az login inside containerapp code no longer working.

[cwash05]

Describe the bug

Before the CLI change to 'az login --identity' I 'az login --identity --username' to login and the run 'az aks get-credentials'

Related command

 string command = $"-c \"az login --identity --username {manageId} && az aks get-credentials --resource-group {buildInfo.resourceGroupName} --name {buildInfo.clusterName} --overwrite-existing\""; // Command to log in to Azure

 // Create a process start info
 ProcessStartInfo loginInfo = new ProcessStartInfo
 {
     FileName = "bash", 
     Arguments = command, 
     RedirectStandardOutput = true,
     RedirectStandardError = true, 
     UseShellExecute = false 
 };

 // Create and start the process
 using (Process process = new Process())
 {
     process.StartInfo = loginInfo;
     process.Start();

     
     string output = process.StandardOutput.ReadToEnd();
     string error = process.StandardError.ReadToEnd();

     // Wait for the process to exit
     process.WaitForExit();

     // Check exit code
     int exitCode = process.ExitCode;
     if (exitCode == 0)
     {
         // Command executed successfully
         Console.WriteLine("Command executed successfully");
         Console.WriteLine($"Output: {output}");
     }
     else
     {
         // Command failed
         Console.WriteLine($"Command failed with exit code {exitCode}");
         Console.WriteLine($"Error output: {error}");
     }
 }

Errors

ERROR: Failed to connect to MSI. Please make sure MSI is configured correctly.

Error occurs even after updating the command to use '--client-id'

Issue script & Debug output

N/A

Expected behavior

Expected to be able to login to azure cli

Environment Summary

Whatever version of CLI is running inside Azure Container App

Additional context

No response

[yonzhan]

Thank you for opening this issue, we will look into it.

[github-actions]

Here are some similar issues that might help you. Please check if they can solve your problem.

• az login --identity : doesn't work #25194
• az login --identity failed #20605
• Issue with Managed Identity on Azure Container App: requests.exceptions.HTTPError: 405 Client Error: Method Not Allowed for url: http://localhost:42356/msi/token #26222

---

Possible solution (Extracted from existing issue, might be incorrect; please verify carefully)

az login --identity is only used for managed identity on Azure resources. Please make sure az login --identity is invoked on an Azure resource, like Azure VM, and managed identity is configured correctly.

Reference:

• az login --identity failed #20605 (comment)

Powered by issue-sentinel

[microsoft-github-policy-service]

Thanks for the feedback! We are routing this to the appropriate team for follow-up. cc @dyu1208, @FumingZhang, @andyliuliming.

[FumingZhang]

not related to AKS