Skip to content

Release 2.89.0 breaks creating a firewall rule in a MySQL Flexible Server #33839

Closed
#33865
Closed
Release 2.89.0 breaks creating a firewall rule in a MySQL Flexible Server#33839
#33865
Assignees
a0x1abcopilot-swe-agent
Labels
Auto-AssignAuto assign by botMySQLRequest X Engineering AgentAsk the agent to triage this issue or review this PRService AttentionThis issue is responsible by Azure service team.act-codegen-extensibility-squadbugThis issue requires a change to an existing behavior in the product in order to be resolved.customer-reportedIssues that are reported by GitHub users external to the Azure organization.

Description

@bblommers
Bert Blommers (bblommers)
opened on Aug 4, 2026

Describe the bug

Attempting to create a Firewall Rule results in a InternalServerError

Related command

az mysql flexible-server firewall-rule create

Errors

cli.azure.cli.core.azclierror: (InternalServerError) An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'
Code: InternalServerError
Message: An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'
az_command_data_logger: (InternalServerError) An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'
Code: InternalServerError
Message: An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'

Issue script & Debug output

export RESOURCE_GROUP_NAME="rg-mysql-bats-${RANDOM}"
export SERVER_NAME="mysql-bats-${RANDOM}"
export LOCATION="westeurope"
export ADMIN_LOGIN="mysqladmin"
export ADMIN_PASSWORD="P@ssw0rd2024!"
export FIREWALL_RULE_NAME="allow-myip"
export START_IP="203.0.113.10"
export END_IP="203.0.113.10"

az group create --name "$RESOURCE_GROUP_NAME" --location "$LOCATION"

az mysql flexible-server create \
        --name "$SERVER_NAME" \
        --resource-group "$RESOURCE_GROUP_NAME" \
        --location "$LOCATION" \
        --admin-user "$ADMIN_LOGIN" \
        --admin-password "$ADMIN_PASSWORD" \
        --sku-name "Standard_B1ms" \
        --tier "Burstable" \
        --version "8.0.21" \
        --storage-size "32" \
        --public-access "Enabled"

az mysql flexible-server firewall-rule create \
        --resource-group "$RESOURCE_GROUP_NAME" \
        --name "$SERVER_NAME" \
        --rule-name "$FIREWALL_RULE_NAME" \
        --start-ip-address "$START_IP" \
        --end-ip-address "$END_IP"
Full Debug Output

