APP config exporting key value pairs limitaion

Hey Hai, Deepanshu katara.

I appreciate your time and resposne.

I like the way/ approach you have mentioned.But wrt to the currrent scenario., we have a drawaback of dividing keypairs in two commands as part of export process.

Issue here ,as mentioned, I need to export & key pairs (suppose) . I will add first 4 in an az(command) and next three in second command. as mentioned in ticket, its trying to export 7 key value pairs into a single output file., the values obtained in the first command are over written the vales that are objained in the second command, valinishing all athe values that are writtten in previous Command.

If i tried to append them using a dummy file, its creating another configuration in the yaml file.,

Hey Hai., @MuthuKumaranMurugaachari-MSFT

I just have a concern., any idea about exporting the keys., with excluding some keys.,

suppose., if I have some 10 Keys in my app config., in my configmap., and i just want to exclude 3-4 keys., which are supersecrets., so., is there any way, we can tried them excluding while export process.

i tried using --query , but not working., instead asking for extra roles., where the same roles worked fine for normal exporting keys process.

workaround:
az appconfig kv export -n eastus2-highq-lab-appconfig -d file --path ./test12yaml --prefix /a/lab1sever1/ --separator "." --query "[?key!='/a/a/lab1sever1/ configmap.app.name']" --format yaml -y --resolve-keyvault

az appconfig kv list --name eastus2-highq-lab-appconfig --output json --query "[?key!='/a/lab1sever1/ configmap.app.name']" | jq 'map({(select(.contentType=="secret").key): .value, (select(.contentType!="secret").key): .value}) | add' > exported_keys.json

az appconfig kv list --name eastus2-highq-lab-appconfig --prefix /a/lab1sever1/ --query "[?contains(key, '/a/lab1sever1/ configmap.app.name') == `false`]" --output json --all | tee exported_keys.json

az appconfig kv export -n eastus2-highq-lab-appconfig -d file --path ./test.yaml --prefix "/a/lab1sever1/ " --separator "." --query "[?key!='/a/lab1authserver1zus1/configmap.app.name']" --format yaml --yes --resolve-keyvault

None of these are working.

apconfig list is running , but giving null values.

Any idea on this.
I would appreciate your quick response.!

Thanks in advance.!

Bodavula Sai Vamsi Mohan Krishna Quickly checking, I am able to use --query to exclude the values with az appconfig kv list -n <appservice> --query "[?key!='/sub1/rg2'].{key:key, value:value}". However, it doesn't seem to work for az appconfig kv export -n <appservice> -d file --path /test.json --format json --query "[?key!='/sub1/rg1']" in my test.

Will investigate further and let you know.

Bodavula Sai Vamsi Mohan Krishna The --query parameter is a global parameter in CLI and only applies to the displayed output. Hence, this is not applicable to export command the way you expect. However, in my test list command should work fine as below:

Key values:

Output

az appconfig kv list -n <name> --query "[?key!='/sub1/rg2'].{key:key, value:value}"
[
  {
    "key": ".appconfig.featureflag/Beta",
    "value": "{\"id\":\"Beta\",\"description\":\"\",\"enabled\":false,\"conditions\":{\"client_filters\":[]}}"
  },
  {
    "key": "/sub1/rg1",
    "value": "Test"
  }
]

If you still face the issue, I suggest applying the filter conditions one by one in your environment (after listing all) and validate the query.

Currently, you can filter the matches only based on --key with some prefix value or --label (if applicable for your scenario) in export command.

Hey Hai @MuthuKumaranMurugaachari-MSFT
Thanks for the response.

Yeah was able to list by applying excluding keys.
but ., its listing entire keys in the app config., suppose if i have some N number of keys with different prefixes., its listing all .Where as adding prefix to the query is not supported While using **List.
**
while using export., its expecting more permissions : //(Forbidden) The user, group or application 'appid=xxxxxxxxxx;oid=yyyyyyyyyy;numgroups=1;iss=https://sts.windows.net/zzzzzzz/' does not have secrets get permission on key vault 'eastus2Xyxxyx;location=eastus2'. For help resolving this issue, please see https://go.microsoft.com/fwlink/?linkid=2125287