azure-deploy-cli 1.0.5__tar.gz → 1.1.1__tar.gz

{azure_deploy_cli-1.0.5 → azure_deploy_cli-1.1.1}/.github/workflows/1-3-release.yaml

@@ -63,7 +63,7 @@ jobs:
           python-version: '3.11'
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v3
+        uses: astral-sh/setup-uv@v7
         with:
           enable-cache: true
 

{azure_deploy_cli-1.0.5 → azure_deploy_cli-1.1.1}/.github/workflows/2-build.yaml

@@ -17,7 +17,7 @@ jobs:
           python-version: '3.11'
 
       - name: Install uv
-        uses: astral-sh/setup-uv@v3
+        uses: astral-sh/setup-uv@v7
         with:
           enable-cache: true
 

{azure_deploy_cli-1.0.5 → azure_deploy_cli-1.1.1}/CHANGELOG.md

@@ -1,3 +1,14 @@
+## [1.1.1] - 2026-01-31
+
+### 💼 Other
+
+- *(dep)* Bump astral-sh/setup-uv in the dependencies group (#31)
+- *(dep)* Bump the dependencies group across 1 directory with 5 updates (#33)
+## [1.1.0] - 2026-01-31
+
+### 🚀 Features
+
+- Added allowed ip support (#42)
 ## [1.0.5] - 2026-01-29
 
 ### 🐛 Bug Fixes

{azure_deploy_cli-1.0.5 → azure_deploy_cli-1.1.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: azure-deploy-cli
-Version: 1.0.5
+Version: 1.1.1
 Summary: Python CLI for Azure deployment automation - identity, roles, and container apps management
 Author-email: decewei <celinew1221@gmail.com>
 License: Mozilla Public License Version 2.0
@@ -400,15 +400,15 @@ Requires-Dist: python-dotenv==1.2.1
 Requires-Dist: pydantic==2.12.5
 Requires-Dist: PyYAML==6.0.3
 Provides-Extra: dev
-Requires-Dist: ruff==0.14.10; extra == "dev"
+Requires-Dist: ruff==0.14.14; extra == "dev"
 Requires-Dist: mypy==1.19.1; extra == "dev"
 Requires-Dist: pytest==9.0.2; extra == "dev"
 Requires-Dist: pytest-asyncio==1.3.0; extra == "dev"
-Requires-Dist: coverage==7.13.1; extra == "dev"
+Requires-Dist: coverage==7.13.2; extra == "dev"
 Requires-Dist: pytest-cov==7.0.0; extra == "dev"
-Requires-Dist: commitizen==4.11.0; extra == "dev"
-Requires-Dist: pre-commit==4.1.0; extra == "dev"
-Requires-Dist: types-setuptools==80.9.0.20251223; extra == "dev"
+Requires-Dist: commitizen==4.12.1; extra == "dev"
+Requires-Dist: pre-commit==4.5.1; extra == "dev"
+Requires-Dist: types-setuptools==80.10.0.20260124; extra == "dev"
 Requires-Dist: types-PyYAML==6.0.12.20250915; extra == "dev"
 Dynamic: license-file
 

{azure_deploy_cli-1.0.5 → azure_deploy_cli-1.1.1}/pyproject.toml

@@ -37,15 +37,15 @@ dependencies = [
 
 [project.optional-dependencies]
 dev = [
-    "ruff==0.14.10",
+    "ruff==0.14.14",
     "mypy==1.19.1",
     "pytest==9.0.2",
     "pytest-asyncio==1.3.0",
-    "coverage==7.13.1",
+    "coverage==7.13.2",
     "pytest-cov==7.0.0",
-    "commitizen==4.11.0",
-    "pre-commit==4.1.0",
-    "types-setuptools==80.9.0.20251223",
+    "commitizen==4.12.1",
+    "pre-commit==4.5.1",
+    "types-setuptools==80.10.0.20260124",
     "types-PyYAML==6.0.12.20250915",
 ]
 

