"Webhooks should be able to create machines from a machineset with a minimal providerSpec" failed on azure confidential VM clusters
The automatically populates resourceIDs is not gen2. Confidential VMs are gen2 only.

4.20

Always   

1. Create machines from a machineset with a minimal providerSpec     
2. Check machine status

      image:
        offer: ""
        publisher: ""
        resourceID: /resourceGroups/ci-op-3ps3cd94-2de5a-vjgqg-rg/providers/Microsoft.Compute/galleries/gallery_ci_op_3ps3cd94_2de5a_vjgqg/images/ci-op-3ps3cd94-2de5a-vjgqg/versions/latest
        sku: ""
        version: ""

      message: |
        failed to create vm ci-op-3ps3cd94-2de5a-vjgqg-worker-westeurope21-m2q6r: failed to create VM: cannot create vm: PUT https://management.azure.com/subscriptions/53b8f551-f0fc-4bea-8cba-6d1fefd54c8a/resourceGroups/ci-op-3ps3cd94-2de5a-vjgqg-rg/providers/Microsoft.Compute/virtualMachines/ci-op-3ps3cd94-2de5a-vjgqg-worker-westeurope21-m2q6r
        --------------------------------------------------------------------------------
        RESPONSE 400: 400 Bad Request
        ERROR CODE: BadRequest
        --------------------------------------------------------------------------------
        {
          "error": {
            "code": "BadRequest",
            "message": "Use of ConfidentialVM setting is not supported for the provided image."
          }
        }
        --------------------------------------------------------------------------------
      reason: MachineCreationFailed
$ oc get clusterversion     
NAME      VERSION                              AVAILABLE   PROGRESSING   SINCE   STATUS
version   4.20.0-0.nightly-2025-12-04-021057   True        False         71m     Cluster version is 4.20.0-0.nightly-2025-12-04-021057

Machine create failed with a minimal providerSpec

Machine create succeed with a minimal providerSpec