Release 2.89.0 breaks creating a firewall rule in a MySQL Flexible Server

[bblommers]

Describe the bug

Attempting to create a Firewall Rule results in a InternalServerError

Related command

az mysql flexible-server firewall-rule create

Errors

cli.azure.cli.core.azclierror: (InternalServerError) An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'
Code: InternalServerError
Message: An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'
az_command_data_logger: (InternalServerError) An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'
Code: InternalServerError
Message: An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'

Issue script & Debug output

export RESOURCE_GROUP_NAME="rg-mysql-bats-${RANDOM}"
export SERVER_NAME="mysql-bats-${RANDOM}"
export LOCATION="westeurope"
export ADMIN_LOGIN="mysqladmin"
export ADMIN_PASSWORD="P@ssw0rd2024!"
export FIREWALL_RULE_NAME="allow-myip"
export START_IP="203.0.113.10"
export END_IP="203.0.113.10"

az group create --name "$RESOURCE_GROUP_NAME" --location "$LOCATION"

az mysql flexible-server create \
        --name "$SERVER_NAME" \
        --resource-group "$RESOURCE_GROUP_NAME" \
        --location "$LOCATION" \
        --admin-user "$ADMIN_LOGIN" \
        --admin-password "$ADMIN_PASSWORD" \
        --sku-name "Standard_B1ms" \
        --tier "Burstable" \
        --version "8.0.21" \
        --storage-size "32" \
        --public-access "Enabled"

az mysql flexible-server firewall-rule create \
        --resource-group "$RESOURCE_GROUP_NAME" \
        --name "$SERVER_NAME" \
        --rule-name "$FIREWALL_RULE_NAME" \
        --start-ip-address "$START_IP" \
        --end-ip-address "$END_IP"

