Hacktoberfest 2026: los issues que los mantenedores marcaron para octubre, abiertos y aptos para principiantes. Explorar issues de Hacktoberfest

localstack-azure-client: .bicepparam files that use readEnvironmentVariable() can't be deployed

Abierto
  • ¿Algo no está bien?
#111 0 comentarios 0 reacciones 0 asignados Ver en GitHub

Los mantenedores suelen responder en 1 día

Nadie ha tomado este issue todavía.

Evaluación

Dificultad
3/5
Tiempo estimado
1-2 días
Aptitud para principiantes
64/100
Tipo de issue
Nueva funcionalidad
Claridad
Bastante claro
Estado de actividad
Activo
Stack tecnológico
azure, typescript
Área
cloud, security

Línea de trabajo

Start with child-env.ts to see how the Azure CLI environment allow-list is built, then read docs/AZURE.md and the tool description. Document that variables are not forwarded and .bicepparam files using readEnvironmentVariable() need inline --parameters, or explore a setting for explicitly forwarded variables while blocking Azure credential prefixes. Done means the limitation and supported behavior are clear, with any forwarding option preserving the stated credential restrictions.

Escrito por el modelo de indexación a partir del texto del issue.

Descripción

What happens

The Azure tool builds az's environment from an allow-list (child-env.ts). That's the right call for keeping az away from real Azure, but it also means a .bicepparam file that reads a value with readEnvironmentVariable() can't be deployed through the tool:

deployment group validate --resource-group local-rg --template-file bicep/main.bicep --parameters bicep/main.bicepparam

❌ Command Failed (exit 1)
ERROR: …/bicep/main.bicepparam(11,47) : Error BCP427: Environment variable "BACKEND_SECRET" does not exist and there's no default value set.

The api-management-function-app sample in localstack-azure-samples does this: its deploy.sh exports BACKEND_SECRET before calling az. Through the MCP tool there is no way to set it, so an agent has to drop the .bicepparam file and pass --template-file main.bicep --parameters backendSecret=…. That puts the secret in the agent's transcript.

Expected

At least, docs/AZURE.md and the tool description should say that the environment isn't forwarded and that .bicepparam files using readEnvironmentVariable() need inline --parameters instead.

A possible option is a setting that names extra variables to forward to az, while still refusing AZURE_*, ARM_* and MSI_*. That would also keep secrets out of tool-call arguments.

Context

  • MCP server 0.7.0 via npx
  • LocalStack Azure emulator 2026.11.0.dev501
  • Bicep 0.48.1
  • Azure CLI 2.70.0
Lenguaje dominante
TypeScript
Estrellas
29
Forks
14
Merge medio
3 d 16 h
PR fusionados (30 d)
18

Preparar el entorno

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de localstack/localstack-mcp-server

Todos los issues de localstack/localstack-mcp-server

Issues similares

Más issues de TypeScript

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.