az containerapp env certificate

Note

This command group has commands that are defined in both Azure CLI and at least one extension. Install each extension to benefit from its extended capabilities. Learn more about extensions.

Commands to manage certificates for the Container Apps environment.

Commands

Name	Description	Type	Status
az containerapp env certificate create	Create a managed certificate.	Core	Preview
az containerapp env certificate delete	Delete a certificate from the Container Apps environment.	Core	GA
az containerapp env certificate delete (containerapp extension)	Delete a certificate from the Container Apps environment.	Extension	GA
az containerapp env certificate list	List certificates for an environment.	Core	GA
az containerapp env certificate list (containerapp extension)	List certificates for an environment.	Extension	GA
az containerapp env certificate upload	Add or update a certificate.	Core	GA
az containerapp env certificate upload (containerapp extension)	Add or update a certificate.	Extension	GA

az containerapp env certificate create

Edit

Preview

This command is in preview and under development. Reference and support levels: https://aka.ms/CLI_refstatus

Create a managed certificate.

az containerapp env certificate create --hostname
                                       --name
                                       --resource-group
                                       --validation-method {CNAME, HTTP, TXT}
                                       [--certificate-name]

Examples

Create a managed certificate.

az containerapp env certificate create -g MyResourceGroup --name MyEnvironment --certificate-name MyCertificate --hostname MyHostname --validation-method CNAME

Required Parameters

--hostname

The custom domain name.

Property	Value
Parameter group:	Custom Domain Arguments

--name -n

Name of the Container Apps environment.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

--validation-method -v

Validation method of custom domain ownership.

Property	Value
Accepted values:	CNAME, HTTP, TXT

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--certificate-name -c

Name of the managed certificate which should be unique within the Container Apps environment.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

Property	Value
Default value:	False

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property	Value
Default value:	False

--output -o

Output format.

Property	Value
Default value:	json
Accepted values:	json, jsonc, none, table, tsv, yaml, yamlc

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property	Value
Default value:	False

az containerapp env certificate delete

Edit

Delete a certificate from the Container Apps environment.

az containerapp env certificate delete [--certificate]
                                       [--ids]
                                       [--location]
                                       [--name]
                                       [--resource-group]
                                       [--subscription]
                                       [--thumbprint]
                                       [--yes]

Examples

Delete a certificate from the Container Apps environment by certificate name

az containerapp env certificate delete -g MyResourceGroup --name MyEnvironment --certificate MyCertificateName

Delete a certificate from the Container Apps environment by certificate id

az containerapp env certificate delete -g MyResourceGroup --name MyEnvironment --certificate MyCertificateId

Delete all certificates that have a matching thumbprint from the Container Apps environment

az containerapp env certificate delete -g MyResourceGroup --name MyEnvironment --thumbprint MyCertificateThumbprint

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--certificate -c

Name or resource id of the certificate.

--ids

One or more resource IDs (space-delimited). It should be a complete resource ID containing all information of 'Resource Id' arguments. You should provide either --ids or other 'Resource Id' arguments.

Property	Value
Parameter group:	Resource Id Arguments

--location -l

Location of resource. Examples: eastus2, northeurope.

--name -n

Name of the Container Apps environment.

Property	Value
Parameter group:	Resource Id Arguments

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Property	Value
Parameter group:	Resource Id Arguments

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Property	Value
Parameter group:	Resource Id Arguments

--thumbprint -t

Thumbprint of the certificate.

--yes -y

Do not prompt for confirmation.

Property	Value
Default value:	False

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

Property	Value
Default value:	False

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property	Value
Default value:	False

--output -o

Output format.

Property	Value
Default value:	json
Accepted values:	json, jsonc, none, table, tsv, yaml, yamlc

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property	Value
Default value:	False

az containerapp env certificate delete (containerapp extension)

Delete a certificate from the Container Apps environment.

az containerapp env certificate delete [--certificate]
                                       [--ids]
                                       [--location]
                                       [--name]
                                       [--resource-group]
                                       [--subscription]
                                       [--thumbprint]
                                       [--yes]

Examples

Delete a certificate from the Container Apps environment by certificate name

az containerapp env certificate delete -g MyResourceGroup --name MyEnvironment --certificate MyCertificateName

Delete a certificate from the Container Apps environment by certificate id

az containerapp env certificate delete -g MyResourceGroup --name MyEnvironment --certificate MyCertificateId

Delete all certificates that have a matching thumbprint from the Container Apps environment

az containerapp env certificate delete -g MyResourceGroup --name MyEnvironment --thumbprint MyCertificateThumbprint

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--certificate -c

Name or resource id of the certificate.

