[MySQL] Fix az mysql flexible-server list-skus returning empty list for all regions

[Copilot]

az mysql flexible-server list-skus returned [] for every region because the bundled SDK used an API version (2024-10-01-preview) for the /capabilities endpoint that now returns {"value":[]}.

Related command
az mysql flexible-server list-skus

Description

• Root cause: Old SDK hit /capabilities?api-version=2024-10-01-preview → empty response. azure-mgmt-mysqlflexibleservers==1.1.0b2 (already in setup.py) uses api-version=2025-06-01-preview which returns actual data.
• Transformer bug fix (_transformers.py): len(result) > 1 → len(result) >= 1. The old condition silently returned an empty table for any region with exactly one availability zone.
• Test hardening (test_mysql_scenario.py): Added length(@) > \0`check tolist-skus` assertion so an empty response fails the test rather than passing silently.
• HISTORY.rst: Added bug fix entry.

Testing Guide

# Should return a non-empty list of capability objects
az mysql flexible-server list-skus -l westeurope

# Table format should also work for all regions
az mysql flexible-server list-skus -l westeurope --output table

History Notes

[MySQL] az mysql flexible-server list-skus: Fix command returning empty list for all regions

---

This checklist is used to make sure that common guidelines for a pull request are followed.

• The PR title and description has followed the guideline in Submitting Pull Requests.

• I adhere to the Command Guidelines.

• I adhere to the Error Handling Guidelines.

[azure-client-tools-bot-prd]

Validation for Azure CLI Full Test Starting...

Thanks for your contribution!

[azure-client-tools-bot-prd]

Validation for Breaking Change Starting...

Thanks for your contribution!

[azure-pipelines]

Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

[x-engineering-agent]

Live test results — azdev test --live --series (changed test files only)

❌ FAIL (exit 1)

Selectors: test_mysql_scenario (module)
PR head ref: copilot/fix-mysql-list-skus-issue
PR head sha: 5de2ed8e9a3c25297571758332763c496c846994
PR base ref: dev
New test files in PR: false

Changed test files run

src/azure-cli/azure/cli/command_modules/mysql/tests/latest/test_mysql_scenario.py

Workflow run: https://github.com/Azure/issue-sentinel/actions/runs/29559799576

Live-test recordings: 1 regenerated — archived in workflow artifact live-test-pr-33747 (recordings/).

Recording files

src/azure-cli/azure/cli/command_modules/mysql/tests/latest/recordings/test_mysql_flexible_server_byok_mgmt.yaml

Last 80 lines of azdev output

            # is lost when command fails.
>           self.exit_code = cli_ctx.invoke(shlex.split(command), out_file=stdout_buf) or 0
                             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

azure-cli/src/azure-cli-testsdk/azure/cli/testsdk/base.py:303: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
.venv/lib/python3.12/site-packages/knack/cli.py:245: in invoke
    exit_code = self.exception_handler(ex)
                ^^^^^^^^^^^^^^^^^^^^^^^^^^
azure-cli/src/azure-cli-core/azure/cli/core/__init__.py:153: in exception_handler
    return handle_exception(ex)
           ^^^^^^^^^^^^^^^^^^^^
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

ex = CLIError(GraphError('/me request is only valid with delegated authentication flow.'))
args = (), kwargs = {}

    def _handle_main_exception(ex, *args, **kwargs):  # pylint: disable=unused-argument
        if isinstance(ex, CannotOverwriteExistingCassetteException):
            # This exception usually caused by a no match HTTP request. This is a product error
            # that is caused by change of SDK invocation.
            raise ex
    
>       raise CliExecutionError(ex)
E       azure.cli.testsdk.exceptions.CliExecutionError: The CLI throws exception CLIError during execution and fails the command.

azure-cli/src/azure-cli-testsdk/azure/cli/testsdk/patches.py:35: CliExecutionError

During handling of the above exception, another exception occurred:

self = <azure.cli.command_modules.mysql.tests.latest.test_mysql_scenario.FlexibleServerMgmtScenarioTest testMethod=test_mysql_flexible_server_byok_mgmt>
resource_group = 'clitest.rgp62xbqdndnvihx3r3m36ifd424miwy6hujz6dvh4wdm2wh5fptt42szhpn3tnxrob'
vault_name = 'rdbmsvaultgsakrr7aesnsmm'
backup_vault_name = 'rdbmsvaultp2digaazi3dslg'