cli.knack.cli: Command arguments: ['mysql', 'flexible-server', 'firewall-rule', 'create', '--resource-group', 'rg-mysql-bats-6030', '--name', 'mysql-bats-1830', '--rule-name', 'allow-myip', '--start-ip-address', '203.0.113.10', '--end-ip-address', '203.0.113.10', '--debug']
cli.knack.cli: init debug log:
Enable color in terminal.
cli.knack.cli: Event: Cli.PreExecute []
cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x79d8662a6da0>, <function OutputProducer.on_global_arguments at 0x79d8661d00f0>, <function CLIQuery.on_global_arguments at 0x79d865f9e820>]
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
cli.azure.cli.core: Using packaged command index for profile 'latest'.
cli.azure.cli.core: Found installed extension 'aks-preview' (azext_aks_preview).
cli.azure.cli.core: Blending packaged core index with local extension index.
cli.azure.cli.core: Modules found from index for 'mysql': ['azure.cli.command_modules.mysql', 'azure.cli.command_modules.rdbms']
cli.azure.cli.core: Loading command modules...
cli.azure.cli.core: Name Load Time Groups Commands
cli.azure.cli.core: mysql 0.258 17 59
cli.azure.cli.core: rdbms 0.034 22 90
cli.azure.cli.core: Loaded command modules:
cli.azure.cli.core: Total (2) 0.293 39 149
cli.azure.cli.core: These extensions are not installed and will be skipped: ['azext_ai_examples', 'azext_next']
cli.azure.cli.core: Loading extensions:
cli.azure.cli.core: Name Load Time Groups Commands Directory
cli.azure.cli.core: Total (0) 0.000 0 0
cli.azure.cli.core: Loaded 38 groups, 149 commands.
cli.azure.cli.core: Found a match in the command table.
cli.azure.cli.core: Raw command : mysql flexible-server firewall-rule create
cli.azure.cli.core: Command table: mysql flexible-server firewall-rule create
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x79d865f74040>]
cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to '/home/.../.azure/commands/2026-08-04.09-51-00.mysql_flexible-server_firewall-rule_create.72138.log'.
az_command_data_logger: command args: mysql flexible-server firewall-rule create --resource-group {} --name {} --rule-name {} --start-ip-address {} --end-ip-address {} --debug
cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument..add_subscription_parameter at 0x79d865d4d900>]
cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument..add_ids_arguments at 0x79d865d4d9b0>, <function register_global_policy_argument..add_global_policy_argument at 0x79d865d6cbf0>, <function register_cache_arguments..add_cache_arguments at 0x79d865d6cca0>, <function register_upcoming_breaking_change_info..update_breaking_change_info at 0x79d865d6cd50>]
cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
cli.knack.cli: Event: CommandInvoker.OnPreParseArgs []
cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x79d8661d01a0>, <function CLIQuery.handle_query_parameter at 0x79d865f9e8d0>, <function register_ids_argument..parse_ids_arguments at 0x79d865d6cb40>]
cli.azure.cli.core.commands.client_factory: Getting management service client client_type=MySQLManagementClient
cli.azure.cli.core.auth.persistence: build_persistence: location='/home/.../.azure/msal_token_cache.json', encrypt=False
cli.azure.cli.core.auth.binary_cache: load: /home/.../.azure/msal_http_cache.bin
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.application: Broker enabled? None
cli.azure.cli.core.commands.client_factory: Getting management service client client_type=MySQLManagementClient
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.application: Broker enabled? None
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token_info: scopes=('https://management.core.windows.net//.default',), options={}
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: 2dc3139e-1070-43a8-a9a2-3bc480022780
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830?api-version=2025-06-01-preview'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '3bf3e886-8fd9-11f1-8000-44fa6657c1c3'
cli.azure.cli.core.sdk.policies: 'CommandName': 'mysql flexible-server firewall-rule create'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--resource-group --name --rule-name --start-ip-address --end-ip-address --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.89.0 (DEB) azsdk-python-core/1.39.0 Python/3.14.6 (Linux-6.17.0-41-generic-x86_64-with-glibc2.42)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830?api-version=2025-06-01-preview HTTP/1.1" 200 1320
