azure-cli az vm create fails with image gallery in other subscription

Describe the bug

When creating a VM using an shared image from a image gallery in another subscription, the action fails with an error "Resource group not found".

Debug output shows the command using the wrong subscription when getting image versions. The first call, to get the image definition, is correct.

Seems to be a duplicate of #24896

Workaround

Affects Azure CLI 2.71.0. Downgrading to 2.66.1 resolves the issue.

Related command

az vm create

Errors

(ResourceGroupNotFound) Resource group 'rg-devops-packer' could not be found. Code: ResourceGroupNotFound Message: Resource group 'rg-devops-packer' could not be found.

Issue script & Debug output

Command:

az vm create --resource-group myResourceGroup2 --name myVM2 --image "/subscriptions/d241ff2e-edaf-423f-9c02-e23f899ea249/resourceGroups/rg-devops-packer/providers/Microsoft.Compute/galleries/DevOpsGallery/images/WindowsServerBase" --debug

Output:

cli.knack.cli: Command arguments: ['vm', 'create', '--resource-group', 'myResourceGroup2', '--name', 'myVM2', '--image', '/subscriptions/d241ff2e-edaf-423f-9c02-e23f899ea249/resourceGroups/rg-devops-packer/providers/Microsoft.Compute/galleries/DevOpsGallery/images/WindowsServerBase', '--debug']
cli.knack.cli: __init__ debug log:
Enable color in terminal.
cli.knack.cli: Event: Cli.PreExecute []
cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x00000296A9CD7380>, <function OutputProducer.on_global_arguments at 0x00000296A9E6C220>, <function CLIQuery.on_global_arguments at 0x00000296A9E95620>]
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
cli.azure.cli.core: Modules found from index for 'vm': ['azure.cli.command_modules.vm']
cli.azure.cli.core: Loading command modules:
cli.azure.cli.core: Name                  Load Time    Groups  Commands
cli.azure.cli.core: vm                        0.541        59       279
cli.azure.cli.core: Total (1)                 0.541        59       279
cli.azure.cli.core: These extensions are not installed and will be skipped: ['azext_ai_examples', 'azext_next']
cli.azure.cli.core: Loading extensions:
cli.azure.cli.core: Name                  Load Time    Groups  Commands  Directory
cli.azure.cli.core: Total (0)                 0.000         0         0
cli.azure.cli.core: Loaded 59 groups, 279 commands.
cli.azure.cli.core: Found a match in the command table.
cli.azure.cli.core: Raw command  : vm create
cli.azure.cli.core: Command table: vm create
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x00000296AC21B420>]
cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to 'C:\Users\haldermo\.azure\commands\2025-04-10.08-50-33.vm_create.6944.log'.
az_command_data_logger: command args: vm create --resource-group {} --name {} --image {} --debug
cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument.<locals>.add_subscription_parameter at 0x00000296AC27A5C0>]
cli.azure.cli.core.profiles._shared: Traceback (most recent call last):
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/profiles/_shared.py", line 653, in _get_attr
  File "importlib\__init__.py", line 90, in import_module
  File "<frozen importlib._bootstrap>", line 1387, in _gcd_import
  File "<frozen importlib._bootstrap>", line 1360, in _find_and_load
  File "<frozen importlib._bootstrap>", line 1310, in _find_and_load_unlocked
  File "<frozen importlib._bootstrap>", line 488, in _call_with_frames_removed
  File "<frozen importlib._bootstrap>", line 1387, in _gcd_import
  File "<frozen importlib._bootstrap>", line 1360, in _find_and_load
  File "<frozen importlib._bootstrap>", line 1324, in _find_and_load_unlocked
ModuleNotFoundError: No module named 'azure.mgmt.compute.v2024_03_03'

cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument.<locals>.add_ids_arguments at 0x00000296AC27A660>, <function register_cache_arguments.<locals>.add_cache_arguments at 0x00000296AC27A7A0>, <function register_upcoming_breaking_change_info.<locals>.update_breaking_change_info at 0x00000296AC27A840>]
cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
cli.knack.cli: Event: CommandInvoker.OnPreParseArgs []
cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x00000296A9E6C2C0>, <function CLIQuery.handle_query_parameter at 0x00000296A9E956C0>, <function register_ids_argument.<locals>.parse_ids_arguments at 0x00000296AC27A700>]
cli.azure.cli.core.commands.client_factory: Getting management service client client_type=ResourceManagementClient
cli.azure.cli.core.auth.persistence: build_persistence: location='C:\\Users\\haldermo\\.azure\\msal_token_cache.bin', encrypt=True
cli.azure.cli.core.auth.binary_cache: load: C:\Users\haldermo\.azure\msal_http_cache.bin
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5
msal.authority: openid_config("https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/kerberos', 'tenant_region_scope': 'EU', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
msal.application: Broker enabled? True
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token_info: scopes=('https://management.core.windows.net//.default',), options={}
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: 0fbc60ae-7aed-45c0-b891-a5b71e5df1b3
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/e1f83e20-913a-4978-9c81-bd1d8c2d4648/resourcegroups/myResourceGroup2?api-version=2022-09-01'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies:     'Accept': 'application/json'
cli.azure.cli.core.sdk.policies:     'x-ms-client-request-id': '1973d035-15d8-11f0-9dc0-a08069fe48da'
cli.azure.cli.core.sdk.policies:     'CommandName': 'vm create'
cli.azure.cli.core.sdk.policies:     'ParameterSetName': '--resource-group --name --image --debug'
cli.azure.cli.core.sdk.policies:     'User-Agent': 'AZURECLI/2.71.0 (MSI) azsdk-python-core/1.31.0 Python/3.12.8 (Windows-11-10.0.26100-SP0)'
cli.azure.cli.core.sdk.policies:     'Authorization': '*****'
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/e1f83e20-913a-4978-9c81-bd1d8c2d4648/resourcegroups/myResourceGroup2?api-version=2022-09-01 HTTP/1.1" 200 234
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies:     'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies:     'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies:     'Content-Length': '234'
cli.azure.cli.core.sdk.policies:     'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies:     'Expires': '-1'
cli.azure.cli.core.sdk.policies:     'x-ms-ratelimit-remaining-subscription-reads': '249'
cli.azure.cli.core.sdk.policies:     'x-ms-ratelimit-remaining-subscription-global-reads': '3749'
cli.azure.cli.core.sdk.policies:     'x-ms-request-id': '522b27ed-b27f-4e8a-8eb0-813c924ddcaa'
cli.azure.cli.core.sdk.policies:     'x-ms-correlation-request-id': '522b27ed-b27f-4e8a-8eb0-813c924ddcaa'
cli.azure.cli.core.sdk.policies:     'x-ms-routing-request-id': 'SWEDENCENTRAL:20250410T065034Z:522b27ed-b27f-4e8a-8eb0-813c924ddcaa'
cli.azure.cli.core.sdk.policies:     'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies:     'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies:     'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies:     'X-MSEdge-Ref': 'Ref A: 26E42FC2B4A74EE59E9152421C552B09 Ref B: GVX211060217031 Ref C: 2025-04-10T06:50:34Z'
cli.azure.cli.core.sdk.policies:     'Date': 'Thu, 10 Apr 2025 06:50:34 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"id":"/subscriptions/e1f83e20-913a-4978-9c81-bd1d8c2d4648/resourceGroups/myResourceGroup2","name":"myResourceGroup2","type":"Microsoft.Resources/resourceGroups","location":"northeurope","properties":{"provisioningState":"Succeeded"}}
cli.azure.cli.core.commands.validators: using location 'northeurope' from resource group 'myResourceGroup2'
cli.azure.cli.command_modules.vm._validators: storage profile 'StorageProfile.ManagedCustomImage'
cli.azure.cli.core.commands.client_factory: Getting management service client client_type=ComputeManagementClient
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5
msal.authority: openid_config("https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/kerberos', 'tenant_region_scope': 'EU', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
msal.application: Broker enabled? True
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token_info: scopes=('https://management.core.windows.net//.default',), options={}
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: ecb1b914-1e0a-4242-9aa5-e054a5c3af35
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/d241ff2e-edaf-423f-9c02-e23f899ea249/resourceGroups/rg-devops-packer/providers/Microsoft.Compute/galleries/DevOpsGallery/images/WindowsServerBase?api-version=2021-10-01'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies:     'Accept': 'application/json'
cli.azure.cli.core.sdk.policies:     'x-ms-client-request-id': '1973d035-15d8-11f0-9dc0-a08069fe48da'
cli.azure.cli.core.sdk.policies:     'CommandName': 'vm create'
cli.azure.cli.core.sdk.policies:     'ParameterSetName': '--resource-group --name --image --debug'
cli.azure.cli.core.sdk.policies:     'User-Agent': 'AZURECLI/2.71.0 (MSI) azsdk-python-core/1.31.0 Python/3.12.8 (Windows-11-10.0.26100-SP0)'
cli.azure.cli.core.sdk.policies:     'Authorization': '*****'
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/d241ff2e-edaf-423f-9c02-e23f899ea249/resourceGroups/rg-devops-packer/providers/Microsoft.Compute/galleries/DevOpsGallery/images/WindowsServerBase?api-version=2021-10-01 HTTP/1.1" 200 891
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies:     'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies:     'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies:     'Content-Length': '891'
cli.azure.cli.core.sdk.policies:     'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies:     'Expires': '-1'
cli.azure.cli.core.sdk.policies:     'x-ms-ratelimit-remaining-resource': 'Microsoft.Compute/GetGalleryImage3Min;599,Microsoft.Compute/GetGalleryImage30Min;2997'
cli.azure.cli.core.sdk.policies:     'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies:     'x-ms-served-by': '7601eb06-c790-419f-91c0-e63f0e1fe446_133577920816677705,7601eb06-c790-419f-91c0-e63f0e1fe446_133577920816677705'
cli.azure.cli.core.sdk.policies:     'x-ms-request-id': '7fe6f37a-8b4a-49bb-ae34-f048d1d06bb0'
cli.azure.cli.core.sdk.policies:     'x-ms-ratelimit-remaining-subscription-reads': '249'
cli.azure.cli.core.sdk.policies:     'x-ms-ratelimit-remaining-subscription-global-reads': '3749'
cli.azure.cli.core.sdk.policies:     'x-ms-correlation-request-id': 'ee4439f0-7b4a-43c5-8287-0099da2058b4'
cli.azure.cli.core.sdk.policies:     'x-ms-routing-request-id': 'SWEDENCENTRAL:20250410T065035Z:ee4439f0-7b4a-43c5-8287-0099da2058b4'
cli.azure.cli.core.sdk.policies:     'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies:     'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies:     'X-MSEdge-Ref': 'Ref A: 923811EEC9BA4057AA57F7427A394D94 Ref B: GVX211060218040 Ref C: 2025-04-10T06:50:34Z'
cli.azure.cli.core.sdk.policies:     'Date': 'Thu, 10 Apr 2025 06:50:34 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {
  "name": "WindowsServerBase",
  "id": "/subscriptions/d241ff2e-edaf-423f-9c02-e23f899ea249/resourceGroups/rg-devops-packer/providers/Microsoft.Compute/galleries/DevOpsGallery/images/WindowsServerBase",
  "type": "Microsoft.Compute/galleries/images",
  "location": "northeurope",
  "tags": {},
  "properties": {
    "hyperVGeneration": "V2",
    "architecture": "x64",
    "features": [
      {
        "name": "IsAcceleratedNetworkSupported",
        "value": "True"
      }
    ],
    "osType": "Windows",
    "osState": "Generalized",
    "identifier": {
      "publisher": "Griffeye",
      "offer": "WindowsServer",
      "sku": "WindowsServerBase"
    },
    "recommended": {
      "vCPUs": {
        "min": 1,
        "max": 16
      },
      "memory": {
        "min": 1,
        "max": 32
      }
    },
    "provisioningState": "Succeeded"
  }
}
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.authority: Initializing with Entra authority: https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5
msal.authority: openid_config("https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/v2.0/.well-known/openid-configuration") = {'token_endpoint': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/oauth2/v2.0/token', 'token_endpoint_auth_methods_supported': ['client_secret_post', 'private_key_jwt', 'client_secret_basic'], 'jwks_uri': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/discovery/v2.0/keys', 'response_modes_supported': ['query', 'fragment', 'form_post'], 'subject_types_supported': ['pairwise'], 'id_token_signing_alg_values_supported': ['RS256'], 'response_types_supported': ['code', 'id_token', 'code id_token', 'id_token token'], 'scopes_supported': ['openid', 'profile', 'email', 'offline_access'], 'issuer': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/v2.0', 'request_uri_parameter_supported': False, 'userinfo_endpoint': 'https://graph.microsoft.com/oidc/userinfo', 'authorization_endpoint': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/oauth2/v2.0/authorize', 'device_authorization_endpoint': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/oauth2/v2.0/devicecode', 'http_logout_supported': True, 'frontchannel_logout_supported': True, 'end_session_endpoint': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/oauth2/v2.0/logout', 'claims_supported': ['sub', 'iss', 'cloud_instance_name', 'cloud_instance_host_name', 'cloud_graph_host_name', 'msgraph_host', 'aud', 'exp', 'iat', 'auth_time', 'acr', 'nonce', 'preferred_username', 'name', 'tid', 'ver', 'at_hash', 'c_hash', 'email'], 'kerberos_endpoint': 'https://login.microsoftonline.com/76b1f6a0-bdb4-4d58-97a9-74b53cbc54a5/kerberos', 'tenant_region_scope': 'EU', 'cloud_instance_name': 'microsoftonline.com', 'cloud_graph_host_name': 'graph.windows.net', 'msgraph_host': 'graph.microsoft.com', 'rbac_url': 'https://pas.windows.net'}
msal.application: Broker enabled? True
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token: scopes=('https://management.core.windows.net//.default',), kwargs={}
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: 64aca272-b5ab-4455-8660-1331cc0bf50b
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/e1f83e20-913a-4978-9c81-bd1d8c2d4648/resourceGroups/rg-devops-packer/providers/Microsoft.Compute/galleries/DevOpsGallery/images/WindowsServerBase/versions?api-version=2024-03-03'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies:     'Accept': 'application/json'
cli.azure.cli.core.sdk.policies:     'x-ms-client-request-id': '1973d035-15d8-11f0-9dc0-a08069fe48da'
cli.azure.cli.core.sdk.policies:     'CommandName': 'vm create'
cli.azure.cli.core.sdk.policies:     'ParameterSetName': '--resource-group --name --image --debug'
cli.azure.cli.core.sdk.policies:     'User-Agent': 'AZURECLI/2.71.0 (MSI) azsdk-python-core/1.31.0 Python/3.12.8 (Windows-11-10.0.26100-SP0)'
cli.azure.cli.core.sdk.policies:     'Authorization': '*****'
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/e1f83e20-913a-4978-9c81-bd1d8c2d4648/resourceGroups/rg-devops-packer/providers/Microsoft.Compute/galleries/DevOpsGallery/images/WindowsServerBase/versions?api-version=2024-03-03 HTTP/1.1" 404 108
cli.azure.cli.core.sdk.policies: Response status: 404
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies:     'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies:     'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies:     'Content-Length': '108'
cli.azure.cli.core.sdk.policies:     'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies:     'Expires': '-1'
cli.azure.cli.core.sdk.policies:     'x-ms-failure-cause': 'gateway'
cli.azure.cli.core.sdk.policies:     'x-ms-request-id': 'd250762d-9479-4ecc-abd0-57bcf0dfe04f'
cli.azure.cli.core.sdk.policies:     'x-ms-correlation-request-id': 'd250762d-9479-4ecc-abd0-57bcf0dfe04f'
cli.azure.cli.core.sdk.policies:     'x-ms-routing-request-id': 'SWEDENCENTRAL:20250410T065035Z:d250762d-9479-4ecc-abd0-57bcf0dfe04f'
cli.azure.cli.core.sdk.policies:     'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies:     'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies:     'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies:     'X-MSEdge-Ref': 'Ref A: F683DA5D70A94D0287BF8A786BE3FC72 Ref B: GVX211060218060 Ref C: 2025-04-10T06:50:35Z'
cli.azure.cli.core.sdk.policies:     'Date': 'Thu, 10 Apr 2025 06:50:35 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"error":{"code":"ResourceGroupNotFound","message":"Resource group 'rg-devops-packer' could not be found."}}
cli.azure.cli.core.azclierror: Traceback (most recent call last):
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\knack/invocation.py", line 111, in _validation
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/commands/__init__.py", line 912, in _validate_cmd_level
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/vm/_validators.py", line 1537, in process_vm_create_namespace
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/command_modules/vm/_validators.py", line 523, in _validate_vm_create_storage_profile
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/aaz/_paging.py", line 87, in __next__
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/aaz/_paging.py", line 43, in __next__
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/aaz/_command.py", line 250, in executor_wrapper
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure\cli\command_modules\vm\aaz_compact\latest\sig\image_version\__cmds.py", line 946, in _execute_operations
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure\cli\command_modules\vm\aaz_compact\latest\sig\image_version\__cmds.py", line 971, in __call__
  File "D:\a\_work\1\s\build_scripts\windows\artifacts\cli\Lib\site-packages\azure/cli/core/aaz/_operation.py", line 324, in on_error
azure.core.exceptions.ResourceNotFoundError: (ResourceGroupNotFound) Resource group 'rg-devops-packer' could not be found.
Code: ResourceGroupNotFound
Message: Resource group 'rg-devops-packer' could not be found.