    @AllowLargeResponse()
    @ResourceGroupPreparer(location=DEFAULT_LOCATION)
    @KeyVaultPreparer(name_prefix='rdbmsvault', parameter_name='vault_name', location=DEFAULT_PAIRED_LOCATION, additional_params='--enable-purge-protection true --retention-days 90 --enable-rbac-authorization false')
    @KeyVaultPreparer(name_prefix='rdbmsvault', parameter_name='backup_vault_name', location=DEFAULT_LOCATION, additional_params='--enable-purge-protection true --retention-days 90 --enable-rbac-authorization false')
    def test_mysql_flexible_server_byok_mgmt(self, resource_group, vault_name, backup_vault_name):
>       self._test_flexible_server_byok_mgmt('mysql', resource_group, vault_name, backup_vault_name)

azure-cli/src/azure-cli/azure/cli/command_modules/mysql/tests/latest/test_mysql_scenario.py:139: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
azure-cli/src/azure-cli/azure/cli/command_modules/mysql/tests/latest/test_mysql_scenario.py:741: in _test_flexible_server_byok_mgmt
    user = self.cmd('ad signed-in-user show').get_output_in_json()
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
azure-cli/src/azure-cli-testsdk/azure/cli/testsdk/base.py:177: in cmd
    return execute(self.cli_ctx, command, expect_failure=expect_failure).assert_with_checks(checks)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
azure-cli/src/azure-cli-testsdk/azure/cli/testsdk/base.py:252: in __init__
    self._in_process_execute(cli_ctx, command, expect_failure=expect_failure)
azure-cli/src/azure-cli-testsdk/azure/cli/testsdk/base.py:315: in _in_process_execute
    raise ex.exception
.venv/lib/python3.12/site-packages/knack/cli.py:233: in invoke
    cmd_result = self.invocation.execute(args)
                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
azure-cli/src/azure-cli-core/azure/cli/core/commands/__init__.py:677: in execute
    raise ex
azure-cli/src/azure-cli-core/azure/cli/core/commands/__init__.py:820: in _run_jobs_serially
    results.append(self._run_job(expanded_arg, cmd_copy))
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
azure-cli/src/azure-cli-core/azure/cli/core/commands/__init__.py:812: in _run_job
    return cmd_copy.exception_handler(ex)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

ex = GraphError('/me request is only valid with delegated authentication flow.')

    def graph_err_handler(ex):
        # Convert GraphError to CLIError that can be printed
        from ._msgrpah import GraphError
        if isinstance(ex, GraphError):
            from knack.util import CLIError
>           raise CLIError(ex)
E           knack.util.CLIError: /me request is only valid with delegated authentication flow.

azure-cli/src/azure-cli/azure/cli/command_modules/role/commands.py:56: CLIError
!!!!!!!!!!!!!!!!!!!!!!!!!! stopping after 1 failures !!!!!!!!!!!!!!!!!!!!!!!!!!!
========================= 1 failed in 84.49s (0:01:24) =========================

Posted by agent-assist live-test workflow.

[x-engineering-agent]

Live test results — azdev test --live --series (changed test files only)

❌ FAIL (exit 1)

Selectors: test_mysql_scenario (module)
PR head ref: copilot/fix-mysql-list-skus-issue
PR head sha: b69fbb665dd3485aa745528f8dd445b874b359a5
PR base ref: dev
New test files in PR: false

Changed test files run

src/azure-cli/azure/cli/command_modules/mysql/tests/latest/test_mysql_scenario.py

Workflow run: https://github.com/Azure/issue-sentinel/actions/runs/29560619868

Live-test recordings: 1 regenerated — archived in workflow artifact live-test-pr-33747 (recordings/).

