Custom script extension fails when getting script from Storage account

Bombbe 1,611

Hi,
i'm trying to run following command from Azure runbook, cloud shell and laptop but it keeps failing with this kinda error:

Powershell code:

Set-AzVMCustomScriptExtension -ResourceGroupName "rg-name" `  
            -Location "West Europe" `  
            -VMName "vmanme" `  
            -Name "CustomScriptExtension" `  
            -TypeHandlerVersion "1.1" `  
            -StorageAccountName "storageaccountname" `  
            -StorageAccountKey aaaaaaaaaaaaaaaaaaaaaaaaaaaaa `  
            -ContainerName "script" `  
            -FileName "filename.ps1" `  
            -Run "filename.ps1"

My storage account has "Allow access" from "Select networks" and allowed my ip adderess in "Firewalls and virtual networks" . Container are "Private" and changing access level did not solve problem. Even tho i'm not able to run Set-AzVMCustomScriptExtension command I'm allowed to download content with invoke-webrequest. If I "Allow access" from "All networks" it works but that is not solution right now.

Tips how can run Set-AzVMCustomScriptExtension from storage account (or some where else) with allowing access to everyone to that storage account? Or any suggestions what could I check to solve problem?

prmanhas-MSFT 17,886 Reputation points Microsoft Employee

2020-08-11T07:05:44.183+00:00

@Bombbe Apologies for the delay in response and all the inconvenience caused because of the issue.

We have reached out to the internal teams to investigate this issue. We will get back to you as soon as we have an update.
prmanhas-MSFT 17,886 Reputation points Microsoft Employee

2020-08-17T16:11:22.75+00:00

@Bombbe Apologies for the delay in response.

As mentioned in this article the highest failure rate for this extension is because of syntax errors in the script, test the script runs without error, and also put in additional logging into the script to make it easier to find where it failed.

Data about the state of extension deployments can be retrieved from the Azure portal, and by using the Azure PowerShell module. To see the deployment state of extensions for a given VM, run the following

Get-AzVMExtension -ResourceGroupName <resourceGroupName> -VMName <vmName> -Name myExtensionName

Extension output is logged to files found under the following folder on the target virtual machine.

C:\WindowsAzure\Logs\Plugins\Microsoft.Compute.CustomScriptExtension

Can you please provide the above logs will be helpful in troubleshooting the issue.
prmanhas-MSFT 17,886 Reputation points Microsoft Employee

2020-08-20T14:52:47.83+00:00

@Bombbe Any update on the issue?

If the suggested response helped you resolve your issue, do click on "Mark as Answer" and "Up-Vote" for the answer that helped you for benefit of the community.

Thanks.
Nathan Bird 1 Reputation point

2020-09-15T09:43:43.143+00:00

So what was the fix for this exactly? I'm having the same issue as of last week, worked fine before. Storage Account values havent changed any.
Nathan Bird 1 Reputation point

2020-09-22T12:27:17.747+00:00

For others benefit, I worked this out in the end. Its actually a bug in the Az Posh cmdlets (version 4.6/4.6.1) downgrade to 4.5 or use CLI its fine.