{"action":"created","issue":{"url":"https://api.github.com/repos/Azure/azure-xplat-cli/issues/2717","repository_url":"https://api.github.com/repos/Azure/azure-xplat-cli","labels_url":"https://api.github.com/repos/Azure/azure-xplat-cli/issues/2717/labels{/name}","comments_url":"https://api.github.com/repos/Azure/azure-xplat-cli/issues/2717/comments","events_url":"https://api.github.com/repos/Azure/azure-xplat-cli/issues/2717/events","html_url":"https://github.com/Azure/azure-xplat-cli/issues/2717","id":146481136,"number":2717,"title":"azure vm endpoint acl-rule create: unable to create rules on load-balanced-set endpoint","user":{"login":"tbartlett0","id":7182489,"avatar_url":"https://avatars.githubusercontent.com/u/7182489?v=3","gravatar_id":"","url":"https://api.github.com/users/tbartlett0","html_url":"https://github.com/tbartlett0","followers_url":"https://api.github.com/users/tbartlett0/followers","following_url":"https://api.github.com/users/tbartlett0/following{/other_user}","gists_url":"https://api.github.com/users/tbartlett0/gists{/gist_id}","starred_url":"https://api.github.com/users/tbartlett0/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tbartlett0/subscriptions","organizations_url":"https://api.github.com/users/tbartlett0/orgs","repos_url":"https://api.github.com/users/tbartlett0/repos","events_url":"https://api.github.com/users/tbartlett0/events{/privacy}","received_events_url":"https://api.github.com/users/tbartlett0/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2016-04-07T01:25:42Z","updated_at":"2016-04-07T23:42:38Z","closed_at":null,"body":"CLI Version: **0.9.17**\r\nOS Type: Linux (Ubuntu 14.04 LTS)\r\nInstallation via:  npm\r\n\r\nMode: **ASM**\r\n\r\n*Description*:\r\n`azure vm endpoint acl-rule create` command returns an error when trying to add rules to an endpoint in a load-balanced set.\r\n\r\nSteps to reproduce: first error:\r\n1) Create at least two VMs with public endpoints in a shared load-balanced set\r\n2) Then run `azure vm endpoint acl-rule create VMName EndpointName 0 permit 10.0.0.0/8`\r\n\r\n```\r\n2016-04-07T01:13:18.465Z:\r\n{ [Error: Existing endpoints in LB set 'DNS-balance' do not contain ACL.]\r\n  code: 'BadRequest',\r\n  statusCode: 400,\r\n  requestId: '911511ed3d5b91d880e727e093f21e1d' }\r\nError: Existing endpoints in LB set 'DNS-balance' do not contain ACL.\r\n    at Function.ServiceClient._normalizeError (/usr/local/lib/node_modules/azure-cli/node_modules/azure-common/lib/services/serviceclient.js:815:23)\r\n    at /usr/local/lib/node_modules/azure-cli/node_modules/azure-common/lib/services/filters/errorhandlingfilter.js:44:29\r\n    at Request._callback (/usr/local/lib/node_modules/azure-cli/node_modules/azure-common/lib/http/request-pipeline.js:109:14)\r\n    at Request.self.callback (/usr/local/lib/node_modules/azure-cli/node_modules/azure-common/node_modules/request/request.js:199:22)\r\n    at Request.EventEmitter.emit (events.js:98:17)\r\n    at Request.<anonymous> (/usr/local/lib/node_modules/azure-cli/node_modules/azure-common/node_modules/request/request.js:1160:14)\r\n    at Request.EventEmitter.emit (events.js:117:20)\r\n    at IncomingMessage.<anonymous> (/usr/local/lib/node_modules/azure-cli/node_modules/azure-common/node_modules/request/request.js:1111:12)\r\n    at IncomingMessage.EventEmitter.emit (events.js:117:20)\r\n    at _stream_readable.js:920:16\r\n```\r\n\r\nSteps to reproduce: second error:\r\n1) Create at least two VMs with public endpoints in a shared load-balanced set\r\n2) Create an ACL rule on the load-balanced endpoints using the Azure portal\r\n3) Run `azure vm endpoint acl-rule create VMName EndpointName 1 permit 10.0.0.0/8`\r\n\r\n```\r\nError stack trace:2016-04-07T00:45:13.341Z:\r\n{ [Error: ACL rules do not match for endpoint in 'loadbalancedset'. Mismatch in rule count. Specified '2'. Existing '1'.]