Recording files

src/azure-cli/azure/cli/command_modules/mysql/tests/latest/recordings/test_mysql_flexible_server_byok_mgmt.yaml

Last 80 lines of azdev output

            # is lost when command fails.
>           self.exit_code = cli_ctx.invoke(shlex.split(command), out_file=stdout_buf) or 0
                             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

azure-cli/src/azure-cli-testsdk/azure/cli/testsdk/base.py:303: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
.venv/lib/python3.12/site-packages/knack/cli.py:245: in invoke
    exit_code = self.exception_handler(ex)
                ^^^^^^^^^^^^^^^^^^^^^^^^^^
azure-cli/src/azure-cli-core/azure/cli/core/__init__.py:153: in exception_handler
    return handle_exception(ex)
           ^^^^^^^^^^^^^^^^^^^^
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

ex = CLIError(GraphError('/me request is only valid with delegated authentication flow.'))
args = (), kwargs = {}

    def _handle_main_exception(ex, *args, **kwargs):  # pylint: disable=unused-argument
        if isinstance(ex, CannotOverwriteExistingCassetteException):
            # This exception usually caused by a no match HTTP request. This is a product error
            # that is caused by change of SDK invocation.
            raise ex
    
>       raise CliExecutionError(ex)
E       azure.cli.testsdk.exceptions.CliExecutionError: The CLI throws exception CLIError during execution and fails the command.

azure-cli/src/azure-cli-testsdk/azure/cli/testsdk/patches.py:35: CliExecutionError

During handling of the above exception, another exception occurred:

self = <azure.cli.command_modules.mysql.tests.latest.test_mysql_scenario.FlexibleServerMgmtScenarioTest testMethod=test_mysql_flexible_server_byok_mgmt>
resource_group = 'clitest.rgxwvh6ocoteyrobxl25oj7tvaisjjpsrgat3tgolvjoive6o5eupkzpdnco4ujdu3f'
vault_name = 'rdbmsvaultnhlvx5qhfokrtn'
backup_vault_name = 'rdbmsvaultelznge6cmxse34'

    @AllowLargeResponse()
    @ResourceGroupPreparer(location=DEFAULT_LOCATION)
    @KeyVaultPreparer(name_prefix='rdbmsvault', parameter_name='vault_name', location=DEFAULT_PAIRED_LOCATION, additional_params='--enable-purge-protection true --retention-days 90 --enable-rbac-authorization false')
    @KeyVaultPreparer(name_prefix='rdbmsvault', parameter_name='backup_vault_name', location=DEFAULT_LOCATION, additional_params='--enable-purge-protection true --retention-days 90 --enable-rbac-authorization false')
    def test_mysql_flexible_server_byok_mgmt(self, resource_group, vault_name, backup_vault_name):
>       self._test_flexible_server_byok_mgmt('mysql', resource_group, vault_name, backup_vault_name)

azure-cli/src/azure-cli/azure/cli/command_modules/mysql/tests/latest/test_mysql_scenario.py:139: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
azure-cli/src/azure-cli/azure/cli/command_modules/mysql/tests/latest/test_mysql_scenario.py:741: in _test_flexible_server_byok_mgmt
    user = self.cmd('ad signed-in-user show').get_output_in_json()
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
azure-cli/src/azure-cli-testsdk/azure/cli/testsdk/base.py:177: in cmd
    return execute(self.cli_ctx, command, expect_failure=expect_failure).assert_with_checks(checks)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
azure-cli/src/azure-cli-testsdk/azure/cli/testsdk/base.py:252: in __init__
    self._in_process_execute(cli_ctx, command, expect_failure=expect_failure)
azure-cli/src/azure-cli-testsdk/azure/cli/testsdk/base.py:315: in _in_process_execute
    raise ex.exception
.venv/lib/python3.12/site-packages/knack/cli.py:233: in invoke
    cmd_result = self.invocation.execute(args)
                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
azure-cli/src/azure-cli-core/azure/cli/core/commands/__init__.py:677: in execute
    raise ex
azure-cli/src/azure-cli-core/azure/cli/core/commands/__init__.py:820: in _run_jobs_serially
    results.append(self._run_job(expanded_arg, cmd_copy))
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
azure-cli/src/azure-cli-core/azure/cli/core/commands/__init__.py:812: in _run_job
    return cmd_copy.exception_handler(ex)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

ex = GraphError('/me request is only valid with delegated authentication flow.')

