Private cluster does not need to set baseDomainResourceGroupName which is only used to locate public dns zones. But when using ccoctl to create IDC issuer and managed identities for private cluster using Microsoft Entra Workload Identity , the baseDomainResourceGroupName is required. 

4.16/4.15/4.14    

Always

1.Create oidc issuer and managed identities for private cluster using Microsoft Entra Workload Identity using ccoctl. For azure private cluster, dnszone-resource-group-name should not require.
2.
3.

1. Create oidc issuer and managed identities for private cluster using Microsoft Entra Workload Identity using ccoctl.
$  ./ccoctl azure create-all --name mihuang --region northcentralus --subscription-id xxx --tenant-id xxx --credentials-requests-dir credreqs  --network-resource-group-name mihuangtest
2024/06/06 11:35:35 No --output-dir provided, defaulting output directory to the current working directory /home/hmx/CCO
Error: required flag(s) "dnszone-resource-group-name" not set

 1. Create oidc issuer and managed identities for private cluster using Microsoft Entra Workload Identity using ccoctl should not set dnszone-resource-group-name parameter.

$ ./openshift-install explain installconfig.platform.azure.baseDomainResourceGroupName 
KIND: InstallConfig 
VERSION: v1 
RESOURCE: <string> 
BaseDomainResourceGroupName specifies the resource group where the Azure DNS zone for the base domain is found. This field is optional when creating a private cluster, otherwise required.