--ids

Property	Value
Parameter group:	Resource Id Arguments

--location -l

Location of resource. Examples: eastus2, northeurope.

--name -n

Name of the Container Apps environment.

Property	Value
Parameter group:	Resource Id Arguments

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Property	Value
Parameter group:	Resource Id Arguments

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Property	Value
Parameter group:	Resource Id Arguments

--thumbprint -t

Thumbprint of the certificate.

--yes -y

Do not prompt for confirmation.

Property	Value
Default value:	False

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

Property	Value
Default value:	False

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property	Value
Default value:	False

--output -o

Output format.

Property	Value
Default value:	json
Accepted values:	json, jsonc, none, table, tsv, yaml, yamlc

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property	Value
Default value:	False

az containerapp env certificate list

Edit

List certificates for an environment.

az containerapp env certificate list --name
                                     --resource-group
                                     [--certificate]
                                     [--location]
                                     [--managed-certificates-only]
                                     [--private-key-certificates-only]
                                     [--thumbprint]

Examples

List certificates for an environment.

az containerapp env certificate list -g MyResourceGroup --name MyEnvironment

Show a certificate by certificate id.

az containerapp env certificate list -g MyResourceGroup --name MyEnvironment --certificate MyCertificateId

List certificates by certificate name.

az containerapp env certificate list -g MyResourceGroup --name MyEnvironment --certificate MyCertificateName

List certificates by certificate thumbprint.

az containerapp env certificate list -g MyResourceGroup --name MyEnvironment --thumbprint MyCertificateThumbprint

List managed certificates for an environment.

az containerapp env certificate list -g MyResourceGroup --name MyEnvironment --managed-certificates-only

List private key certificates for an environment.

az containerapp env certificate list -g MyResourceGroup --name MyEnvironment --private-key-certificates-only

Required Parameters

--name -n

Name of the Container Apps environment.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--certificate -c

Name or resource id of the certificate.

--location -l

Location of resource. Examples: eastus2, northeurope.

--managed-certificates-only -m

Preview

List managed certificates only.

Property	Value
Default value:	False

--private-key-certificates-only -p

Preview

List private-key certificates only.

Property	Value
Default value:	False

--thumbprint -t

Thumbprint of the certificate.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

Property	Value
Default value:	False

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property	Value
Default value:	False

--output -o

Output format.

Property	Value
Default value:	json
Accepted values:	json, jsonc, none, table, tsv, yaml, yamlc

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property	Value
Default value:	False

az containerapp env certificate list (containerapp extension)

List certificates for an environment.

az containerapp env certificate list --name
                                     --resource-group
                                     [--certificate]
                                     [--location]
                                     [--managed-certificates-only]
                                     [--private-key-certificates-only]
                                     [--thumbprint]

Examples

List certificates for an environment.

az containerapp env certificate list -g MyResourceGroup --name MyEnvironment

Show a certificate by certificate id.

az containerapp env certificate list -g MyResourceGroup --name MyEnvironment --certificate MyCertificateId

List certificates by certificate name.

az containerapp env certificate list -g MyResourceGroup --name MyEnvironment --certificate MyCertificateName

List certificates by certificate thumbprint.

az containerapp env certificate list -g MyResourceGroup --name MyEnvironment --thumbprint MyCertificateThumbprint

List managed certificates for an environment.

az containerapp env certificate list -g MyResourceGroup --name MyEnvironment --managed-certificates-only

List private key certificates for an environment.

az containerapp env certificate list -g MyResourceGroup --name MyEnvironment --private-key-certificates-only

Required Parameters

--name -n

Name of the Container Apps environment.

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--certificate -c

Name or resource id of the certificate.

--location -l

Location of resource. Examples: eastus2, northeurope.

--managed-certificates-only -m

List managed certificates only.

Property	Value
Default value:	False

--private-key-certificates-only -p

List private-key certificates only.

Property	Value
Default value:	False

--thumbprint -t

Thumbprint of the certificate.

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

Property	Value
Default value:	False

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property	Value
Default value:	False

--output -o

Output format.

Property	Value
Default value:	json
Accepted values:	json, jsonc, none, table, tsv, yaml, yamlc

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property	Value
Default value:	False

az containerapp env certificate upload

Edit

Add or update a certificate.

az containerapp env certificate upload --certificate-file
                                       [--certificate-name]
                                       [--ids]
                                       [--location]
                                       [--name]
                                       [--password]
                                       [--resource-group]
                                       [--show-prompt]
                                       [--subscription]

Examples

Add or update a certificate.

az containerapp env certificate upload -g MyResourceGroup --name MyEnvironment --certificate-file MyFilepath

Add or update a certificate with a user-provided certificate name.

az containerapp env certificate upload -g MyResourceGroup --name MyEnvironment --certificate-file MyFilepath --certificate-name MyCertificateName

Required Parameters

--certificate-file -f

The filepath of the .pfx or .pem file.