\r\n  code: 'BadRequest',\r\n  statusCode: 400,\r\n  requestId: 'b06b480cd321992ba6e4254c4688f1e2' }\r\nError: ACL rules do not match for endpoint in 'loadbalancedset'. Mismatch in rule count. Specified '2'. Existing '1'.\r\n    at Function.ServiceClient._normalizeError (/usr/local/lib/node_modules/azure-cli/node_modules/azure-common/lib/services/serviceclient.js:815:23)\r\n    at /usr/local/lib/node_modules/azure-cli/node_modules/azure-common/lib/services/filters/errorhandlingfilter.js:44:29\r\n    at Request._callback (/usr/local/lib/node_modules/azure-cli/node_modules/azure-common/lib/http/request-pipeline.js:109:14)\r\n    at Request.self.callback (/usr/local/lib/node_modules/azure-cli/node_modules/azure-common/node_modules/request/request.js:199:22)\r\n    at Request.EventEmitter.emit (events.js:98:17)\r\n    at Request.<anonymous> (/usr/local/lib/node_modules/azure-cli/node_modules/azure-common/node_modules/request/request.js:1160:14)\r\n    at Request.EventEmitter.emit (events.js:117:20)\r\n    at IncomingMessage.<anonymous> (/usr/local/lib/node_modules/azure-cli/node_modules/azure-common/node_modules/request/request.js:1111:12)\r\n    at IncomingMessage.EventEmitter.emit (events.js:117:20)\r\n    at _stream_readable.js:920:16\r\n```\r\n\r\n*Comments:*\r\n\r\nThis appears to be the same / similar to the problem encountered in [Issue 1552](https://github.com/Azure/azure-xplat-cli/issues/1522), but that issue was closed when the 'acl-rule index 0' bug was fixed.\r\n\r\nThe wiki page for [Manage load balanced set](https://github.com/Azure/azure-xplat-cli/wiki/Manage-load-balanced-set) seems to imply that the ACLs should be managed with a `azure service lbsettings acl create` command which is not yet implemented. Does this mean they cannot be managed with `endpoint acl-rule` commands? If so it would help if the error message said so! (I began with the assumption that they should be configured my modifying one of the affected endpoints since this is the way I did it in the portal.)\r\n\r\nIf load-balanced endpoint ACLs require the `lbsettings` command to manage, then please consider this a feature request for implementing it."},"comment":{"url":"https://api.github.com/repos/Azure/azure-xplat-cli/issues/comments/207138922","html_url":"https://github.com/Azure/azure-xplat-cli/issues/2717#issuecomment-207138922","issue_url":"https://api.github.com/repos/Azure/azure-xplat-cli/issues/2717","id":207138922,"user":{"login":"huangpf","id":3858524,"avatar_url":"https://avatars.githubusercontent.com/u/3858524?v=3","gravatar_id":"","url":"https://api.github.com/users/huangpf","html_url":"https://github.com/huangpf","followers_url":"https://api.github.com/users/huangpf/followers","following_url":"https://api.github.com/users/huangpf/following{/other_user}","gists_url":"https://api.github.com/users/huangpf/gists{/gist_id}","starred_url":"https://api.github.com/users/huangpf/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/huangpf/subscriptions","organizations_url":"https://api.github.com/users/huangpf/orgs","repos_url":"https://api.github.com/users/huangpf/repos","events_url":"https://api.github.com/users/huangpf/events{/privacy}","received_events_url":"https://api.github.com/users/huangpf/received_events","type":"User","site_admin":false},"created_at":"2016-04-07T23:42:38Z","updated_at":"2016-04-07T23:42:38Z","body":"Networking team owns these features."}}