cli.azure.cli.core.azclierror: (ResourceGroupNotFound) Resource group 'rg-devops-packer' could not be found.
Code: ResourceGroupNotFound
Message: Resource group 'rg-devops-packer' could not be found.
az_command_data_logger: (ResourceGroupNotFound) Resource group 'rg-devops-packer' could not be found.
Code: ResourceGroupNotFound
Message: Resource group 'rg-devops-packer' could not be found.
cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x00000296AC21B6A0>]
az_command_data_logger: exit code: 2
cli.__main__: Command ran in 2.840 seconds (init: 0.361, invoke: 2.479)
telemetry.main: Begin splitting cli events and extra events, total events: 1
telemetry.client: Accumulated 0 events. Flush the clients.
telemetry.main: Finish splitting cli events and extra events, cli events: 1
telemetry.save: Save telemetry record of length 4073 in cache file under C:\Users\haldermo\.azure\telemetry\20250410085035823
telemetry.main: Begin creating telemetry upload process.
telemetry.process: Creating upload process: "C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe C:\Program Files\Microsoft SDKs\Azure\CLI2\Lib\site-packages\azure\cli\telemetry\__init__.pyc C:\Users\haldermo\.azure C:\Users\haldermo\.azure\telemetry\20250410085035823"
telemetry.process: Return from creating process 32376
telemetry.main: Finish creating telemetry upload process

