az network bastion ssh (...) --auth-type password uses public key authentication on localhost #32776
Description
Describe the bug
I'm trying to connect to a Linux VM deployed behind Azure Bastion using az network bastion ssh. For the purpose of this test, sshd is configured to accept password-based authentication for SSH.
When running az network bastion ssh --name <bastion-name> --resource-group <rg-name> --target-resource-id <vm-resource-id> --auth-type password --username <my-username>, it appears that the Azure CLI tries to connect on the local (tunnel) port using public Key authentication instead of password authentication.
Note: I don't have any entry for "localhost" in my .ssh/config.
Related command
az network bastion ssh
Errors
➜ ~ az network bastion ssh --name {REDACTED} --resource-group {REDACTED} --target-resource-id {REDACTED} --auth-type password --username ftatard
/Users/florenttatard/.azure/cliextensions/bastion/azext_bastion/custom.py:107: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81.
from pkg_resources import parse_version
ftatard@localhost: Permission denied (publickey).
Issue script & Debug output
➜ ~ az network bastion ssh --name {REDACTED} --resource-group {REDACTED} --target-resource-id {REDACTED} --auth-type password --username ftatard --debug
cli.knack.cli: Command arguments: ['network', 'bastion', 'ssh', '--name', '{REDACTED}', '--resource-group', '{REDACTED}', '--target-resource-id', '/subscriptions/{REDACTED}/resourceGroups/{REDACTED}/providers/Microsoft.Compute/virtualMachines/vm-client-data-access-prod', '--auth-type', 'password', '--username', 'ftatard', '--debug']
cli.knack.cli: __init__ debug log:
Enable color in terminal.
cli.knack.cli: Event: Cli.PreExecute []
cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x105288a40>, <function OutputProducer.on_global_arguments at 0x1054d6c00>, <function CLIQuery.on_global_arguments at 0x105518fe0>]
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
cli.azure.cli.core: Modules found from index for 'network': ['azure.cli.command_modules.network', 'azure.cli.command_modules.privatedns', 'azext_bastion']
cli.azure.cli.core: Loading command modules:
cli.azure.cli.core: Name Load Time Groups Commands
cli.azure.cli.core: network 0.161 122 370
cli.azure.cli.core: privatedns 0.004 14 60
cli.azure.cli.core: Total (2) 0.165 136 430
cli.azure.cli.core: These extensions are not installed and will be skipped: ['azext_ai_examples', 'azext_next']
cli.azure.cli.core: Loading extensions:
cli.azure.cli.core: Name Load Time Groups Commands Directory
cli.azure.cli.core: bastion 0.002 2 9 /Users/{REDACTED}/.azure/cliextensions/bastion
cli.azure.cli.core: Total (1) 0.002 2 9
cli.azure.cli.core: Loaded 136 groups, 439 commands.
cli.azure.cli.core: Found a match in the command table.
cli.azure.cli.core: Raw command : network bastion ssh
cli.azure.cli.core: Command table: network bastion ssh
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x10699b100>]
cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to '/Users/{REDACTED}/.azure/commands/2026-02-11.13-49-56.network_bastion_ssh.47320.log'.
az_command_data_logger: command args: network bastion ssh --name {} --resource-group {} --target-resource-id {} --auth-type {} --username {} --debug
cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument.<locals>.add_subscription_parameter at 0x1069e0b80>]
cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument.<locals>.add_ids_arguments at 0x1069e2e80>, <function register_cache_arguments.<locals>.add_cache_arguments at 0x1069e3060>, <function register_upcoming_breaking_change_info.<locals>.update_breaking_change_info at 0x1069e3100>]
cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
cli.knack.cli: Event: CommandInvoker.OnPreParseArgs []
cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x1054d6ca0>, <function CLIQuery.handle_query_parameter at 0x105519080>, <function register_ids_argument.<locals>.parse_ids_arguments at 0x1069e2f20>]
az_command_data_logger: extension name: bastion
az_command_data_logger: extension version: 1.4.2
/Users/{REDACTED}/.azure/cliextensions/bastion/azext_bastion/custom.py:107: UserWarning: pkg_resources is deprecated as an API. See https://setuptools.pypa.io/en/latest/pkg_resources.html. The pkg_resources package is slated for removal as early as 2025-11-30. Refrain from using this package or pin to Setuptools<81.
from pkg_resources import parse_version
cli.azure.cli.core.auth.persistence: build_persistence: location='/Users/{REDACTED}/.azure/msal_token_cache.json', encrypt=False
cli.azure.cli.core.auth.binary_cache: load: /Users/ftatard/.azure/msal_http_cache.bin
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d
msal.authority: {REDACTED}
msal.application: Broker enabled? None
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token: scopes=('https://management.core.windows.net//.default',), kwargs={}
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: adf452c6-cb41-4f86-84b4-0cd040903cd0
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/{REDACTED}/resourceGroups/{REDACTED}/providers/Microsoft.Network/bastionHosts/{REDACTED}?api-version=2024-01-01'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '75350fae-077a-11f1-98e5-ce6dc8c0c4fb'
cli.azure.cli.core.sdk.policies: 'CommandName': 'network bastion ssh'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--name --resource-group --target-resource-id --auth-type --username --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.83.0 (HOMEBREW) azsdk-python-core/1.38.0 Python/3.13.12 (macOS-15.6-arm64-arm-64bit-Mach-O)'
cli.azure.cli.core.sdk.policies: 'Authorization': '*****'
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/{REDACTED}/resourceGroups/{REDACTED}/providers/Microsoft.Network/bastionHosts/{REDACTED}?api-version=2024-01-01 HTTP/1.1" 200 1677
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '1677'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'ETag': 'W/"cb561851-214d-4548-9508-581e6c8c8bd3"'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '127fdbbb-b6fe-4ed0-b5cf-06f5e9c49e9a'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '5b83d40f-a1aa-4895-b6d7-4e7ae11a10e0'
cli.azure.cli.core.sdk.policies: 'x-ms-arm-service-request-id': '8b80963c-d838-4c60-90fb-a36803a438c8'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-reads': '249'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-reads': '3749'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'CANADACENTRAL:20260211T184956Z:5b83d40f-a1aa-4895-b6d7-4e7ae11a10e0'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: F2B2F8881CDA4122BBD604CE73A5EB1E Ref B: YQ1AA2090602052 Ref C: 2026-02-11T18:49:56Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Wed, 11 Feb 2026 18:49:55 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"name":"{REDACTED}","id":"/subscriptions/{REDACTED}/resourceGroups/{REDACTED}/providers/Microsoft.Network/bastionHosts/{REDACTED}","etag":"W/\"cb561851-214d-4548-9508-581e6c8c8bd3\"","type":"Microsoft.Network/bastionHosts","location":"canadacentral","tags":{"billing_scope":"global","managed_by":"scalr.io","scalr_workspace":"vm-client-data-access-production"},"properties":{"provisioningState":"Succeeded","dnsName":"bst-b4a77095-1347-40fd-8580-e3176367009c.bastion.azure.com","scaleUnits":2,"enableTunneling":true,"publicUri":"/subscriptions/{REDACTED}/resourceGroups/{REDACTED}/providers/Microsoft.Network/publicIPAddresses/pip-{REDACTED}","ipConfigurations":[{"name":"config","id":"/subscriptions/{REDACTED}/resourceGroups/{REDACTED}/providers/Microsoft.Network/bastionHosts/{REDACTED}/bastionHostIpConfigurations/config","etag":"W/\"cb561851-214d-4548-9508-581e6c8c8bd3\"","type":"Microsoft.Network/bastionHosts/bastionHostIpConfigurations","properties":{"provisioningState":"Succeeded","privateIPAllocationMethod":"Dynamic","publicIPAddress":{"id":"/subscriptions/{REDACTED}/resourceGroups/{REDACTED}/providers/Microsoft.Network/publicIPAddresses/pip-{REDACTED}"},"subnet":{"id":"/subscriptions/{REDACTED}/resourceGroups/rg-global-prod/providers/Microsoft.Network/virtualNetworks/vnet-global-prod/subnets/AzureBastionSubnet"}}}]},"sku":{"name":"Standard"}}
cli.azext_bastion.tunnel: Creating a socket on port: 0
cli.azext_bastion.tunnel: Setting socket options
cli.azext_bastion.tunnel: Binding to socket on local address and port
cli.azext_bastion.tunnel: Auto-selecting port: 62629
cli.azext_bastion.tunnel: Finished initialization
cli.azext_bastion.custom: Running ssh command /usr/bin/ssh ftatard@localhost -p 62629 -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -o LogLevel=Error
cli.azext_bastion.tunnel: Got a connection, starting a new thread
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d
msal.authority: openid_config("https://login.microsoftonline.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic', 'self_signed_tls_client_auth'], 'jwks_uri': 'https://login.microsoftonline.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d/kerberos', 'mtls_endpoint_aliases': {'token_endpoint': 'https://mtlsauth.microsoft.com/1d954bad-21cd-4dbc-8d3c-c8cbcf57251d/oauth2/v2.0/token'}, 'tls_client_certificate_bound_access_tokens': True, 'tenant_region_scope': 'NA', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
msal.application: Broker enabled? None
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: abad4cd6-c171-4384-9098-61a41aa689df
cli.azext_bastion.tunnel: Content: {'resourceId': '/subscriptions/{REDACTED}/resourceGroups/{REDACTED}/providers/Microsoft.Compute/virtualMachines/vm-client-data-access-prod', 'protocol': 'tcptunnel', 'workloadHostPort': 22, 'aztoken': '{REDACTED}', 'token': None}
urllib3.connectionpool: Starting new HTTPS connection (1): bst-b4a77095-1347-40fd-8580-e3176367009c.bastion.azure.com:443
urllib3.connectionpool: https://bst-b4a77095-1347-40fd-8580-e3176367009c.bastion.azure.com:443 "POST /api/tokens HTTP/1.1" 200 None
cli.azext_bastion.tunnel: Websocket, connected status: True
cli.azext_bastion.tunnel: Got debugger connection... index: 0
cli.azext_bastion.tunnel: Waiting for debugger data, index: 0
cli.azext_bastion.tunnel: Waiting for websocket data, connection status: True, index: 0
cli.azext_bastion.tunnel: Both debugger and websocket threads started...
cli.azext_bastion.tunnel: Successfully connected to local server..
cli.azext_bastion.tunnel: Received debugger data, nbytes: 21, index: 0
cli.azext_bastion.tunnel: Sending to websocket, index: 0
cli.azext_bastion.tunnel: Done sending to websocket, index: 0
cli.azext_bastion.tunnel: Waiting for debugger data, index: 0
cli.azext_bastion.tunnel: Received websocket index: 0
cli.azext_bastion.tunnel: Sending to debugger, index: 0
cli.azext_bastion.tunnel: Done sending to debugger, index: 0
cli.azext_bastion.tunnel: Waiting for websocket data, connection status: True, index: 0
cli.azext_bastion.tunnel: Received websocket index: 0
cli.azext_bastion.tunnel: Sending to debugger, index: 0