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '1320'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'aeae1b9c-35ea-4c4b-a8fa-609b0c9da196'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-reads': '249'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-reads': '3749'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '0d3740fb-e4cd-430e-bd6c-eaa010570cca'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260804T095101Z:0d3740fb-e4cd-430e-bd6c-eaa010570cca'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: FD33C6EC2D564159A571D55D7990830F Ref B: MRS211050313021 Ref C: 2026-08-04T09:51:00Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Tue, 04 Aug 2026 09:51:00 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"sku":{"name":"Standard_B1ms","tier":"Burstable"},"systemData":{"createdAt":"2026-08-04T09:47:36.2355914Z"},"properties":{"administratorLogin":"mysqladmin","storage":{"storageSizeGB":32,"iops":396,"autoGrow":"Enabled","autoIoScaling":"Enabled","storageSku":"Premium_LRS","logOnDisk":"Disabled","storageRedundancy":"LocalRedundancy"},"version":"8.0.21","fullVersion":"8.0.46","state":"Ready","fullyQualifiedDomainName":"mysql-bats-1830.mysql.database.azure.com","availabilityZone":"1","maintenanceWindow":{"batchOfMaintenance":"Default","customWindow":"Disabled","dayOfWeek":0,"startHour":0,"startMinute":0},"replicationRole":"None","replicaCapacity":10,"network":{"publicNetworkAccess":"Enabled"},"backup":{"backupRetentionDays":7,"backupIntervalHours":24,"geoRedundantBackup":"Disabled","earliestRestoreDate":"2026-08-04T09:57:36.2355914+00:00"},"highAvailability":{"mode":"Disabled","state":"NotEnabled","standbyAvailabilityZone":"","replicationMode":"BinaryLog"},"privateEndpointConnections":[],"maintenancePolicy":{"patchStrategy":"Regular"},"databasePort":3306},"location":"West Europe","id":"/subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830","name":"mysql-bats-1830","type":"Microsoft.DBforMySQL/flexibleServers"}
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token_info: scopes=('https://management.core.windows.net//.default',), options={}
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: 0a23b759-f381-43ca-8c3f-87f361acfa25
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830/firewallRules/allow-myip?api-version=2025-06-01-preview'
cli.azure.cli.core.sdk.policies: Request method: 'PUT'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Content-Length': '92'
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '3bf3e886-8fd9-11f1-8000-44fa6657c1c3'
cli.azure.cli.core.sdk.policies: 'CommandName': 'mysql flexible-server firewall-rule create'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--resource-group --name --rule-name --start-ip-address --end-ip-address --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.89.0 (DEB) azsdk-python-core/1.39.0 Python/3.14.6 (Linux-6.17.0-41-generic-x86_64-with-glibc2.42)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: {"name": "allow-myip", "start_ip_address": "203.0.113.10", "end_ip_address": "203.0.113.10"}
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "PUT /subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830/firewallRules/allow-myip?api-version=2025-06-01-preview HTTP/1.1" 500 162
cli.azure.cli.core.sdk.policies: Response status: 500
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '162'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '2dfcb2db-796f-44ee-a2de-1f1b0b5f8f4a'
cli.azure.cli.core.sdk.policies: 'x-ms-failure-cause': 'service'
cli.azure.cli.core.sdk.policies: 'x-ms-operation-identifier': '[REDACTED:cloud_identifier],[REDACTED:cloud_identifier]/westeurope/9e8d3205-4a2b-4539-b8ee-d2fa448702ae'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-writes': '199'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-writes': '2999'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': 'b5a1ee96-eadf-485f-b62f-44eed2c3362a'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260804T095102Z:b5a1ee96-eadf-485f-b62f-44eed2c3362a'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 8D1B4CBDB3FA4434B7356008DCA4DA6D Ref B: MRS211050618031 Ref C: 2026-08-04T09:51:01Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Tue, 04 Aug 2026 09:51:01 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: Body is streamable
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830/firewallRules/allow-myip?api-version=2025-06-01-preview'
cli.azure.cli.core.sdk.policies: Request method: 'PUT'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Content-Length': '92'
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '3bf3e886-8fd9-11f1-8000-44fa6657c1c3'
cli.azure.cli.core.sdk.policies: 'CommandName': 'mysql flexible-server firewall-rule create'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--resource-group --name --rule-name --start-ip-address --end-ip-address --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.89.0 (DEB) azsdk-python-core/1.39.0 Python/3.14.6 (Linux-6.17.0-41-generic-x86_64-with-glibc2.42)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: {"name": "allow-myip", "start_ip_address": "203.0.113.10", "end_ip_address": "203.0.113.10"}
urllib3.connectionpool: Starting new HTTPS connection (2): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "PUT /subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830/firewallRules/allow-myip?api-version=2025-06-01-preview HTTP/1.1" 500 162
cli.azure.cli.core.sdk.policies: Response status: 500
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '162'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '3b2d025d-eddb-4887-80a3-73dc2d8d9f65'
cli.azure.cli.core.sdk.policies: 'x-ms-failure-cause': 'service'
