Skip to content

Conversation

@jiasli
Copy link
Member

@jiasli jiasli commented Dec 10, 2020

Description
Refine #15825: Add long-summary/warning for commands generating credentials

This PR shows the CREDENTIAL_WARNING_MESSAGE for more commands:

  • az account show --help
  • az account show --sdk-auth
  • az ad sp create-for-rbac --sdk-auth

Comment on lines +73 to +76
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Refine the help message of az account show.

Copy link
Member Author

@jiasli jiasli Dec 10, 2020

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

--sdk-auth should be deprecated for az account show because it is regurgitating the credential which is not a secure practice.

Copy link
Member Author

@jiasli jiasli Dec 10, 2020

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Reverting the not logic as --sdk-auth is the uncommon code path.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Print the warning earlier so that it is printed when show_auth_for_sdk is True.

@jiasli
Copy link
Member Author

jiasli commented Dec 10, 2020

/azp run

@azure-pipelines
Copy link

Azure Pipelines successfully started running 2 pipeline(s).

@yonzhan
Copy link
Collaborator

yonzhan commented Dec 10, 2020

Profile

@yonzhan yonzhan added this to the S180 milestone Dec 10, 2020
@jiasli jiasli merged commit bfc0ef9 into Azure:dev Dec 18, 2020
@jiasli jiasli deleted the cred-warning branch December 18, 2020 02:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants