Share via

az containerapp ingress access-restriction

  • Reference

Commands to manage IP access restrictions.

Commands

Name Description Type Status
az containerapp ingress access-restriction list

List IP access restrictions for a container app.

 Core GA
az containerapp ingress access-restriction remove

Remove IP access restrictions from a container app.

 Core GA
az containerapp ingress access-restriction set

Configure IP access restrictions for a container app.

 Core GA

az containerapp ingress access-restriction list

Edit

List IP access restrictions for a container app.

az containerapp ingress access-restriction list --name
                                                --resource-group

Examples

List IP access restrictions.

az containerapp ingress access-restriction list -n my-containerapp -g MyResourceGroup

Required Parameters

--name -n

The name of the Containerapp. A name must consist of lower case alphanumeric characters or '-', start with a letter, end with an alphanumeric character, cannot have '--', and must be less than 32 characters.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az containerapp ingress access-restriction remove

Edit

Remove IP access restrictions from a container app.

az containerapp ingress access-restriction remove --rule-name
                                                  [--ids]
                                                  [--name]
                                                  [--resource-group]
                                                  [--subscription]

Examples

Remove an IP access restriction.

az containerapp ingress access-restriction remove -n my-containerapp -g MyResourceGroup --rule-name restrictionName

Required Parameters

--rule-name

The IP security restriction name.

Optional Parameters

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name -n

The name of the Containerapp. A name must consist of lower case alphanumeric characters or '-', start with a letter, end with an alphanumeric character, cannot have '--', and must be less than 32 characters.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

az containerapp ingress access-restriction set

Edit

Configure IP access restrictions for a container app.

az containerapp ingress access-restriction set --action {Allow, Deny}
                                               --ip-address
                                               --rule-name
                                               [--description]
                                               [--ids]
                                               [--name]
                                               [--resource-group]
                                               [--subscription]

Examples

Add an allow IP access restriction.

az containerapp ingress access-restriction set -n my-containerapp -g MyResourceGroup --rule-name restrictionName --ip-address 192.168.1.1/32 --description "Restriction description." --action Allow

Required Parameters

--action

Whether the IP security restriction allows or denies access. All restrictions must be use the same action. If no restrictions are set, all traffic is allowed.

Accepted values: Allow, Deny
--ip-address

The address range of the IP security restriction in IPv4 CIDR notation. (for example, '198.51.100.14/24').

--rule-name

The IP security restriction name.

Optional Parameters

--description

The description of the IP security restriction.

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

--name -n

The name of the Containerapp. A name must consist of lower case alphanumeric characters or '-', start with a letter, end with an alphanumeric character, cannot have '--', and must be less than 32 characters.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Global Parameters
--debug

Increase logging verbosity to show all debug logs.

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

--output -o

Output format.

Accepted values: json, jsonc, none, table, tsv, yaml, yamlc
Default value: json
--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.