Property	Value
Parameter group:	Custom Domain Arguments

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--certificate-name -c

Name of the certificate which should be unique within the Container Apps environment.

--ids

Property	Value
Parameter group:	Resource Id Arguments

--location -l

Location of resource. Examples: eastus2, northeurope.

--name -n

Name of the Container Apps environment.

Property	Value
Parameter group:	Resource Id Arguments

--password -p

The certificate file password.

Property	Value
Parameter group:	Custom Domain Arguments

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Property	Value
Parameter group:	Resource Id Arguments

--show-prompt

Show prompt to upload an existing certificate.

Property	Value
Default value:	False

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Property	Value
Parameter group:	Resource Id Arguments

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

Property	Value
Default value:	False

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property	Value
Default value:	False

--output -o

Output format.

Property	Value
Default value:	json
Accepted values:	json, jsonc, none, table, tsv, yaml, yamlc

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property	Value
Default value:	False

az containerapp env certificate upload (containerapp extension)

Add or update a certificate.

az containerapp env certificate upload [--akv-url --certificate-akv-url]
                                       [--certificate-file]
                                       [--certificate-identity --identity]
                                       [--certificate-name]
                                       [--ids]
                                       [--location]
                                       [--name]
                                       [--password]
                                       [--resource-group]
                                       [--show-prompt]
                                       [--subscription]

Examples

Add or update a certificate.

az containerapp env certificate upload -g MyResourceGroup --name MyEnvironment --certificate-file MyFilepath

Add or update a certificate with a user-provided certificate name.

az containerapp env certificate upload -g MyResourceGroup --name MyEnvironment --certificate-file MyFilepath --certificate-name MyCertificateName

Add or update a certificate from azure key vault using managed identity.

az containerapp env certificate upload -g MyResourceGroup --name MyEnvironment --akv-url akvSecretUrl --identity system

Optional Parameters

The following parameters are optional, but depending on the context, one or more might become required for the command to execute successfully.

--akv-url --certificate-akv-url

Preview

The URL pointing to the Azure Key Vault secret that holds the certificate.

Property	Value
Parameter group:	Custom Domain Arguments

--certificate-file -f

The filepath of the .pfx or .pem file.

Property	Value
Parameter group:	Custom Domain Arguments

--certificate-identity --identity

Preview

Resource ID of a managed identity to authenticate with Azure Key Vault, or System to use a system-assigned identity.

Property	Value
Parameter group:	Custom Domain Arguments

--certificate-name -c

Name of the certificate which should be unique within the Container Apps environment.

--ids

Property	Value
Parameter group:	Resource Id Arguments

--location -l

Location of resource. Examples: eastus2, northeurope.

--name -n

Name of the Container Apps environment.

Property	Value
Parameter group:	Resource Id Arguments

--password -p

The certificate file password.

Property	Value
Parameter group:	Custom Domain Arguments

--resource-group -g

Name of resource group. You can configure the default group using az configure --defaults group=<name>.

Property	Value
Parameter group:	Resource Id Arguments

--show-prompt

Show prompt to upload an existing certificate.

Property	Value
Default value:	False

--subscription

Name or ID of subscription. You can configure the default subscription using az account set -s NAME_OR_ID.

Property	Value
Parameter group:	Resource Id Arguments

Global Parameters

--debug

Increase logging verbosity to show all debug logs.

Property	Value
Default value:	False

--help -h

Show this help message and exit.

--only-show-errors

Only show errors, suppressing warnings.

Property	Value
Default value:	False

--output -o

Output format.

Property	Value
Default value:	json
Accepted values:	json, jsonc, none, table, tsv, yaml, yamlc

--query

JMESPath query string. See http://jmespath.org/ for more information and examples.

--verbose

Increase logging verbosity. Use --debug for full debug logs.

Property	Value
Default value:	False

Share via

az containerapp env certificate

Commands

az containerapp env certificate create

Examples

Required Parameters

Optional Parameters

az containerapp env certificate delete

Examples

Optional Parameters

az containerapp env certificate delete (containerapp extension)

Examples

Optional Parameters

az containerapp env certificate list

Examples

Required Parameters

Optional Parameters

az containerapp env certificate list (containerapp extension)

Examples

Required Parameters

Optional Parameters

az containerapp env certificate upload

Examples

Required Parameters

Optional Parameters

az containerapp env certificate upload (containerapp extension)

Examples

Optional Parameters

Feedback