"az network front-door waf-policy managed-rules add" only working for Type DefaultRuleSet Version 1.0

az feedback auto-generates most of the information requested below, as of CLI version 2.0.62

Related command

az network front-door waf-policy managed-rules add --policy-name MyWaf" --resource-group “MyRg” --type Microsoft_DefaultRuleSet --version 2.0

Describe the bug

When the above command is run, it should add the “Microsoft_DefaultRuleSet” version 2.0 rule set to the WAF. However, it actually errors with: (BadRequest) WebApplicationFirewallPolicy validation failed. More information “Managed rule set types or versions are not compatible.”. Indeed, the only combination of types and versions that work is: –type DefaultRuleSet --version 1.0

To Reproduce

az network front-door waf-policy managed-rules add --policy-name MyWaf" --resource-group “MyRg” --type Microsoft_DefaultRuleSet --version 2.0

Expected behavior

The CLI should allow addition of all the rules sets specified in the GUI including: Microsoft_DefaultRuleSet version 1.1 AND Microsoft_DefaultRuleSet version 2.0

Environment summary

Azure Cloud Shell (PowerShell)

Additional context

[t-bzhan]

Hi @mossywell , could you update the front-door extension version to 1.0.17 to see whether the issue is addressed or not: az extension add --upgrade --name front-door --version 1.0.17

[mossywell]

Hello, when I run this: az extension add --upgrade --name front-door --version 1.0.17 followed by this: az network front-door waf-policy managed-rules add --policy-name MyWaf" --resource-group “MyRg” --type Microsoft_DefaultRuleSet --version 2.0

I still get an error: This rule set action value is not supported