cli.azure.cli.core.sdk.policies: 'x-ms-operation-identifier': '[REDACTED:cloud_identifier],[REDACTED:cloud_identifier]/westeurope/26bf6f06-2a67-4ced-9875-82be601b5ed5'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-writes': '199'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-writes': '2999'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '78ff09ec-ed88-4a8a-9cd5-c3c9f6439943'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260804T095103Z:78ff09ec-ed88-4a8a-9cd5-c3c9f6439943'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 29D010BB971243D0AA974A7B953D6E78 Ref B: MRS211050315023 Ref C: 2026-08-04T09:51:02Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Tue, 04 Aug 2026 09:51:02 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: Body is streamable
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830/firewallRules/allow-myip?api-version=2025-06-01-preview'
cli.azure.cli.core.sdk.policies: Request method: 'PUT'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Content-Length': '92'
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '3bf3e886-8fd9-11f1-8000-44fa6657c1c3'
cli.azure.cli.core.sdk.policies: 'CommandName': 'mysql flexible-server firewall-rule create'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--resource-group --name --rule-name --start-ip-address --end-ip-address --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.89.0 (DEB) azsdk-python-core/1.39.0 Python/3.14.6 (Linux-6.17.0-41-generic-x86_64-with-glibc2.42)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: {"name": "allow-myip", "start_ip_address": "203.0.113.10", "end_ip_address": "203.0.113.10"}
urllib3.connectionpool: Starting new HTTPS connection (3): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "PUT /subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830/firewallRules/allow-myip?api-version=2025-06-01-preview HTTP/1.1" 500 162
cli.azure.cli.core.sdk.policies: Response status: 500
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '162'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'd2937eac-1fdf-4616-84f4-7adae2856d6c'
cli.azure.cli.core.sdk.policies: 'x-ms-failure-cause': 'service'
cli.azure.cli.core.sdk.policies: 'x-ms-operation-identifier': '[REDACTED:cloud_identifier],[REDACTED:cloud_identifier]/westeurope/1651599f-9a0a-4a82-91eb-b594f36f41c2'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-writes': '199'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-writes': '2999'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '98a50abf-7f62-49d6-8468-2d59995f5f9c'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260804T095105Z:98a50abf-7f62-49d6-8468-2d59995f5f9c'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 615FC3FD0AB44C6A874CB8C2A44C701D Ref B: MRS211050313049 Ref C: 2026-08-04T09:51:05Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Tue, 04 Aug 2026 09:51:05 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: Body is streamable
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830/firewallRules/allow-myip?api-version=2025-06-01-preview'
cli.azure.cli.core.sdk.policies: Request method: 'PUT'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Content-Length': '92'
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '3bf3e886-8fd9-11f1-8000-44fa6657c1c3'
cli.azure.cli.core.sdk.policies: 'CommandName': 'mysql flexible-server firewall-rule create'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--resource-group --name --rule-name --start-ip-address --end-ip-address --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.89.0 (DEB) azsdk-python-core/1.39.0 Python/3.14.6 (Linux-6.17.0-41-generic-x86_64-with-glibc2.42)'
cli.azure.cli.core.sdk.policies: 'Authorization': '*****'
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: {"name": "allow-myip", "start_ip_address": "203.0.113.10", "end_ip_address": "203.0.113.10"}
urllib3.connectionpool: Starting new HTTPS connection (4): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "PUT /subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830/firewallRules/allow-myip?api-version=2025-06-01-preview HTTP/1.1" 500 162
cli.azure.cli.core.sdk.policies: Response status: 500
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '162'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '8118799f-587f-4d37-9bbf-69a6e83c62c7'
cli.azure.cli.core.sdk.policies: 'x-ms-failure-cause': 'service'
cli.azure.cli.core.sdk.policies: 'x-ms-operation-identifier': '[REDACTED:cloud_identifier],[REDACTED:cloud_identifier]/westeurope/ade52d60-5657-492b-8d71-c7805b0e23d7'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-writes': '199'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-writes': '2999'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '6092d664-d80f-4d76-a418-b25fe4011a10'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260804T095109Z:6092d664-d80f-4d76-a418-b25fe4011a10'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 4066A28FC734481E9E8A94B394200E1D Ref B: MRS211050619027 Ref C: 2026-08-04T09:51:09Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Tue, 04 Aug 2026 09:51:08 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: Body is streamable
cli.azure.cli.core.azclierror: Traceback (most recent call last):
File "/opt/az/lib/python3.14/site-packages/knack/cli.py", line 233, in invoke
cmd_result = self.invocation.execute(args)