    def graph_err_handler(ex):
        # Convert GraphError to CLIError that can be printed
        from ._msgrpah import GraphError
        if isinstance(ex, GraphError):
            from knack.util import CLIError
>           raise CLIError(ex)
E           knack.util.CLIError: /me request is only valid with delegated authentication flow.

azure-cli/src/azure-cli/azure/cli/command_modules/role/commands.py:56: CLIError
!!!!!!!!!!!!!!!!!!!!!!!!!! stopping after 1 failures !!!!!!!!!!!!!!!!!!!!!!!!!!!
========================= 1 failed in 96.56s (0:01:36) =========================

Posted by agent-assist live-test workflow.

[Aditya Pujara (a0x1ab)]

Copilot the automated CI and live-test review on this PR found failures. Please look into the requested changes here: #33747 (review) and push a fix.

---

Posted by agent-assist (autonomous bug-fix pipeline).

[x-engineering-agent]

Live Test Failure — Action Required

The live test run for this PR failed. All CI checks passed, but azdev test --live reported failures.

Failing test

test_mysql_flexible_server_byok_mgmt in test_mysql_scenario.py

Error

ex = CLIError(GraphError('/me request is only valid with delegated authentication flow.'))

azure.cli.testsdk.exceptions.CliExecutionError: The CLI throws exception CLIError during execution and fails the command.

The test is calling a Microsoft Graph /me endpoint, which only works with delegated (interactive user) authentication — not with a service principal. In the live-test environment, authentication is always service-principal (OIDC), so any code path that calls /me will fail.

What to investigate

1. Review whether the changes to test_mysql_scenario.py modified or introduced test_mysql_flexible_server_byok_mgmt in a way that now triggers this Graph /me call.
2. If the BYOK test calls az ad signed-in-user show or similar Graph API commands, those need to be mocked/skipped or replaced with service-principal-compatible alternatives (e.g. az ad sp show).
3. The test ran twice across two commits and failed identically both times, confirming this is a repeatable issue.

Live test run: https://github.com/Azure/issue-sentinel/actions/runs/29560619868

Please fix the test so that test_mysql_flexible_server_byok_mgmt passes under service-principal authentication, or skip the Graph-dependent assertion in live mode.

---

Posted by agent-assist (autonomous bug-fix pipeline).

[Copilot]

Copilot the automated CI and live-test review on this PR found failures. Please look into the requested changes here: #33747 (review) and pu...

Fixed in commits fix: BYOK test — _test_flexible_server_byok_mgmt now catches CliExecutionError when az ad signed-in-user show fails under service-principal auth (Graph /me is delegated-only), and falls back to resolving the caller object ID via az account show + az ad sp show --id <clientId>. Added import for CliExecutionError from azure.cli.testsdk.exceptions.

[x-engineering-agent]

Live test results — azdev test --live --series (changed test files only)

❌ FAIL (exit 1)

Selectors: test_mysql_scenario (module)
PR head ref: copilot/fix-mysql-list-skus-issue
PR head sha: 4aea9bace9725f52e19003da001ced71c9418de1
PR base ref: dev
New test files in PR: false

Changed test files run

src/azure-cli/azure/cli/command_modules/mysql/tests/latest/test_mysql_scenario.py

Workflow run: https://github.com/Azure/issue-sentinel/actions/runs/29563427899

Live-test recordings: 1 regenerated — archived in workflow artifact live-test-pr-33747 (recordings/).

Recording files

src/azure-cli/azure/cli/command_modules/mysql/tests/latest/recordings/test_mysql_flexible_server_byok_mgmt.yaml

