Summary

Category	Status
Unit Tests — cmd/cluster/azure (5 tests)	PASS
Unit Tests — cmd/infra/azure (6 tests)	PASS
Scenario 1: --assign-service-principal-roles + --infra-json	PASS
Scenario 2: --assign-custom-hcp-roles + --infra-json	PASS
Scenario 3: --infra-json without role flags	PASS
Scenario 4: create infra missing DNS zone RG (SPR)	PASS
Scenario 5: create infra missing DNS zone RG (Custom)	PASS
Scenario 6: create infra with DNS zone RG	PASS
Scenario 7: Whitespace --dns-zone-rg-name	PASS

Unit tests passing: 11/11 (5 cluster + 6 infra)
CLI scenarios verified: 7/7 — all validation errors trigger correctly, happy paths succeed
Live regression: HostedCluster brcox-88531-hc on Azure self-managed management cluster — Available, 2/2 nodes Ready, v1.35.5

---

Regression Checklist

Check	Result	Notes
Live Azure self-managed HC is healthy	PASS	brcox-88531-hc — Available=True, Progressing=False, 5.0.0 nightly
Guest cluster nodes Ready	PASS	2/2 nodes Ready, v1.35.5
Guest ClusterVersion available	PASS	5.0.0-0-2026-06-17-110400-test-ci-ln-1qhpr62-latest, Available=True, Progressing=False
NodePool not updating	PASS	UpdatingVersion=False, UpdatingConfig=False, 2/2 desired nodes
create cluster azure --infra-json (no role flags) succeeds	PASS	Scenario 3 — exit code 0, manifests rendered
create infra azure (no role flags) passes validation	PASS	No new validation requirements for users who don't use role assignment flags

---

Test Environment

Component	Details
Management Cluster	brcox-azure-dev-hc (hosted on AWS, managing Azure HCPs)
Hosted Cluster	brcox-88531-hc (Azure self-managed, 5.0.0 nightly)
CLI Binary	Built from PR #8319 commit 9d15d7a8f7
Azure Subscription	237432b9-9dc5-4b0b-b058-8868ac6a774b
Platform	Azure self-managed (workload identity federation)