File "/opt/az/lib/python3.14/site-packages/azure/cli/core/commands/init.py", line 677, in execute
raise ex
File "/opt/az/lib/python3.14/site-packages/azure/cli/core/commands/init.py", line 820, in _run_jobs_serially
results.append(self._run_job(expanded_arg, cmd_copy))
~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^
File "/opt/az/lib/python3.14/site-packages/azure/cli/core/commands/init.py", line 789, in _run_job
result = cmd_copy(params)
File "/opt/az/lib/python3.14/site-packages/azure/cli/core/commands/init.py", line 335, in call
return self.handler(*args, **kwargs)
~~~~~~~~~~~~^^^^^^^^^^^^^^^^^
File "/opt/az/lib/python3.14/site-packages/azure/cli/core/commands/command_operation.py", line 120, in handler
return op(**command_args)
File "/opt/az/lib/python3.14/site-packages/azure/cli/command_modules/mysql/custom.py", line 132, in firewall_rule_create_func
return client.begin_create_or_update(
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^
resource_group_name,
^^^^^^^^^^^^^^^^^^^^
server_name,
^^^^^^^^^^^^
firewall_rule_name,
^^^^^^^^^^^^^^^^^^^
parameters)
^^^^^^^^^^^
File "/opt/az/lib/python3.14/site-packages/azure/core/tracing/decorator.py", line 119, in wrapper_use_tracer
return func(*args, **kwargs)
File "/opt/az/lib/python3.14/site-packages/azure/mgmt/mysqlflexibleservers/operations/_operations.py", line 8216, in begin_create_or_update
raw_result = self._create_or_update_initial(
resource_group_name=resource_group_name,
...<7 lines>...
**kwargs
)
File "/opt/az/lib/python3.14/site-packages/azure/mgmt/mysqlflexibleservers/operations/_operations.py", line 8069, in _create_or_update_initial
raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat)
azure.core.exceptions.HttpResponseError: (InternalServerError) An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'
Code: InternalServerError
Message: An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'

cli.azure.cli.core.azclierror: (InternalServerError) An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'
Code: InternalServerError
Message: An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'
az_command_data_logger: (InternalServerError) An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'
Code: InternalServerError
Message: An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'
cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x79d865f74300>]
az_command_data_logger: exit code: 1
cli.main: Command ran in 9.668 seconds (init: 0.101, invoke: 9.567)
telemetry.main: Begin splitting cli events and extra events, total events: 1
telemetry.main: Finish splitting cli events and extra events, cli events: 1
telemetry.save: Save telemetry record of length 4498 in cache file under /home/.../.azure/telemetry/20260804095109790
telemetry.main: Begin creating telemetry upload process.
telemetry.process: Creating upload process: "/opt/az/bin/python3 /opt/az/lib/python3.14/site-packages/azure/cli/telemetry/init.py /home/.../.azure /home/.../.azure/telemetry/20260804095109790"
telemetry.process: Return from creating process 72165
telemetry.main: Finish creating telemetry upload process.

Expected behavior

No error. Note that this used to work in 2.88.0

Environment Summary

azure-cli 2.89.0

core 2.89.0
telemetry 1.1.0

Extensions:
aks-preview 21.0.0b13
application-insights 1.2.3
cdn 1.0.0b2

Dependencies:
msal 1.36.0
azure-mgmt-resource 24.0.0

Python location '/opt/az/bin/python3'
Config directory '/home/.../.azure'
Extensions directory '/home/.../.azure/cliextensions'

Python (Linux) 3.14.6 (main, Jul 28 2026, 12:34:03) [GCC 13.3.0]

Legal docs and information: aka.ms/AzureCliLegal

Your CLI is up-to-date.

Additional context

The PUT request sends a different body compared to the previous release, which I assume is the problem:

PUT .../providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830/firewallRules/allow-myip?api-version=2025-06-01-preview

Release 2.88.0 sent this body:

{
    "properties": {
        "startIpAddress": "203.0.113.10",
        "endIpAddress": "203.0.113.10"
    }
}

Release 2.89.0 sends this body:

{
    "name": "allow-myip",
    "start_ip_address": "203.0.113.10",
    "end_ip_address": "203.0.113.10"
}

Activity

  1. Bert Blommers (bblommers)
    added
    bugThis issue requires a change to an existing behavior in the product in order to be resolved.
    on Aug 4, 2026
  2. microsoft-github-policy-service
    added
    customer-reportedIssues that are reported by GitHub users external to the Azure organization.
    Auto-AssignAuto assign by bot
    ARMaz resource/group/lock/tag/deployment/policy/managementapp/account management-group
    Azure CLI TeamThe command of the issue is owned by Azure CLI team
    questionThe issue doesn't require a change to the product in order to be resolved. Most issues start as that
    act-identity-squad
    MySQL
    Service AttentionThis issue is responsible by Azure service team.
    act-codegen-extensibility-squad
    on Aug 4, 2026

  3. yonzhan commented on Aug 4, 2026

    @yonzhan
    Yong Zhang (yonzhan)
    on Aug 4, 2026
    Collaborator

    Thank you for opening this issue, we will look into it.

  4. Yong Zhang (yonzhan)
