az webapp deploy --src-path should use ARM Proxy

[Krish054]

Related command
az webapp deploy --src-path

Is your feature request related to a problem? Please describe.
My application infrastructure is secured using virtual networks and private endpoints. Rather than logging into VMs and deploying updates to the app, I should be able to do it from my on-premises machines. But I get an 'Error 403 - Forbidden. The web app you have attempted to reach has blocked your access' message - which is expected. This is the current flow of the cli command

Describe the solution you'd like
A way to deploy my application from on-premise machines using az webapp deploy --src-path command. So that it can execute like this

Describe alternatives you've considered
This article proposes using VPN which would be my last resort.

Additional context
A similar issue has been raised #21168 and was fixed in this PR #26620. Please note that I've tried and cannot use --src-url argument for deployment. Thanks.

[yonzhan]

Thank you for opening this issue, we will look into it.

[btardif]

@tulikac can you take a look?

[Krish054]

I've found a workaround to make az webapp deploy work for apps behind private endpoints. The solution is to enable public access for the app service using az resource update --resource-type "Microsoft.Web/sites" --set properties.publicNetworkAccess=Enabled, then run az webapp deploy and finally az resource update --resource-type "Microsoft.Web/sites" --set properties.publicNetworkAccess=Disabled. This issue can be closed, but I'd also like the az webapp deploy --src-path to use ARM proxy.