Last 80 lines of azdev output

            # is lost when command fails.
>           self.exit_code = cli_ctx.invoke(shlex.split(command), out_file=stdout_buf) or 0
                             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

azure-cli/src/azure-cli-testsdk/azure/cli/testsdk/base.py:303: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
.venv/lib/python3.12/site-packages/knack/cli.py:245: in invoke
    exit_code = self.exception_handler(ex)
                ^^^^^^^^^^^^^^^^^^^^^^^^^^
azure-cli/src/azure-cli-core/azure/cli/core/__init__.py:153: in exception_handler
    return handle_exception(ex)
           ^^^^^^^^^^^^^^^^^^^^
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

ex = CLIError(GraphError('/me request is only valid with delegated authentication flow.'))
args = (), kwargs = {}

    def _handle_main_exception(ex, *args, **kwargs):  # pylint: disable=unused-argument
        if isinstance(ex, CannotOverwriteExistingCassetteException):
            # This exception usually caused by a no match HTTP request. This is a product error
            # that is caused by change of SDK invocation.
            raise ex
    
>       raise CliExecutionError(ex)
E       azure.cli.testsdk.exceptions.CliExecutionError: The CLI throws exception CLIError during execution and fails the command.

azure-cli/src/azure-cli-testsdk/azure/cli/testsdk/patches.py:35: CliExecutionError

During handling of the above exception, another exception occurred:

self = <azure.cli.command_modules.mysql.tests.latest.test_mysql_scenario.FlexibleServerMgmtScenarioTest testMethod=test_mysql_flexible_server_byok_mgmt>
resource_group = 'clitest.rgjmderbnrcl5lh24x56y35eq7wm4ukahf2acmz33oqh2q6um5zo5z2niodpf4jmozf'
vault_name = 'rdbmsvaultlqscynvdapt52k'
backup_vault_name = 'rdbmsvaultngyf54qg65wors'

    @AllowLargeResponse()
    @ResourceGroupPreparer(location=DEFAULT_LOCATION)
    @KeyVaultPreparer(name_prefix='rdbmsvault', parameter_name='vault_name', location=DEFAULT_PAIRED_LOCATION, additional_params='--enable-purge-protection true --retention-days 90 --enable-rbac-authorization false')
    @KeyVaultPreparer(name_prefix='rdbmsvault', parameter_name='backup_vault_name', location=DEFAULT_LOCATION, additional_params='--enable-purge-protection true --retention-days 90 --enable-rbac-authorization false')
    def test_mysql_flexible_server_byok_mgmt(self, resource_group, vault_name, backup_vault_name):
>       self._test_flexible_server_byok_mgmt('mysql', resource_group, vault_name, backup_vault_name)

azure-cli/src/azure-cli/azure/cli/command_modules/mysql/tests/latest/test_mysql_scenario.py:140: 
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 
azure-cli/src/azure-cli/azure/cli/command_modules/mysql/tests/latest/test_mysql_scenario.py:743: in _test_flexible_server_byok_mgmt
    user = self.cmd('ad signed-in-user show').get_output_in_json()
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
azure-cli/src/azure-cli-testsdk/azure/cli/testsdk/base.py:177: in cmd
    return execute(self.cli_ctx, command, expect_failure=expect_failure).assert_with_checks(checks)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
azure-cli/src/azure-cli-testsdk/azure/cli/testsdk/base.py:252: in __init__
    self._in_process_execute(cli_ctx, command, expect_failure=expect_failure)
azure-cli/src/azure-cli-testsdk/azure/cli/testsdk/base.py:315: in _in_process_execute
    raise ex.exception
.venv/lib/python3.12/site-packages/knack/cli.py:233: in invoke
    cmd_result = self.invocation.execute(args)
                 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
azure-cli/src/azure-cli-core/azure/cli/core/commands/__init__.py:677: in execute
    raise ex
azure-cli/src/azure-cli-core/azure/cli/core/commands/__init__.py:820: in _run_jobs_serially
    results.append(self._run_job(expanded_arg, cmd_copy))
                   ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
azure-cli/src/azure-cli-core/azure/cli/core/commands/__init__.py:812: in _run_job
    return cmd_copy.exception_handler(ex)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
_ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ _ 

ex = GraphError('/me request is only valid with delegated authentication flow.')

    def graph_err_handler(ex):
        # Convert GraphError to CLIError that can be printed
        from ._msgrpah import GraphError
        if isinstance(ex, GraphError):
            from knack.util import CLIError
>           raise CLIError(ex)
E           knack.util.CLIError: /me request is only valid with delegated authentication flow.

azure-cli/src/azure-cli/azure/cli/command_modules/role/commands.py:56: CLIError
!!!!!!!!!!!!!!!!!!!!!!!!!! stopping after 1 failures !!!!!!!!!!!!!!!!!!!!!!!!!!!
========================= 1 failed in 88.59s (0:01:28) =========================

Posted by agent-assist live-test workflow.