cli.azext_bastion.tunnel: Done sending to debugger, index: 0
cli.azext_bastion.tunnel: Waiting for websocket data, connection status: True, index: 0
cli.azext_bastion.tunnel: Received debugger data, nbytes: 1568, index: 0
cli.azext_bastion.tunnel: Sending to websocket, index: 0
cli.azext_bastion.tunnel: Done sending to websocket, index: 0
cli.azext_bastion.tunnel: Waiting for debugger data, index: 0
cli.azext_bastion.tunnel: Received debugger data, nbytes: 80, index: 0
cli.azext_bastion.tunnel: Sending to websocket, index: 0
cli.azext_bastion.tunnel: Done sending to websocket, index: 0
cli.azext_bastion.tunnel: Waiting for debugger data, index: 0
cli.azext_bastion.tunnel: Received websocket index: 0
cli.azext_bastion.tunnel: Sending to debugger, index: 0
cli.azext_bastion.tunnel: Done sending to debugger, index: 0
cli.azext_bastion.tunnel: Waiting for websocket data, connection status: True, index: 0
cli.azext_bastion.tunnel: Received debugger data, nbytes: 84, index: 0
cli.azext_bastion.tunnel: Sending to websocket, index: 0
cli.azext_bastion.tunnel: Done sending to websocket, index: 0
cli.azext_bastion.tunnel: Waiting for debugger data, index: 0
cli.azext_bastion.tunnel: Received debugger data, nbytes: 52, index: 0
cli.azext_bastion.tunnel: Sending to websocket, index: 0
cli.azext_bastion.tunnel: Done sending to websocket, index: 0
cli.azext_bastion.tunnel: Waiting for debugger data, index: 0
cli.azext_bastion.tunnel: Received websocket index: 0
cli.azext_bastion.tunnel: Sending to debugger, index: 0
cli.azext_bastion.tunnel: Done sending to debugger, index: 0
cli.azext_bastion.tunnel: Waiting for websocket data, connection status: True, index: 0
cli.azext_bastion.tunnel: Received debugger data, nbytes: 68, index: 0
cli.azext_bastion.tunnel: Sending to websocket, index: 0
cli.azext_bastion.tunnel: Done sending to websocket, index: 0
cli.azext_bastion.tunnel: Waiting for debugger data, index: 0
cli.azext_bastion.tunnel: Received websocket index: 0
cli.azext_bastion.tunnel: Sending to debugger, index: 0
cli.azext_bastion.tunnel: Done sending to debugger, index: 0
cli.azext_bastion.tunnel: Waiting for websocket data, connection status: True, index: 0
cli.azext_bastion.tunnel: Received debugger data, nbytes: 148, index: 0
cli.azext_bastion.tunnel: Sending to websocket, index: 0
cli.azext_bastion.tunnel: Done sending to websocket, index: 0
cli.azext_bastion.tunnel: Waiting for debugger data, index: 0
cli.azext_bastion.tunnel: Received websocket index: 0
cli.azext_bastion.tunnel: Sending to debugger, index: 0
cli.azext_bastion.tunnel: Done sending to debugger, index: 0
cli.azext_bastion.tunnel: Waiting for websocket data, connection status: True, index: 0
cli.azext_bastion.tunnel: Received debugger data, nbytes: 148, index: 0
cli.azext_bastion.tunnel: Sending to websocket, index: 0
cli.azext_bastion.tunnel: Done sending to websocket, index: 0
cli.azext_bastion.tunnel: Waiting for debugger data, index: 0
cli.azext_bastion.tunnel: Received websocket index: 0
cli.azext_bastion.tunnel: Sending to debugger, index: 0
cli.azext_bastion.tunnel: Done sending to debugger, index: 0
cli.azext_bastion.tunnel: Waiting for websocket data, connection status: True, index: 0
ftatard@localhost: Permission denied (publickey).
