it has started working for us now. seems its fixed and appears Azure have fixed it.
az aks command invoke stopped working
I used below command to administer AKS privately hosted clusters. It used to work until yesterday and stopped working without any changes on the cluster.
az aks command invoke --resource-group resource_group_name --name cluster name --command "kubectl get ns"
(InvalidSubscriptionId) The provided subscription identifier 'resourceGroups' is malformed or invalid.
Code: InvalidSubscriptionId
Message: The provided subscription identifier 'resourceGroups' is malformed or invalid.
I have used below to login and choose correct subscription. AKS cluster exist under resource group and both aks cluster name and resource group names are correct. User used to run above command has "Azure Kubernetes Service RBAC Cluster Admin" role assigned.
az login
az account set --subscription subscription_id
--debug on above command has below output where 400 is return for below http get
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions//resourceGroups/rgp-xxxxxxxx/providers/Microsoft.ContainerService/managedclusters/aks-xxxxx-01/commandRes
ults/5248d0ba67944eb2af583e8231c9ab3d?api-version=2022-03-01'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '80f2d9bc-d203-11ec-8941-acde48001122'
cli.azure.cli.core.sdk.policies: 'CommandName': 'aks command invoke'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--resource-group --name --command --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.36.0 (HOMEBREW) azsdk-python-azure-mgmt-containerservice/19.0.0 Python/3.10.4 (macOS-12.2.1-x86_64-i386-64bit)'
cli.azure.cli.core.sdk.policies: 'Authorization': '*****'
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions//resourceGroups/rgp-xxxx/providers/Microsoft.ContainerService/managedclusters/aks-xxxxx-01/commandResults/5248d0ba
67944eb2af583e8231c9ab3d?api-version=2022-03-01 HTTP/1.1" 400 133
cli.azure.cli.core.sdk.policies: Response status: 400
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'x-ms-failure-cause': 'gateway'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '269d6949-cc30-48a8-9b9b-ae7f4f82608d'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '269d6949-cc30-48a8-9b9b-ae7f4f82608d'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'UKSOUTH:20220512T145516Z:269d6949-cc30-48a8-9b9b-ae7f4f82608d'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'Date': 'Thu, 12 May 2022 14:55:15 GMT'
cli.azure.cli.core.sdk.policies: 'Content-Length': '133'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"error":{"code":"InvalidSubscriptionId","message":"The provided subscription identifier 'resourceGroups' is malformed or invalid."}}
cli.azure.cli.core.util: azure.cli.core.util.handle_exception is called with an exception:
cli.azure.cli.core.util: Traceback (most recent call last):
File "/usr/local/Cellar/azure-cli/2.36.0/libexec/lib/python3.10/site-packages/azure/core/polling/base_polling.py", line 483, in run
self._poll()
File "/usr/local/Cellar/azure-cli/2.36.0/libexec/lib/python3.10/site-packages/azure/core/polling/base_polling.py", line 519, in _poll
self.update_status()
File "/usr/local/Cellar/azure-cli/2.36.0/libexec/lib/python3.10/site-packages/azure/core/polling/base_polling.py", line 561, in update_status
_raise_if_bad_http_status_and_method(self._pipeline_response.http_response)
File "/usr/local/Cellar/azure-cli/2.36.0/libexec/lib/python3.10/site-packages/azure/core/polling/base_polling.py", line 112, in _raise_if_bad_http_status_and_method
raise BadStatus(
azure.core.polling.base_polling.BadStatus: Invalid return status 400 for 'GET' operation
Can someone please guide me in right direction ?