{azure_deploy_cli-1.0.5 → azure_deploy_cli-1.1.1}/src/azure_deploy_cli/_version.py

@@ -28,7 +28,7 @@ version_tuple: VERSION_TUPLE
 commit_id: COMMIT_ID
 __commit_id__: COMMIT_ID
 
-__version__ = version = '1.0.5'
-__version_tuple__ = version_tuple = (1, 0, 5)
+__version__ = version = '1.1.1'
+__version_tuple__ = version_tuple = (1, 1, 1)
 
-__commit_id__ = commit_id = 'g13bdfd4ee'
+__commit_id__ = commit_id = 'g98cecd474'

{azure_deploy_cli-1.0.5 → azure_deploy_cli-1.1.1}/src/azure_deploy_cli/aca/aca_cli.py

@@ -6,6 +6,7 @@ from pathlib import Path
 from typing import Any
 
 from azure.mgmt.appcontainers import ContainerAppsAPIClient
+from azure.mgmt.appcontainers.models import IpSecurityRestrictionRule
 
 from ..identity.managed_identity import create_or_get_user_identity
 from ..identity.role import assign_role_by_files
@@ -62,7 +63,9 @@ def _label_weight_pair(pair_str: str) -> tuple[str, int]:
     return (label, weight)
 
 
-def _convert_label_traffic_args(label_traffic_list: list[tuple[str, int]]) -> dict[str, int]:
+def _convert_label_traffic_args(
+    label_traffic_list: list[tuple[str, int]],
+) -> dict[str, int]:
     """
     Convert list of (label, weight) tuples to dictionary.
 
@@ -153,6 +156,19 @@ def cli_deploy(args: Any) -> None:
         if not env:
             raise ValueError("Cannot create container app env")
 
+        ip_rules: list[IpSecurityRestrictionRule] = []
+        if args.allowed_ips:
+            for name, cidr_ranges in args.allowed_ips:
+                for idx, cidr_range in enumerate(cidr_ranges):
+                    rule = IpSecurityRestrictionRule(
+                        name=f"{name}-{idx + 1}",
+                        action="Allow",
+                        ip_address_range=cidr_range,
+                        description=f"Allowed {name} IP range",
+                    )
+                    ip_rules.append(rule)
+            logger.critical(f"Configured {len(ip_rules)} Allowed IP restriction rules.")
+
         logger.critical("Deploying new revision...")
         result = deploy_revision(
             client=container_apps_api_client,
@@ -179,6 +195,7 @@ def cli_deploy(args: Any) -> None:
                 secret_names=args.env_var_secrets or [],
                 user_identity=user_identity,
             ),
+            ip_rules=ip_rules,
         )
 
         if args.custom_domains:
@@ -430,6 +447,24 @@ def add_commands(subparsers: argparse._SubParsersAction) -> None:
         "(includes image names, cpu, memory, env_vars, probes, ingress, and scale settings)",
     )
 
+    def tuple_ip(value: str) -> tuple[str, list[str]]:
+        if "=" not in value:
+            raise argparse.ArgumentTypeError(
+                f"Invalid format: '{value}'. Expected format: Name=IP1,IP2/CIDR"
+            )
+        name, ranges = value.split("=")
+        cidr_ranges = [cidr.strip() for cidr in ranges.split(",") if cidr.strip()]
+        return name, cidr_ranges
+
+    deploy_parser.add_argument(
+        "--allowed-ips",
+        nargs="*",
+        required=True,
+        type=tuple_ip,
+        help="List of allowed IP addresses or CIDR ranges for IP restriction. "
+        + "e.g., Name=1.3.5.7/32,2.3.4.3/24 Name2=3.4.5.6/43",
+    )
+
     deploy_parser.set_defaults(func=cli_deploy)
 
     # Add update-traffic command

{azure_deploy_cli-1.0.5 → azure_deploy_cli-1.1.1}/src/azure_deploy_cli/aca/deploy_aca.py

@@ -20,6 +20,7 @@ from azure.mgmt.appcontainers.models import (
     ContainerResources,
     EnvironmentVar,
     Ingress,
+    IpSecurityRestrictionRule,
     LogAnalyticsConfiguration,
     ManagedEnvironment,
     ManagedServiceIdentity,
@@ -221,7 +222,12 @@ def build_container_images(
             source_full_image_name = get_aca_docker_image_name(
                 registry_server, container_config.image_name, container_config.existing_image_tag
             )
-            docker.pull_retag_and_push_image(source_full_image_name, target_full_image_name)
+            _login_to_acr(registry_server)
+            docker.pull_retag_and_push_image(
+                source_full_image_name,
+                target_full_image_name,
+                container_config.existing_image_platform,
+            )
             logger.success(f"Image retagged successfully to '{image_tag}'")
         elif container_config.dockerfile:
             logger.info(
@@ -259,6 +265,7 @@ def deploy_revision(
     min_replicas: int,
     max_replicas: int,
     secret_key_vault_config: SecretKeyVaultConfig,
+    ip_rules: list[IpSecurityRestrictionRule],
 ) -> RevisionDeploymentResult:
     """
     Deploy a new revision with multiple containers without updating traffic weights.
@@ -348,6 +355,7 @@ def deploy_revision(
         transport=ingress_transport,
         traffic=existing_traffic_weights,  # Preserve existing traffic
         custom_domains=existing_custom_domains,
+        ip_security_restrictions=ip_rules,
     )
 
     revision_name = generate_revision_name(container_app_name, revision_suffix, stage)

{azure_deploy_cli-1.0.5 → azure_deploy_cli-1.1.1}/src/azure_deploy_cli/aca/model.py

@@ -52,6 +52,9 @@ class ContainerConfig(BaseModel):
         default=None, description="List of probe configurations"
     )
     existing_image_tag: str | None = Field(default=None, description="Optional tag to retag from")
+    existing_image_platform: str | None = Field(
+        default=None, description="Optional platform for existing image pull"
+    )
     dockerfile: str | None = Field(default=None, description="Optional dockerfile path")
 
     def post_init(self):

{azure_deploy_cli-1.0.5 → azure_deploy_cli-1.1.1}/src/azure_deploy_cli/utils/docker.py

@@ -61,17 +61,22 @@ def push_image(full_image_name: str) -> None:
         raise RuntimeError("Docker push failed")
 
 
-def pull_image(full_image_name: str) -> None:
+def pull_image(full_image_name: str, platform: str | None = None) -> None:
     """
     Pull a Docker image from the registry.
 
     Args:
         full_image_name: Full image name including registry, repository, and tag
+        platform: Optional platform specification (e.g., "linux/amd64")
 
     Raises:
         RuntimeError: If the docker pull command fails
     """
-    returncode = _run_and_stream(["docker", "pull", full_image_name])
+    cmd = ["docker", "pull"]
+    if platform:
+        cmd.extend(["--platform", platform])
+    cmd.append(full_image_name)
+    returncode = _run_and_stream(cmd)
     if returncode != 0:
         raise RuntimeError("Docker pull failed")
 
@@ -95,6 +100,7 @@ def tag_image(source_image: str, target_image: str) -> None:
 def pull_retag_and_push_image(
     source_full_image_name: str,
     target_full_image_name: str,
+    platform: str | None = None,
 ) -> None:
     """
     Pull an existing image, retag it, and push to registry.
@@ -107,7 +113,7 @@ def pull_retag_and_push_image(
         RuntimeError: If the source image doesn't exist or operations fail
     """
     if not image_exists(source_full_image_name):
-        pull_image(source_full_image_name)
+        pull_image(source_full_image_name, platform)
 
     tag_image(source_full_image_name, target_full_image_name)
     push_image(target_full_image_name)

{azure_deploy_cli-1.0.5 → azure_deploy_cli-1.1.1}/src/azure_deploy_cli.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: azure-deploy-cli
-Version: 1.0.5
+Version: 1.1.1
 Summary: Python CLI for Azure deployment automation - identity, roles, and container apps management
 Author-email: decewei <celinew1221@gmail.com>
 License: Mozilla Public License Version 2.0
@@ -400,15 +400,15 @@ Requires-Dist: python-dotenv==1.2.1
 Requires-Dist: pydantic==2.12.5
 Requires-Dist: PyYAML==6.0.3
 Provides-Extra: dev
-Requires-Dist: ruff==0.14.10; extra == "dev"
+Requires-Dist: ruff==0.14.14; extra == "dev"
 Requires-Dist: mypy==1.19.1; extra == "dev"
 Requires-Dist: pytest==9.0.2; extra == "dev"
 Requires-Dist: pytest-asyncio==1.3.0; extra == "dev"
-Requires-Dist: coverage==7.13.1; extra == "dev"
+Requires-Dist: coverage==7.13.2; extra == "dev"
 Requires-Dist: pytest-cov==7.0.0; extra == "dev"
-Requires-Dist: commitizen==4.11.0; extra == "dev"
-Requires-Dist: pre-commit==4.1.0; extra == "dev"
-Requires-Dist: types-setuptools==80.9.0.20251223; extra == "dev"
+Requires-Dist: commitizen==4.12.1; extra == "dev"
+Requires-Dist: pre-commit==4.5.1; extra == "dev"
+Requires-Dist: types-setuptools==80.10.0.20260124; extra == "dev"
 Requires-Dist: types-PyYAML==6.0.12.20250915; extra == "dev"
 Dynamic: license-file
 

{azure_deploy_cli-1.0.5 → azure_deploy_cli-1.1.1}/src/azure_deploy_cli.egg-info/requires.txt

@@ -8,13 +8,13 @@ pydantic==2.12.5
 PyYAML==6.0.3
 
 [dev]
-ruff==0.14.10
+ruff==0.14.14
 mypy==1.19.1
 pytest==9.0.2
 pytest-asyncio==1.3.0
-coverage==7.13.1
+coverage==7.13.2
 pytest-cov==7.0.0
-commitizen==4.11.0
-pre-commit==4.1.0
-types-setuptools==80.9.0.20251223
+commitizen==4.12.1
+pre-commit==4.5.1
+types-setuptools==80.10.0.20260124
 types-PyYAML==6.0.12.20250915

{azure_deploy_cli-1.0.5 → azure_deploy_cli-1.1.1}/tests/test_retag_image.py

@@ -78,7 +78,7 @@ class TestRetagImage:
             "registry.azurecr.io/myapp:new-tag",
         )
 
-        mock_pull.assert_called_once_with("registry.azurecr.io/myapp:old-tag")
+        mock_pull.assert_called_once_with("registry.azurecr.io/myapp:old-tag", None)
         mock_tag.assert_called_once_with(
             "registry.azurecr.io/myapp:old-tag", "registry.azurecr.io/myapp:new-tag"
         )
@@ -168,6 +168,7 @@ class TestDeployRevisionWithRetag:
             min_replicas=1,
             max_replicas=3,
             secret_key_vault_config=mock_secret_config,
+            ip_rules=[],
         )
 
         # Verify build_images was called with container_configs
@@ -227,6 +228,7 @@ class TestDeployRevisionWithRetag:
                 min_replicas=1,
                 max_replicas=3,
                 secret_key_vault_config=mock_secret_config,
+                ip_rules=[],
             )
 
     @patch("azure_deploy_cli.aca.deploy_aca._wait_for_revision_activation")
@@ -291,6 +293,7 @@ class TestDeployRevisionWithRetag:
             min_replicas=1,
             max_replicas=3,
             secret_key_vault_config=mock_secret_config,
+            ip_rules=[],
         )
 
         # Verify build_images was called