Full Debug Output

cli.knack.cli: Command arguments: ['mysql', 'flexible-server', 'firewall-rule', 'create', '--resource-group', 'rg-mysql-bats-6030', '--name', 'mysql-bats-1830', '--rule-name', 'allow-myip', '--start-ip-address', '203.0.113.10', '--end-ip-address', '203.0.113.10', '--debug']
cli.knack.cli: init debug log:
Enable color in terminal.
cli.knack.cli: Event: Cli.PreExecute []
cli.knack.cli: Event: CommandParser.OnGlobalArgumentsCreate [<function CLILogging.on_global_arguments at 0x79d8662a6da0>, <function OutputProducer.on_global_arguments at 0x79d8661d00f0>, <function CLIQuery.on_global_arguments at 0x79d865f9e820>]
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableCreate []
cli.azure.cli.core: Using packaged command index for profile 'latest'.
cli.azure.cli.core: Found installed extension 'aks-preview' (azext_aks_preview).
cli.azure.cli.core: Blending packaged core index with local extension index.
cli.azure.cli.core: Modules found from index for 'mysql': ['azure.cli.command_modules.mysql', 'azure.cli.command_modules.rdbms']
cli.azure.cli.core: Loading command modules...
cli.azure.cli.core: Name Load Time Groups Commands
cli.azure.cli.core: mysql 0.258 17 59
cli.azure.cli.core: rdbms 0.034 22 90
cli.azure.cli.core: Loaded command modules:
cli.azure.cli.core: Total (2) 0.293 39 149
cli.azure.cli.core: These extensions are not installed and will be skipped: ['azext_ai_examples', 'azext_next']
cli.azure.cli.core: Loading extensions:
cli.azure.cli.core: Name Load Time Groups Commands Directory
cli.azure.cli.core: Total (0) 0.000 0 0
cli.azure.cli.core: Loaded 38 groups, 149 commands.
cli.azure.cli.core: Found a match in the command table.
cli.azure.cli.core: Raw command : mysql flexible-server firewall-rule create
cli.azure.cli.core: Command table: mysql flexible-server firewall-rule create
cli.knack.cli: Event: CommandInvoker.OnPreCommandTableTruncate [<function AzCliLogging.init_command_file_logging at 0x79d865f74040>]
cli.azure.cli.core.azlogging: metadata file logging enabled - writing logs to '/home/.../.azure/commands/2026-08-04.09-51-00.mysql_flexible-server_firewall-rule_create.72138.log'.
az_command_data_logger: command args: mysql flexible-server firewall-rule create --resource-group {} --name {} --rule-name {} --start-ip-address {} --end-ip-address {} --debug
cli.knack.cli: Event: CommandInvoker.OnPreArgumentLoad [<function register_global_subscription_argument..add_subscription_parameter at 0x79d865d4d900>]
cli.knack.cli: Event: CommandInvoker.OnPostArgumentLoad []
cli.knack.cli: Event: CommandInvoker.OnPostCommandTableCreate [<function register_ids_argument..add_ids_arguments at 0x79d865d4d9b0>, <function register_global_policy_argument..add_global_policy_argument at 0x79d865d6cbf0>, <function register_cache_arguments..add_cache_arguments at 0x79d865d6cca0>, <function register_upcoming_breaking_change_info..update_breaking_change_info at 0x79d865d6cd50>]
cli.knack.cli: Event: CommandInvoker.OnCommandTableLoaded []
cli.knack.cli: Event: CommandInvoker.OnPreParseArgs []
cli.knack.cli: Event: CommandInvoker.OnPostParseArgs [<function OutputProducer.handle_output_argument at 0x79d8661d01a0>, <function CLIQuery.handle_query_parameter at 0x79d865f9e8d0>, <function register_ids_argument..parse_ids_arguments at 0x79d865d6cb40>]
cli.azure.cli.core.commands.client_factory: Getting management service client client_type=MySQLManagementClient
cli.azure.cli.core.auth.persistence: build_persistence: location='/home/.../.azure/msal_token_cache.json', encrypt=False
cli.azure.cli.core.auth.binary_cache: load: /home/.../.azure/msal_http_cache.bin
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.application: Broker enabled? None
cli.azure.cli.core.commands.client_factory: Getting management service client client_type=MySQLManagementClient
urllib3.util.retry: Converted retries value: 1 -> Retry(total=1, connect=None, read=None, redirect=None, status=None)
msal.application: Broker enabled? None
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token_info: scopes=('https://management.core.windows.net//.default',), options={}
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: 2dc3139e-1070-43a8-a9a2-3bc480022780
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830?api-version=2025-06-01-preview'
cli.azure.cli.core.sdk.policies: Request method: 'GET'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '3bf3e886-8fd9-11f1-8000-44fa6657c1c3'
cli.azure.cli.core.sdk.policies: 'CommandName': 'mysql flexible-server firewall-rule create'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--resource-group --name --rule-name --start-ip-address --end-ip-address --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.89.0 (DEB) azsdk-python-core/1.39.0 Python/3.14.6 (Linux-6.17.0-41-generic-x86_64-with-glibc2.42)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: This request has no body
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "GET /subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830?api-version=2025-06-01-preview HTTP/1.1" 200 1320
cli.azure.cli.core.sdk.policies: Response status: 200
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '1320'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'aeae1b9c-35ea-4c4b-a8fa-609b0c9da196'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-reads': '249'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-reads': '3749'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '0d3740fb-e4cd-430e-bd6c-eaa010570cca'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260804T095101Z:0d3740fb-e4cd-430e-bd6c-eaa010570cca'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: FD33C6EC2D564159A571D55D7990830F Ref B: MRS211050313021 Ref C: 2026-08-04T09:51:00Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Tue, 04 Aug 2026 09:51:00 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: {"sku":{"name":"Standard_B1ms","tier":"Burstable"},"systemData":{"createdAt":"2026-08-04T09:47:36.2355914Z"},"properties":{"administratorLogin":"mysqladmin","storage":{"storageSizeGB":32,"iops":396,"autoGrow":"Enabled","autoIoScaling":"Enabled","storageSku":"Premium_LRS","logOnDisk":"Disabled","storageRedundancy":"LocalRedundancy"},"version":"8.0.21","fullVersion":"8.0.46","state":"Ready","fullyQualifiedDomainName":"mysql-bats-1830.mysql.database.azure.com","availabilityZone":"1","maintenanceWindow":{"batchOfMaintenance":"Default","customWindow":"Disabled","dayOfWeek":0,"startHour":0,"startMinute":0},"replicationRole":"None","replicaCapacity":10,"network":{"publicNetworkAccess":"Enabled"},"backup":{"backupRetentionDays":7,"backupIntervalHours":24,"geoRedundantBackup":"Disabled","earliestRestoreDate":"2026-08-04T09:57:36.2355914+00:00"},"highAvailability":{"mode":"Disabled","state":"NotEnabled","standbyAvailabilityZone":"","replicationMode":"BinaryLog"},"privateEndpointConnections":[],"maintenancePolicy":{"patchStrategy":"Regular"},"databasePort":3306},"location":"West Europe","id":"/subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830","name":"mysql-bats-1830","type":"Microsoft.DBforMySQL/flexibleServers"}
cli.azure.cli.core.auth.credential_adaptor: CredentialAdaptor.get_token_info: scopes=('https://management.core.windows.net//.default',), options={}
cli.azure.cli.core.auth.msal_credentials: UserCredential.acquire_token: scopes=['https://management.core.windows.net//.default'], claims_challenge=None, kwargs={}
msal.application: Cache hit an AT
msal.telemetry: Generate or reuse correlation_id: 0a23b759-f381-43ca-8c3f-87f361acfa25
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830/firewallRules/allow-myip?api-version=2025-06-01-preview'
cli.azure.cli.core.sdk.policies: Request method: 'PUT'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Content-Length': '92'
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '3bf3e886-8fd9-11f1-8000-44fa6657c1c3'
cli.azure.cli.core.sdk.policies: 'CommandName': 'mysql flexible-server firewall-rule create'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--resource-group --name --rule-name --start-ip-address --end-ip-address --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.89.0 (DEB) azsdk-python-core/1.39.0 Python/3.14.6 (Linux-6.17.0-41-generic-x86_64-with-glibc2.42)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: {"name": "allow-myip", "start_ip_address": "203.0.113.10", "end_ip_address": "203.0.113.10"}
urllib3.connectionpool: Starting new HTTPS connection (1): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "PUT /subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830/firewallRules/allow-myip?api-version=2025-06-01-preview HTTP/1.1" 500 162
cli.azure.cli.core.sdk.policies: Response status: 500
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '162'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '2dfcb2db-796f-44ee-a2de-1f1b0b5f8f4a'
cli.azure.cli.core.sdk.policies: 'x-ms-failure-cause': 'service'
cli.azure.cli.core.sdk.policies: 'x-ms-operation-identifier': '[REDACTED:cloud_identifier],[REDACTED:cloud_identifier]/westeurope/9e8d3205-4a2b-4539-b8ee-d2fa448702ae'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-writes': '199'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-writes': '2999'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': 'b5a1ee96-eadf-485f-b62f-44eed2c3362a'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260804T095102Z:b5a1ee96-eadf-485f-b62f-44eed2c3362a'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 8D1B4CBDB3FA4434B7356008DCA4DA6D Ref B: MRS211050618031 Ref C: 2026-08-04T09:51:01Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Tue, 04 Aug 2026 09:51:01 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: Body is streamable
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830/firewallRules/allow-myip?api-version=2025-06-01-preview'
cli.azure.cli.core.sdk.policies: Request method: 'PUT'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Content-Length': '92'
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '3bf3e886-8fd9-11f1-8000-44fa6657c1c3'
cli.azure.cli.core.sdk.policies: 'CommandName': 'mysql flexible-server firewall-rule create'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--resource-group --name --rule-name --start-ip-address --end-ip-address --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.89.0 (DEB) azsdk-python-core/1.39.0 Python/3.14.6 (Linux-6.17.0-41-generic-x86_64-with-glibc2.42)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: {"name": "allow-myip", "start_ip_address": "203.0.113.10", "end_ip_address": "203.0.113.10"}
urllib3.connectionpool: Starting new HTTPS connection (2): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "PUT /subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830/firewallRules/allow-myip?api-version=2025-06-01-preview HTTP/1.1" 500 162
cli.azure.cli.core.sdk.policies: Response status: 500
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '162'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '3b2d025d-eddb-4887-80a3-73dc2d8d9f65'
cli.azure.cli.core.sdk.policies: 'x-ms-failure-cause': 'service'
cli.azure.cli.core.sdk.policies: 'x-ms-operation-identifier': '[REDACTED:cloud_identifier],[REDACTED:cloud_identifier]/westeurope/26bf6f06-2a67-4ced-9875-82be601b5ed5'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-writes': '199'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-writes': '2999'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '78ff09ec-ed88-4a8a-9cd5-c3c9f6439943'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260804T095103Z:78ff09ec-ed88-4a8a-9cd5-c3c9f6439943'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 29D010BB971243D0AA974A7B953D6E78 Ref B: MRS211050315023 Ref C: 2026-08-04T09:51:02Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Tue, 04 Aug 2026 09:51:02 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: Body is streamable
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830/firewallRules/allow-myip?api-version=2025-06-01-preview'
cli.azure.cli.core.sdk.policies: Request method: 'PUT'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Content-Length': '92'
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '3bf3e886-8fd9-11f1-8000-44fa6657c1c3'
cli.azure.cli.core.sdk.policies: 'CommandName': 'mysql flexible-server firewall-rule create'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--resource-group --name --rule-name --start-ip-address --end-ip-address --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.89.0 (DEB) azsdk-python-core/1.39.0 Python/3.14.6 (Linux-6.17.0-41-generic-x86_64-with-glibc2.42)'
cli.azure.cli.core.sdk.policies: 'Authorization': ''
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: {"name": "allow-myip", "start_ip_address": "203.0.113.10", "end_ip_address": "203.0.113.10"}
urllib3.connectionpool: Starting new HTTPS connection (3): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "PUT /subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830/firewallRules/allow-myip?api-version=2025-06-01-preview HTTP/1.1" 500 162
cli.azure.cli.core.sdk.policies: Response status: 500
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '162'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': 'd2937eac-1fdf-4616-84f4-7adae2856d6c'
cli.azure.cli.core.sdk.policies: 'x-ms-failure-cause': 'service'
cli.azure.cli.core.sdk.policies: 'x-ms-operation-identifier': '[REDACTED:cloud_identifier],[REDACTED:cloud_identifier]/westeurope/1651599f-9a0a-4a82-91eb-b594f36f41c2'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-writes': '199'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-writes': '2999'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '98a50abf-7f62-49d6-8468-2d59995f5f9c'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260804T095105Z:98a50abf-7f62-49d6-8468-2d59995f5f9c'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 615FC3FD0AB44C6A874CB8C2A44C701D Ref B: MRS211050313049 Ref C: 2026-08-04T09:51:05Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Tue, 04 Aug 2026 09:51:05 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: Body is streamable
cli.azure.cli.core.sdk.policies: Request URL: 'https://management.azure.com/subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830/firewallRules/allow-myip?api-version=2025-06-01-preview'
cli.azure.cli.core.sdk.policies: Request method: 'PUT'
cli.azure.cli.core.sdk.policies: Request headers:
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json'
cli.azure.cli.core.sdk.policies: 'Content-Length': '92'
cli.azure.cli.core.sdk.policies: 'Accept': 'application/json'
cli.azure.cli.core.sdk.policies: 'x-ms-client-request-id': '3bf3e886-8fd9-11f1-8000-44fa6657c1c3'
cli.azure.cli.core.sdk.policies: 'CommandName': 'mysql flexible-server firewall-rule create'
cli.azure.cli.core.sdk.policies: 'ParameterSetName': '--resource-group --name --rule-name --start-ip-address --end-ip-address --debug'
cli.azure.cli.core.sdk.policies: 'User-Agent': 'AZURECLI/2.89.0 (DEB) azsdk-python-core/1.39.0 Python/3.14.6 (Linux-6.17.0-41-generic-x86_64-with-glibc2.42)'
cli.azure.cli.core.sdk.policies: 'Authorization': '*****'
cli.azure.cli.core.sdk.policies: Request body:
cli.azure.cli.core.sdk.policies: {"name": "allow-myip", "start_ip_address": "203.0.113.10", "end_ip_address": "203.0.113.10"}
urllib3.connectionpool: Starting new HTTPS connection (4): management.azure.com:443
urllib3.connectionpool: https://management.azure.com:443 "PUT /subscriptions/.../resourceGroups/rg-mysql-bats-6030/providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830/firewallRules/allow-myip?api-version=2025-06-01-preview HTTP/1.1" 500 162
cli.azure.cli.core.sdk.policies: Response status: 500
cli.azure.cli.core.sdk.policies: Response headers:
cli.azure.cli.core.sdk.policies: 'Cache-Control': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Pragma': 'no-cache'
cli.azure.cli.core.sdk.policies: 'Content-Length': '162'
cli.azure.cli.core.sdk.policies: 'Content-Type': 'application/json; charset=utf-8'
cli.azure.cli.core.sdk.policies: 'Expires': '-1'
cli.azure.cli.core.sdk.policies: 'X-Content-Type-Options': 'nosniff'
cli.azure.cli.core.sdk.policies: 'x-ms-request-id': '8118799f-587f-4d37-9bbf-69a6e83c62c7'
cli.azure.cli.core.sdk.policies: 'x-ms-failure-cause': 'service'
cli.azure.cli.core.sdk.policies: 'x-ms-operation-identifier': '[REDACTED:cloud_identifier],[REDACTED:cloud_identifier]/westeurope/ade52d60-5657-492b-8d71-c7805b0e23d7'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-writes': '199'
cli.azure.cli.core.sdk.policies: 'x-ms-ratelimit-remaining-subscription-global-writes': '2999'
cli.azure.cli.core.sdk.policies: 'x-ms-correlation-request-id': '6092d664-d80f-4d76-a418-b25fe4011a10'
cli.azure.cli.core.sdk.policies: 'x-ms-routing-request-id': 'WESTEUROPE:20260804T095109Z:6092d664-d80f-4d76-a418-b25fe4011a10'
cli.azure.cli.core.sdk.policies: 'Strict-Transport-Security': 'max-age=31536000; includeSubDomains'
cli.azure.cli.core.sdk.policies: 'X-Cache': 'CONFIG_NOCACHE'
cli.azure.cli.core.sdk.policies: 'X-MSEdge-Ref': 'Ref A: 4066A28FC734481E9E8A94B394200E1D Ref B: MRS211050619027 Ref C: 2026-08-04T09:51:09Z'
cli.azure.cli.core.sdk.policies: 'Date': 'Tue, 04 Aug 2026 09:51:08 GMT'
cli.azure.cli.core.sdk.policies: Response content:
cli.azure.cli.core.sdk.policies: Body is streamable
cli.azure.cli.core.azclierror: Traceback (most recent call last):
File "/opt/az/lib/python3.14/site-packages/knack/cli.py", line 233, in invoke
cmd_result = self.invocation.execute(args)
File "/opt/az/lib/python3.14/site-packages/azure/cli/core/commands/init.py", line 677, in execute
raise ex
File "/opt/az/lib/python3.14/site-packages/azure/cli/core/commands/init.py", line 820, in _run_jobs_serially
results.append(self._run_job(expanded_arg, cmd_copy))
~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^
File "/opt/az/lib/python3.14/site-packages/azure/cli/core/commands/init.py", line 789, in _run_job
result = cmd_copy(params)
File "/opt/az/lib/python3.14/site-packages/azure/cli/core/commands/init.py", line 335, in call
return self.handler(*args, **kwargs)
~~~~~~~~~~~~^^^^^^^^^^^^^^^^^
File "/opt/az/lib/python3.14/site-packages/azure/cli/core/commands/command_operation.py", line 120, in handler
return op(**command_args)
File "/opt/az/lib/python3.14/site-packages/azure/cli/command_modules/mysql/custom.py", line 132, in firewall_rule_create_func
return client.begin_create_or_update(
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~^
resource_group_name,
^^^^^^^^^^^^^^^^^^^^
server_name,
^^^^^^^^^^^^
firewall_rule_name,
^^^^^^^^^^^^^^^^^^^
parameters)
^^^^^^^^^^^
File "/opt/az/lib/python3.14/site-packages/azure/core/tracing/decorator.py", line 119, in wrapper_use_tracer
return func(*args, **kwargs)
File "/opt/az/lib/python3.14/site-packages/azure/mgmt/mysqlflexibleservers/operations/_operations.py", line 8216, in begin_create_or_update
raw_result = self._create_or_update_initial(
resource_group_name=resource_group_name,
...<7 lines>...
**kwargs
)
File "/opt/az/lib/python3.14/site-packages/azure/mgmt/mysqlflexibleservers/operations/_operations.py", line 8069, in _create_or_update_initial
raise HttpResponseError(response=response, model=error, error_format=ARMErrorFormat)
azure.core.exceptions.HttpResponseError: (InternalServerError) An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'
Code: InternalServerError
Message: An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'

cli.azure.cli.core.azclierror: (InternalServerError) An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'
Code: InternalServerError
Message: An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'
az_command_data_logger: (InternalServerError) An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'
Code: InternalServerError
Message: An unexpected error occured while processing the request. Tracking ID: '8118799f-587f-4d37-9bbf-69a6e83c62c7'
cli.knack.cli: Event: Cli.PostExecute [<function AzCliLogging.deinit_cmd_metadata_logging at 0x79d865f74300>]
az_command_data_logger: exit code: 1
cli.main: Command ran in 9.668 seconds (init: 0.101, invoke: 9.567)
telemetry.main: Begin splitting cli events and extra events, total events: 1
telemetry.main: Finish splitting cli events and extra events, cli events: 1
telemetry.save: Save telemetry record of length 4498 in cache file under /home/.../.azure/telemetry/20260804095109790
telemetry.main: Begin creating telemetry upload process.
telemetry.process: Creating upload process: "/opt/az/bin/python3 /opt/az/lib/python3.14/site-packages/azure/cli/telemetry/init.py /home/.../.azure /home/.../.azure/telemetry/20260804095109790"
telemetry.process: Return from creating process 72165
telemetry.main: Finish creating telemetry upload process.

Expected behavior

No error. Note that this used to work in 2.88.0

Environment Summary

azure-cli 2.89.0

core 2.89.0
telemetry 1.1.0

Extensions:
aks-preview 21.0.0b13
application-insights 1.2.3
cdn 1.0.0b2

Dependencies:
msal 1.36.0
azure-mgmt-resource 24.0.0

Python location '/opt/az/bin/python3'
Config directory '/home/.../.azure'
Extensions directory '/home/.../.azure/cliextensions'

Python (Linux) 3.14.6 (main, Jul 28 2026, 12:34:03) [GCC 13.3.0]

Legal docs and information: aka.ms/AzureCliLegal

Your CLI is up-to-date.

Additional context

The PUT request sends a different body compared to the previous release, which I assume is the problem:

PUT .../providers/Microsoft.DBforMySQL/flexibleServers/mysql-bats-1830/firewallRules/allow-myip?api-version=2025-06-01-preview

Release 2.88.0 sent this body:

{
    "properties": {
        "startIpAddress": "203.0.113.10",
        "endIpAddress": "203.0.113.10"
    }
}

Release 2.89.0 sends this body:

{
    "name": "allow-myip",
    "start_ip_address": "203.0.113.10",
    "end_ip_address": "203.0.113.10"
}

[yonzhan]

Thank you for opening this issue, we will look into it.