically build, upload and publish extension wheels.
Once your pull request is merged into main branch, a new pull request will be created to update src/index.json automatically.
You only need to update the version information in file setup.py and historical information in file HISTORY.rst in your PR but do not modify src/index.json.

…vider flags

The AKSPreviewManagedClusterUpdateDecorator.update_addon_profiles() method
was overriding the parent class method without calling super(), which caused
the following flags to be silently ignored during 'az aks update':

- --enable-secret-rotation
- --disable-secret-rotation
- --rotation-poll-interval

This fix adds a call to super().update_addon_profiles(mc) to ensure the
parent class logic for Azure Keyvault Secrets Provider addon profile
updates is preserved.
Copilot AI review requested due to automatic review settings February 3, 2026 23:55
@azure-client-tools-bot-prd
Copy link

azure-client-tools-bot-prd bot commented Feb 3, 2026

️✔️Azure CLI Extensions Breaking Change Test
️✔️Non Breaking Changes

@azure-client-tools-bot-prd
Copy link

Hi @charleswool,
Please write the description of changes which can be perceived by customers into HISTORY.rst.
If you want to release a new extension version, please update the version in setup.py as well.

@yonzhan
Copy link
Collaborator

yonzhan commented Feb 3, 2026

Thank you for your contribution! We will review the pull request and get back to you soon.

@github-actions
Copy link

github-actions bot commented Feb 3, 2026

The git hooks are available for azure-cli and azure-cli-extensions repos. They could help you run required checks before creating the PR.

Please sync the latest code with latest dev branch (for azure-cli) or main branch (for azure-cli-extensions).
After that please run the following commands to enable git hooks:

pip install azdev --upgrade
azdev setup -c <your azure-cli repo path> -r <your azure-cli-extensions repo path>

@github-actions
Copy link

github-actions bot commented Feb 3, 2026

CodeGen Tools Feedback Collection

Thank you for using our CodeGen tool. We value your feedback, and we would like to know how we can improve our product. Please take a few minutes to fill our codegen survey

@github-actions
Copy link

github-actions bot commented Feb 3, 2026

Hi @charleswool

Release Suggestions

Module: aks-preview

  • Please log updates into to src/aks-preview/HISTORY.rst
  • Update VERSION to 19.0.0b22 in src/aks-preview/setup.py

Notes

Copy link
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This pull request fixes a bug in the AKS preview extension where Azure Keyvault Secrets Provider addon profile update flags were being silently ignored during az aks update operations.

Changes:

  • Added a call to super().update_addon_profiles(mc) in the AKSPreviewManagedClusterUpdateDecorator.update_addon_profiles() method to ensure parent class logic is executed
  • This fix ensures that the --enable-secret-rotation, --disable-secret-rotation, and --rotation-poll-interval flags are properly handled during cluster updates

@FumingZhang
Copy link
Member

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 2 pipeline(s).

Copy link
Member

@FumingZhang FumingZhang left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Queued live test to validate the change

  • test_aks_enable_addon_with_azurekeyvaultsecretsprovider

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

AKS Auto-Assign Auto assign by bot

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants