From 6f931980eeaef50ca4507d57672b50eec751f462 Mon Sep 17 00:00:00 2001 From: Alexandre Mougel Date: Wed, 9 Sep 2026 08:24:15 +0000 Subject: [PATCH 1/5] Update AzureBleuCloud well-known endpoints and suffixes Adds several new resource IDs (App Insights, Log Analytics, Synapse, attestation, Active Directory Data Lake, ADL suffixes), fixes the missing leading dot on attestation_endpoint, normalizes trailing slashes on several endpoint URLs, and updates vm_image_alias_doc to match the current metadata source. Co-Authored-By: Claude Sonnet 5 --- src/azure-cli-core/HISTORY.rst | 1 + src/azure-cli-core/azure/cli/core/cloud.py | 20 ++++++++++++++------ 2 files changed, 15 insertions(+), 6 deletions(-) diff --git a/src/azure-cli-core/HISTORY.rst b/src/azure-cli-core/HISTORY.rst index cc176828fba..e4069c1073b 100644 --- a/src/azure-cli-core/HISTORY.rst +++ b/src/azure-cli-core/HISTORY.rst @@ -6,6 +6,7 @@ Release History 2.90.0 ++++++ * Minor fixes +* `az cloud`: Update `AzureBleuCloud` well-known endpoints and suffixes 2.89.1 ++++++ diff --git a/src/azure-cli-core/azure/cli/core/cloud.py b/src/azure-cli-core/azure/cli/core/cloud.py index 158998685c5..ec8c9fa0661 100644 --- a/src/azure-cli-core/azure/cli/core/cloud.py +++ b/src/azure-cli-core/azure/cli/core/cloud.py @@ -494,21 +494,27 @@ class CloudNameEnum: # pylint: disable=too-few-public-methods CloudNameEnum.AzureBleuCloud, endpoints=CloudEndpoints( management='https://management.sovcloud-api.fr/', - resource_manager='https://management.sovcloud-api.fr', + resource_manager='https://management.sovcloud-api.fr/', sql_management='https://management.database.sovcloud-api.fr:8443/', batch_resource_id='https://batch.sovcloud-api.fr/', gallery='https://gallery.sovcloud-api.fr/', - active_directory='https://login.sovcloud-identity.fr', + active_directory='https://login.sovcloud-identity.fr/', active_directory_resource_id='https://management.sovcloud-api.fr/', + active_directory_data_lake_resource_id='https://datalake.sovcloud.fr/', active_directory_graph_resource_id='https://graph.svc.sovcloud.fr/', - microsoft_graph_resource_id='https://graph.svc.sovcloud.fr', - vm_image_alias_doc='https://azcliprod.blob.core.windows.net/cli/vm/aliases_master.json', + microsoft_graph_resource_id='https://graph.svc.sovcloud.fr/', + vm_image_alias_doc='https://raw.githubusercontent.com/Azure/azure-rest-api-specs/master/arm-compute/quickstart-templates/aliases.json', media_resource_id='https://rest.media.sovcloud-api.fr', ossrdbms_resource_id='https://ossrdbms-aad.database.sovcloud-api.fr', - portal='https://portal.sovcloud-azure.fr'), + app_insights_resource_id='https://api.applicationinsights.sovcloud-api.fr', + log_analytics_resource_id='https://api.loganalytics.sovcloud-api.fr', + app_insights_telemetry_channel_resource_id='https://dc.applicationinsights.sovcloud-api.fr/v2/track', + synapse_analytics_resource_id='https://dev.azuresynapse.sovcloud-api.fr', + attestation_resource_id='https://attest.sovcloud-api.fr', + portal='https://portal.sovcloud-azure.fr/'), suffixes=CloudSuffixes( acr_login_server_endpoint='.azurecr.sovcloud-azure.fr', - attestation_endpoint='attest.sovcloud-api.fr', + attestation_endpoint='.attest.sovcloud-api.fr', storage_endpoint='core.sovcloud-api.fr', storage_sync_endpoint='afs.sovcloud-api.fr', keyvault_dns='.vault.sovcloud-api.fr', @@ -517,6 +523,8 @@ class CloudNameEnum: # pylint: disable=too-few-public-methods mysql_server_endpoint='.mysql.database.sovcloud-api.fr', postgresql_server_endpoint='.postgres.database.sovcloud-api.fr', mariadb_server_endpoint='.mariadb.database.sovcloud-api.fr', + azure_datalake_store_file_system_endpoint='azuredatalakestore.sovcloud-api.fr', + azure_datalake_analytics_catalog_and_job_endpoint='azuredatalakeanalytics.sovcloud-api.fr', synapse_analytics_endpoint='.dev.azuresynapse.sovcloud-api.fr')) HARD_CODED_CLOUD_LIST = [AZURE_PUBLIC_CLOUD, AZURE_CHINA_CLOUD, AZURE_US_GOV_CLOUD, AZURE_GERMAN_CLOUD, AZURE_BLEU_CLOUD] From e7668576b9fc6f73af2af53f679a51e07f5b32a1 Mon Sep 17 00:00:00 2001 From: Alexandre Mougel Date: Wed, 9 Sep 2026 09:15:20 +0000 Subject: [PATCH 2/5] Revert HISTORY.rst entry Individual PRs don't touch HISTORY.rst in this repo -- it's aggregated in bulk by the automated {Release} Upgrade commit, not by contributors. Co-Authored-By: Claude Sonnet 5 --- src/azure-cli-core/HISTORY.rst | 1 - 1 file changed, 1 deletion(-) diff --git a/src/azure-cli-core/HISTORY.rst b/src/azure-cli-core/HISTORY.rst index e4069c1073b..cc176828fba 100644 --- a/src/azure-cli-core/HISTORY.rst +++ b/src/azure-cli-core/HISTORY.rst @@ -6,7 +6,6 @@ Release History 2.90.0 ++++++ * Minor fixes -* `az cloud`: Update `AzureBleuCloud` well-known endpoints and suffixes 2.89.1 ++++++ From 34d2a86be1ea1d0ec0f216270df88b09ee3b8582 Mon Sep 17 00:00:00 2001 From: Alexandre Mougel Date: Wed, 9 Sep 2026 09:23:49 +0000 Subject: [PATCH 3/5] Updated vm_image_alias_doc value for AZURE_BLEU_CLOUD --- src/azure-cli-core/azure/cli/core/cloud.