You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
VM/VMSS support add-proxy-agent-extension parameter #32154
User can opt-in the Azure metadata security protocol for their VM by specifying the newly introduced VM or VMSS property, thus their VM can be protected from SSRF and Scorpin heart attack to IMDS and WireServer endpoints.
This particular request is to add a new add-proxy-agent-extension parameter that user can opt-in together with -enable-proxy-agent for Linux Provisioning purpose. Please see details in this request: #32124
Possible solution (Extracted from existing issue, might be incorrect; please verify carefully)
Solution 1:
Please test with a Linux image:
set resourceGroupName="huiya-eastus2euap"
set locationName="WestUS2"
set vmName="vm2"
set adminPassword="your password"
az login
az vm create -g %resourceGroupName% --location %locationName% --image Canonical:0001-com-ubuntu-server-jammy:22_04-lts:latest --size Standard_D2s_v5 --admin-username test_admin --admin-password %adminPassword% --enable-proxy-agent --add-proxy-agent-extension --name %vmName%
Without setting add-proxy-agent-extension, the creation will fail with: :[{"code":"OSProvisioningInternalError","message":"OS Provisioning failed for VM 'vm2' due to an internal error."}]
With setting add-proxy-agent-extension, the creation will succeed.
changed the title [-]VM/VMSS support add-proxy-agent-extension parameter #32124[/-][+]VM/VMSS support add-proxy-agent-extension parameter[/+]on Sep 22, 2025
Due to other high-priority items, we were unable to complete the build and required testing before the code cutoff date.
We plan to postpone this feature to the next sprint (2025-11-18).
Due to other high-priority items, we were unable to complete the build and required testing before the code cutoff date. We plan to postpone this feature to the next sprint (2025-11-18).
Please let us know if that works.
Thanks
Can you confirm it will release at 2025-11-18? This feature is already GA-ed and we need to get the support as soon as possible.
Activity
yonzhan commentedon Sep 22, 2025
Thank you for opening this issue, we will look into it.
github-actions commentedon Sep 22, 2025
Here are some similar issues that might help you. Please check if they can solve your problem.
Possible solution (Extracted from existing issue, might be incorrect; please verify carefully)
Solution 1:
Please test with a Linux image:
Without setting add-proxy-agent-extension, the creation will fail with: :[{"code":"OSProvisioningInternalError","message":"OS Provisioning failed for VM 'vm2' due to an internal error."}]
With setting add-proxy-agent-extension, the creation will succeed.
Reference:
Solution 2:
The Swagger PR has been merged, and the official Python SDK will be released by the SDK team around 03/28/2025. Please work on top of that release.
Reference:
Powered by issue-sentinel
github-actions commentedon Sep 22, 2025
This issue is related to security. Please pay attention.
Powered by issue-sentinel
[-]VM/VMSS support add-proxy-agent-extension parameter #32124[/-][+]VM/VMSS support add-proxy-agent-extension parameter[/+]zhoxing-ms commentedon Sep 23, 2025
Huimin Yan (@huiminyan2017) We will schedule this feature request for the next sprint, and its release time is 11-04
naga-nandyala commentedon Oct 26, 2025
Hi Huimin Yan (@huiminyan2017)
Due to other high-priority items, we were unable to complete the build and required testing before the code cutoff date.
We plan to postpone this feature to the next sprint (2025-11-18).
Please let us know if that works.
Thanks
huiminyan2017 commentedon Nov 4, 2025
Can you confirm it will release at 2025-11-18? This feature is already GA-ed and we need to get the support as soon as possible.