Expected behavior

The vm should be created using the shared image gallery image definition specified.

Environment Summary

azure-cli 2.71.0

core 2.71.0 telemetry 1.1.0

Extensions: azure-devops 1.0.1 storage-mover 1.1.0

Dependencies: msal 1.31.2b1 azure-mgmt-resource 23.1.1

Python location 'C:\Program Files\Microsoft SDKs\Azure\CLI2\python.exe' Config directory 'C:\Users\haldermo.azure' Extensions directory 'C:\Users\haldermo.azure\cliextensions'

Python (Windows) 3.12.8 (tags/v3.12.8:2dc476b, Dec 3 2024, 19:30:04) [MSC v.1942 64 bit (AMD64)]

Legal docs and information: aka.ms/AzureCliLegal

Your CLI is up-to-date.

Additional context

No response

Apr 10 '25 07:04 HAldermo-Magnet

Thank you for opening this issue, we will look into it.

Apr 10 '25 07:04 yonzhan

Here are some similar issues that might help you. Please check if they can solve your problem.

#24704

Possible solution (Extracted from existing issue, might be incorrect; please verify carefully)

Please note that you cannot access resource groups under another subscription. It is recommended that you add parameter --subscription Subscription1 when executing the command az vm create, which will allow you to temporarily switch back to Subscription1 when creating the VM.

Reference:

https://github.com/azure/azure-cli/issues/24704#issuecomment-1340287512

Powered by issue-sentinel

Apr 10 '25 07:04 github-actions[bot]

Here are some similar issues that might help you. Please check if they can solve your problem.

#24704

Possible solution (Extracted from existing issue, might be incorrect; please verify carefully)

Please note that you cannot access resource groups under another subscription. It is recommended that you add parameter --subscription Subscription1 when executing the command az vm create, which will allow you to temporarily switch back to Subscription1 when creating the VM.

Reference:

https://github.com/azure/azure-cli/issues/24704#issuecomment-1340287512

Powered by issue-sentinel

Apr 10 '25 07:04 github-actions[bot]

Thank you for opening this issue, we will look into it.

@yonzhan Thanks!

Just verified this affects Azure CLI 2.71.0. Downgrading to 2.66.1 resolves the issue.

Apr 10 '25 07:04 HAldermo-Magnet

I also have similar problem when creating vm with an image from the same subscription. On 2.71.0 "az vm create" throws: {"code":"InvalidParameter","target":"securityProfile.securityType","message":"The value of parameter securityProfile.securityType is invalid."}

For now I was using default value, however tried to set it up manually (--security-type Standard) but no luck. Downgrading to 2.70.0 resolved the problem.

Thanks JJ

Apr 10 '25 08:04 jakubjaworski-opengi

Same problem with VMSS Flex with --subscription parameter. 2.71.

Apr 22 '25 14:04 smereczynski

could you please help to confirm if this private package could fix this issue?

Apr 24 '25 06:04 yanzhudd

could you please help to confirm if this private package could fix this issue?

@yanzhudd It seems I don't have access to that link I'm affraid.

Apr 24 '25 08:04 HAldermo-Magnet

Hi @HAldermo-Magnet please try this: pypi.zip

Apr 24 '25 09:04 yanzhudd

downgraded to 2.70 and it again works for me...

winget uninstall Microsoft.AzureCLI winget install Microsoft.AzureCLI --version 2.70.0

Apr 25 '25 21:04 mtzwn

This issue will be fixed on 05-19 with the new version 2.73.0.

Apr 27 '25 07:04 yanzhudd

I can confirm: it works now with 2.73.0.

May 19 '25 08:05 smereczynski

Same problem with az stack-hci-vm create --image as well on version v2.80.0

Dec 09 '25 17:12 faizan-younus