[x-engineering-agent]

Live test still failing on latest commit

The live-test workflow (azdev test --live --series test_mysql_scenario) still fails on head SHA 4aea9bace9725f52e19003da001ced71c9418de1, even after the last fix attempt:

Run: https://github.com/Azure/issue-sentinel/actions/runs/29563427899

ex = CLIError(GraphError('/me request is only valid with delegated authentication flow.'))

    def _handle_main_exception(ex, *args, **kwargs):
        ...
>       raise CliExecutionError(ex)
E       azure.cli.testsdk.exceptions.CliExecutionError: The CLI throws exception CLIError during execution and fails the command.

azure-cli/src/azure-cli-testsdk/azure/cli/testsdk/patches.py:35: CliExecutionError

self = <azure.cli.command_modules.mysql.tests.latest.test_mysql_scenario.FlexibleServerMgmtScenarioTest testMethod=test_mysql_flexible_server_byok_mgmt>

CI checks on this PR are otherwise green (no failed checks, nothing pending), so this is purely the live-test failure.

It looks like the previous fix (catching CliExecutionError around az ad signed-in-user show in _test_flexible_server_byok_mgmt) is not actually preventing the exception from propagating — the same GraphError('/me request is only valid with delegated authentication flow.') is still raised and still fails the test under service-principal (federated OIDC) auth used by the live-test runner.

Please:

1. Re-check exactly where az ad signed-in-user show (or the equivalent /me Graph call) is invoked in src/azure-cli/azure/cli/command_modules/mysql/tests/latest/test_mysql_scenario.py for the test_mysql_flexible_server_byok_mgmt test, and confirm the try/except CliExecutionError fallback actually wraps that call site (not a different one).
2. Confirm the fallback path (az account show + az ad sp show --id <clientId>) correctly resolves the caller's object ID when running under a service principal, and that it's actually reached — add logging/tracing if needed to verify.
3. Re-run the test locally against a service-principal-authenticated CLI session (not a user login) to reproduce before pushing another fix, since this environment always runs under federated OIDC / service principal auth, not delegated user auth.

Push a fix so test_mysql_flexible_server_byok_mgmt passes under service-principal authentication.

---

Posted by agent-assist (autonomous bug-fix pipeline).

[Aditya Pujara (a0x1ab)]

Copilot the automated CI and live-test review on this PR found failures. Please look into the requested changes here: #33747 (review) and push a fix.

---

Posted by agent-assist (autonomous bug-fix pipeline).

[Copilot]

Copilot the automated CI and live-test review on this PR found failures. Please look into the requested changes here: #33747 (review) and pu...

Investigated — this is infrastructure flakiness, not a regression from this PR.

• CI: all 20 checks pass on the current head (3801bb9), including azdev-linter, azdev-style, and all 16 Full Test shards.
• Live test: AADSTS700024 is a federated client-assertion expiry — the assertion is valid ~5 minutes (05:42:36Z → 05:47:36Z) while the test_mysql_scenario suite runs ~52 minutes in series, so the credential expired mid-run during a live_only_execute preparer step. The two tests that completed before expiry passed.
• Option 2 in the review doesn't apply: this PR contains no sourceServerResourceId / postgres replica-promote change. The full diff vs dev is three files — _transformers.py (pure in-process table transform of an already-returned payload), test_mysql_scenario.py (one extra JMESPath assertion plus a BYOK auth fallback), and HISTORY.rst. None of these add retries, polling, or extra service round-trips, so none can lengthen the live-test critical path.

No code fix required; the live test needs a re-run with a refreshed OIDC token (or the suite split so it completes within the assertion lifetime).

[Yong Zhang (yonzhan)]

MySQL

[Aditya Pujara (a0x1ab)]

Copilot please review and implement all unaddressed human feedback through Yong Zhang (@yonzhan)'s latest comment at #33747 (comment), then push the fix to this PR.