cli.azext_bastion.tunnel: Received debugger data, nbytes: 0, index: 0
cli.azext_bastion.tunnel: Client close, index: 0
cli.azext_bastion.tunnel: Client disconnected 0
cli.azext_bastion.tunnel: Cleaning up session
urllib3.connectionpool: Starting new HTTPS connection (1): bst-b4a77095-1347-40fd-8580-e3176367009c.bastion.azure.com:443
cli.azext_bastion.tunnel: Received websocket index: 0
cli.azext_bastion.tunnel: Websocket close, index: 0
cli.azext_bastion.tunnel: Client disconnected!, index: 0
cli.azext_bastion.tunnel: Cleaning up session
urllib3.connectionpool: Starting new HTTPS connection (1): bst-b4a77095-1347-40fd-8580-e3176367009c.bastion.azure.com:443
urllib3.connectionpool: https://bst-b4a77095-1347-40fd-8580-e3176367009c.bastion.azure.com:443 "DELETE /api/tokens/{REDACTED} HTTP/1.1" 204 0
cli.knack.cli: Event: CommandInvoker.OnTransformResult [<function _resource_group_transform at 0x1069e04a0>, <function _x509_from_base64_to_hex_transform at 0x1069e0540>]
cli.knack.cli: Event: CommandInvoker.OnFilterResult []
cli.knack.cli: Event: Cli.SuccessfulExecute []
cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x10699b380>]
az_command_data_logger: exit code: 0
cli.__main__: Command ran in 0.965 seconds (init: 0.063, invoke: 0.902)
urllib3.connectionpool: https://bst-b4a77095-1347-40fd-8580-e3176367009c.bastion.azure.com:443 "DELETE /api/tokens/{REDACTED} HTTP/1.1" 404 None
cli.azext_bastion.tunnel: Session already deleted
cli.azext_bastion.tunnel: Both debugger and websocket threads stopped...
cli.azext_bastion.tunnel: Stopped local server..
telemetry.main: Begin splitting cli events and extra events, total events: 1
telemetry.client: Accumulated 0 events. Flush the clients.
telemetry.main: Finish splitting cli events and extra events, cli events: 1
telemetry.save: Save telemetry record of length 4182 in cache file under /Users/ftatard/.azure/telemetry/20260211134956825
telemetry.main: Begin creating telemetry upload process.
telemetry.process: Creating upload process: "/opt/homebrew/Cellar/azure-cli/2.83.0/libexec/bin/python /opt/homebrew/Cellar/azure-cli/2.83.0/libexec/lib/python3.13/site-packages/azure/cli/telemetry/__init__.py /Users/ftatard/.azure /Users/ftatard/.azure/telemetry/20260211134956825"
telemetry.process: Return from creating process 47327
telemetry.main: Finish creating telemetry upload process.
Expected behavior
Resulting ssh command should rely on password authentication.
Environment Summary
➜ ~ az --version
azure-cli 2.83.0
core 2.83.0
telemetry 1.1.0
Extensions:
account 0.2.5
bastion 1.4.2
containerapp 1.3.0b1
edgezones 1.0.0b1
ssh 2.0.6
Dependencies:
msal 1.35.0b1
azure-mgmt-resource 23.3.0
Python location '/opt/homebrew/Cellar/azure-cli/2.83.0/libexec/bin/python'
Config directory '/Users/florenttatard/.azure'
Extensions directory '/Users/florenttatard/.azure/cliextensions'
Python (Darwin) 3.13.12 (main, Feb 3 2026, 17:53:27) [Clang 17.0.0 (clang-1700.6.3.2)]
Legal docs and information: aka.ms/AzureCliLegal
Your CLI is up-to-date.
Additional context
➜ ~ az extension list
[
{
"experimental": false,
"extensionType": "whl",
"name": "account",
"path": "/Users/florenttatard/.azure/cliextensions/account",
"preview": false,
"version": "0.2.5"
},
{
"experimental": false,
"extensionType": "whl",
"name": "bastion",
"path": "/Users/florenttatard/.azure/cliextensions/bastion",
"preview": false,
"version": "1.4.2"
},
{
"experimental": false,
"extensionType": "whl",
"name": "containerapp",
"path": "/Users/florenttatard/.azure/cliextensions/containerapp",
"preview": true,
"version": "1.3.0b1"
},
{
"experimental": false,
"extensionType": "whl",
"name": "edgezones",
"path": "/Users/florenttatard/.azure/cliextensions/edgezones",
"preview": true,
"version": "1.0.0b1"
},
{
"experimental": false,
"extensionType": "whl",
"name": "ssh",
"path": "/Users/florenttatard/.azure/cliextensions/ssh",
"preview": false,
"version": "2.0.6"
}
]