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/azure-cli-core/azure/cli/core/cloud.py b/src/azure-cli-core/azure/cli/core/cloud.py index ec8c9fa0661..4c31f166dc3 100644 --- a/src/azure-cli-core/azure/cli/core/cloud.py +++ b/src/azure-cli-core/azure/cli/core/cloud.py @@ -503,7 +503,7 @@ class CloudNameEnum: # pylint: disable=too-few-public-methods active_directory_data_lake_resource_id='https://datalake.sovcloud.fr/', active_directory_graph_resource_id='https://graph.svc.sovcloud.fr/', microsoft_graph_resource_id='https://graph.svc.sovcloud.fr/', - vm_image_alias_doc='https://raw.githubusercontent.com/Azure/azure-rest-api-specs/master/arm-compute/quickstart-templates/aliases.json', + vm_image_alias_doc='https://raw.githubusercontent.com/Azure/azure-rest-api-specs/main/arm-compute/quickstart-templates/aliases.json', media_resource_id='https://rest.media.sovcloud-api.fr', ossrdbms_resource_id='https://ossrdbms-aad.database.sovcloud-api.fr', app_insights_resource_id='https://api.applicationinsights.sovcloud-api.fr', From 173e5cd7dd65a4ea51f7704ba73ae224ded25f24 Mon Sep 17 00:00:00 2001 From: Alexandre Mougel Date: Wed, 9 Sep 2026 09:50:12 +0000 Subject: [PATCH 4/5] Drop trailing slash from AzureBleuCloud portal endpoint Review feedback: several callers build portal deep links by concatenating endpoints.portal + '/#resource/...' (e.g. src/azure-cli/azure/cli/command_modules/acs/custom.py:339), which produced a double slash with the trailing '/' this endpoint had. Every other hardcoded cloud's portal endpoint has no trailing slash; this restores that convention. Co-Authored-By: Claude Sonnet 5 --- src/azure-cli-core/azure/cli/core/cloud.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/azure-cli-core/azure/cli/core/cloud.py b/src/azure-cli-core/azure/cli/core/cloud.py index 4c31f166dc3..f77a689361b 100644 --- a/src/azure-cli-core/azure/cli/core/cloud.py +++ b/src/azure-cli-core/azure/cli/core/cloud.py @@ -511,7 +511,7 @@ class CloudNameEnum: # pylint: disable=too-few-public-methods app_insights_telemetry_channel_resource_id='https://dc.applicationinsights.sovcloud-api.fr/v2/track', synapse_analytics_resource_id='https://dev.azuresynapse.sovcloud-api.fr', attestation_resource_id='https://attest.sovcloud-api.fr', - portal='https://portal.sovcloud-azure.fr/'), + portal='https://portal.sovcloud-azure.fr'), suffixes=CloudSuffixes( acr_login_server_endpoint='.azurecr.sovcloud-azure.fr', attestation_endpoint='.attest.sovcloud-api.fr', From 883bb22f739d8bfe57ce064672a95e1c4bde0715 Mon Sep 17 00:00:00 2001 From: Alexandre Mougel Date: Wed, 9 Sep 2026 09:58:41 +0000 Subject: [PATCH 5/5] Drop trailing slash from AzureBleuCloud active_directory endpoint Same class of bug as the portal fix: src/azure-cli/azure/cli/command_modules/profile/_validators.py:19 builds the OIDC discovery URL via '{}/{}/v2.0/.well-known/openid-configuration'.format(active_directory_endpoint, tenant), which double-slashes when the endpoint already ends in '/'. This breaks az login --tenant (non-GUID tenant) against AzureBleuCloud. Every other hardcoded cloud's active_directory endpoint has no trailing slash; this restores that convention. The MSAL-facing path (_create_identity_instance -> Identity -> PublicClientApplication) normalizes trailing slashes internally and is unaffected either way. Co-Authored-By: Claude Sonnet 5 --- src/azure-cli-core/azure/cli/core/cloud.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/azure-cli-core/azure/cli/core/cloud.py b/src/azure-cli-core/azure/cli/core/cloud.py index f878913e2fa..4396db71c9e 100644 --- a/src/azure-cli-core/azure/cli/core/cloud.py +++ b/src/azure-cli-core/azure/cli/core/cloud.py @@ -498,7 +498,7 @@ class CloudNameEnum: # pylint: disable=too-few-public-methods sql_management='https://management.database.sovcloud-api.fr:8443/', batch_resource_id='https://batch.sovcloud-api.fr/', gallery='https://gallery.sovcloud-api.fr/', - active_directory='https://login.sovcloud-identity.fr/', + active_directory='https://login.sovcloud-identity.fr', active_directory_resource_id='https://management.sovcloud-api.fr/', active_directory_data_lake_resource_id='https://datalake.sovcloud.fr/', active_directory_graph_resource_id='https://graph.svc.sovcloud.fr/',