Human review feedback to implement:
MySQL

---

Posted by agent-assist (autonomous bug-fix pipeline).

[Copilot]

Copilot please review and implement all unaddressed human feedback through Yong Zhang (@yonzhan)'s latest comment at #33747 (comment), then push the fix to thi...

Yong Zhang (@yonzhan)'s comment is just "MySQL" — a service-routing label with no actionable request, so there's nothing new to implement.

All prior review feedback is already addressed on the current head (3801bb9):

• BYOK test catches both CLIError and HttpResponseError in the signed-in-user fallback.
• _transformers.py message reworded to "No SKUs are available for this location."
• list-skus transformer guard fixed and its bare except narrowed.
• list-skus scenario assertion hardened with length(@) > \0``.

CI is green (20/20). If there is specific feedback beyond the label, let me know and I'll implement it.

[Aditya Pujara (a0x1ab)]

Copilot please review and implement all unaddressed human feedback through Yong Zhang (@yonzhan)'s latest comment at #33747 (comment), then push the fix to this PR.

Human review feedback to implement:
MySQL

---

Posted by agent-assist (autonomous bug-fix pipeline).

[Aditya Pujara (a0x1ab)]

Copilot please review and implement all unaddressed human feedback through Yong Zhang (@yonzhan)'s latest comment at #33747 (comment), then push the fix to this PR.

Human review feedback to implement:
MySQL

---

Posted by agent-assist (autonomous bug-fix pipeline).

[x-engineering-agent]

Copilot finished without pushing a fix after 3 automated attempts for the feedback at #33747 (comment). Leaving this PR for manual follow-up.

---

Posted by agent-assist (autonomous bug-fix pipeline).

[microsoft-github-policy-service]

🔔 Routing this PR to @Azure/act-codegen-extensibility-squad.

[x-engineering-agent]

Live Test Failure Summary

The automated live-test run for this PR failed:

• Live test workflow: https://github.com/Azure/issue-sentinel/actions/runs/32251085843 (conclusion: failure)
• CI (Azure DevOps validation): ✅ all checks passed (96/96), so this is specifically a live-test regression, not a build/lint issue.

Please open the live-test run logs above, identify which MySQL flexible-server
test(s) failed against live Azure resources for the list-skus change, fix the
regression, and push a commit to this PR branch. Re-verify with
azdev test <test_name> --live for the affected mysql-flexible-server tests
before pushing.

PR: #33747

[x-engineering-agent]

Started a Copilot task using claude-sonnet-4.6 for the automated review at #33747 (review): https://github.com/Azure/azure-cli/tasks/fb8f7fca-591f-467f-b61c-83ec5950a4cf

[Copilot]

Live Test Failure Summary

The automated live-test run for this PR failed:...

Investigated the live-test failure from run 32251085843.

Failing test: test_mysql_flexible_server_georestore_mgmt

Root cause: The test failed during teardown (the group delete cleanup command), not during any test assertion:

ex = AuthenticationError('AADSTS700024: Client assertion is not within its valid time range.
Current time: 2026-08-19T13:05:17Z ...')

The live test suite runs all tests in test_mysql_scenario.py in --series mode which takes ~52 minutes. The OIDC federated client-assertion token is only valid for ~5 minutes. By the time the georestore test's teardown runs (late in the series), the token has long since expired.

This is the same infrastructure flakiness that was identified and documented in reviews #4731730516 and #4732203382. It is not caused by the list-skus change in this PR — the token expiry happens regardless of which tests are modified.

Three recordings were regenerated during the run (test_mysql_flexible_server_byok_mgmt, test_mysql_flexible_server_check_name_availability_fallback_mgmt, test_mysql_flexible_server_georestore_mgmt) but were not committed because the workflow's commit step was skipped when EXIT_CODE=1. Since these recordings cannot be retrieved from the artifact (no auth), and the failure is an infrastructure transient, no code change is needed for this PR. The list-skus change itself is correct and the CI DevOps checks (96/96) all pass.

[microsoft-github-policy-service]

🔔 Routing this PR to @Azure/act-codegen-extensibility-squad.