    removed
    questionThe issue doesn't require a change to the product in order to be resolved. Most issues start as that
    ARMaz resource/group/lock/tag/deployment/policy/managementapp/account management-group
    Azure CLI TeamThe command of the issue is owned by Azure CLI team
    on Aug 4, 2026
  5. Aditya Pujara (a0x1ab)
    added
    agent-assist
    on Aug 8, 2026

  6. x-engineering-agent commented on Aug 8, 2026

    @x-engineering-agent
    x-engineering-agentbot
    on Aug 8, 2026 – with X Engineering Agent
    Contributor

    Automated sensitive-information remediation ran on this issue.

    • Detected categories: cloud identifier
    • Replaced with typed [REDACTED:category] placeholders in: issue description
    • Comment owners notified because Agent Assist cannot edit another user's comment: none

    If a credential was exposed, rotate or revoke it immediately. Detected values are never copied into this comment.

    ✅ Keep the redaction · ❌ Dispute the redaction

    GitHub only supports a fixed reaction set, so 👍 represents ✅ and 👎 represents ❌. The bot-created reactions are only poll choices.

    Posted by agent-assist (autonomous bug-fix pipeline).

  7. Aditya Pujara (a0x1ab)
    assigned
    Copilot
    and
    Aditya Pujara (a0x1ab)
    on Aug 8, 2026

  8. x-engineering-agent commented on Aug 8, 2026

    @x-engineering-agent
    x-engineering-agentbot
    on Aug 8, 2026 – with X Engineering Agent
    Contributor

    Bug Analysis

    az mysql flexible-server firewall-rule create started returning an
    InternalServerError after the 2.89.0 release, per the issue's debug log.
    The request GETs the flexible server successfully (200), so the regression is
    likely in how the firewall-rule create command builds/sends the subsequent
    PUT request (e.g. API version pinned in azure.cli.command_modules.mysql, or
    a payload/serialization change) rather than a transient service-side error.

    Investigate src/azure-cli/azure/cli/command_modules/mysql (and shared
    rdbms helpers) for the firewall-rule create path: check the api-version
    used for the FirewallRules PUT call and any recent parameter/model changes
    that could produce a malformed request body causing the service to fail with
    InternalServerError. Add/adjust a recording-based test under
    src/azure-cli/azure/cli/command_modules/mysql/tests covering firewall rule
    creation to catch this regression.

    Use this EXACT PR title: [MySQL] Fix #33839: az mysql flexible-server firewall-rule create: Fix InternalServerError when creating a firewall rule on a MySQL Flexible Server

    PR title & description format (required)

    This repo enforces a PR format (guide). Please author the PR exactly as follows or CI's Check the Format of Pull Request Title and Content will fail.

    Use this EXACT PR title (copy verbatim, do not reword):

    [MySQL] Fix #33839: `az mysql flexible-server firewall-rule create`: Fix InternalServerError when creating a firewall rule on a MySQL Flexible Server

    Keep the backticks around the command and the Fix #33839: prefix. You may only adjust the wording after the command (the final summary) if the fix changes; the [MySQL] prefix, issue link, and backticked command must stay.

    Description — follow the PR template and fill in:

    • Link the issue — start the Description with a closing keyword so the PR auto-links and closes it: Fixes #33839.
    • Related command — the az ... command this affects.
    • Description (mandatory) — why the bug happens, what you changed, and the resulting behavior.
    • Testing Guide — example command(s) showing the fix works.
    • History Notes — leave the title to drive the history note, or add extra lines in the same format (component in brackets + the command in backticks), e.g. [MySQL] `az <command>`: <note>.
    • Keep the template checklist and tick the items you've satisfied.

    Posted by agent-assist (autonomous bug-fix pipeline).

  9. Copilot
    linked a pull request that will close this issue[MySQL] Fix flexible-server firewall rule create payload #33865on Aug 8, 2026
  10. Yeming Liu (isra-fel)
    removed
    act-identity-squad
    on Aug 12, 2026
  11. Cooper Cox (coopercox-ms)
    closed this as completedin #33865on Aug 21, 2026
  12. Aditya Pujara (a0x1ab)
    added
    Azure Client Tools Agent Requested
    and removed
    agent-assist
    on Aug 24, 2026
  13. Aditya Pujara (a0x1ab)
    added
    Request X Engineering AgentAsk the agent to triage this issue or review this PR
    and removed
    Azure Client Tools Agent Requested
    on Sep 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Auto-AssignAuto assign by botMySQLRequest X Engineering AgentAsk the agent to triage this issue or review this PRService AttentionThis issue is responsible by Azure service team.act-codegen-extensibility-squadbugThis issue requires a change to an existing behavior in the product in order to be resolved.customer-reportedIssues that are reported by GitHub users external to the Azure organization.

Type

No type

Projects

No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions