v0.8.86: rename onboarding pipelines Setup -> Config + clarify GitHub Environments are optional (#92)

* v0.8.85: consolidate setup workflow and align pipeline/version metadata

* test-run-timings

* v0.8.85 follow-up: delete ADO auth+inventory workflows and add merged ADO setup pipeline

* v0.8.85 follow-up: move collapsible subscription section into Export-AzLocalAuthValidationReport cmdlet; track test-run-timings.csv

* v0.8.85 follow-up: fix live integration test failures (Step.0 ErrorActionPreference, Step.3 path, Step.4 SummaryPath)

* Add test-run-timings.csv to repo (test performance metrics)

* docs: align pipeline appendix with Setup/Fleet naming

* chore: update test run timings

* v0.8.85: address PR #91 review findings - manifest, docs, mojibake, prune tests

- Get-AzLocalPipelineManifest: collapse legacy authentication-test +
  inventory-clusters rows into the merged setup-validate-and-inventory entry
- appendix-pipelines.md / README.md: replace removed filenames + old Step
  naming with Setup:/Fleet: numbering; fix section 13 file-layout block and
  section 14 reference; repair broken cross-doc anchors (README 8.1.1 ->
  #fleet-01, sideload.md -> #fleet-03); update present-tense Step.7 reference
- appendix-pipelines.md: reconcile Setup: 01 trigger docs to the shipped
  weekly Sunday 08:00 UTC cron
- fleet-update-status.yml: fix mojibake in YAML comment
- apply-updates-schedule.example.yml: replace Step.5/Step.7 with stable
  apply-updates.yml / Fleet: 04 references
- Tests: add 10 -PruneDeprecated regression tests (6 Copy- + 4 Update-)
  covering both-removed, single-removed, ID-mismatch-preserved, omitted-flag
  and -WhatIf paths

* docs: clarify sideload-catalog.example.yml header comment (v0.8.7 on-prem solution/SBE update sideloading)

* docs: fix grammar in sideload-catalog.example.yml header (introduce -> introduced)

* v0.8.86: rename onboarding pipelines Setup -> Config + clarify GitHub Environments are optional

- Rename the three onboarding workflow display names from `Setup: 0N` to
  `Config: 0N` (GitHub Actions `name:` and Azure DevOps `displayName:`/`name:`)
  so the Actions sidebar / ADO Pipelines list sorts the onboarding workflows
  ahead of the `Fleet: 0N` operational workflows (C sorts before F; the old
  `Setup:` prefix sorted after `Fleet:`). Display-name-only change - filenames,
  AZLOCAL-PIPELINE-ID values, aliases and prune logic are unchanged.
- Update bundled pipeline README.md + docs/appendix-pipelines.md (headings,
  cross-references, anchors, naming rationale) to the Config: NN naming.
- README.md (Automation-Pipeline-Examples): clarify that GitHub Environments
  are OPTIONAL. The branch-scoped federated credential is all OIDC needs, so a
  blank `environment` input is the supported minimal setup. Environments are a
  governance wrapper (approval gates, deployment-branch rules, wait timers,
  per-ring identities); environment-scoped federated credentials are only
  needed when a run actually names an environment. Mark the environment table,
  the inline + PowerShell env-scoped credential blocks, the subject-claim table
  row, and the section-5 secrets script accordingly.
- Version bump to 0.8.86: psd1 ModuleVersion + ReleaseNotes, psm1
  $script:ModuleVersion, CHANGELOG.md, both README files, docs/release-history,
  Tests version assertion, and all GENERATED_AGAINST_MODULE_VERSION pins across
  the bundled GitHub Actions and Azure DevOps templates.

Full Pester suite: 1266 passed, 0 failed, 1 skipped.

* ci: disable hosted Pester workflow (comment out pull_request + push triggers; keep workflow_dispatch). Suite is run locally before every push.

Author: NeilBird

.github/workflows/AzLocal.UpdateManagement-pester.yml

@@ -10,17 +10,22 @@ name: AzLocal.UpdateManagement - Pester
 # Cost mitigation: path-filtered to AzLocal.UpdateManagement/** only, and only
 # fires on the three useful PR activities (opened, synchronize, reopened).
 
+# DISABLED: automatic CI triggers are commented out because the Pester suite is
+# run locally before every push (see AzLocal.UpdateManagement/Tests/Invoke-Tests.ps1).
+# To re-enable hosted CI, uncomment the pull_request + push blocks below.
+# workflow_dispatch is kept so the workflow remains valid (GitHub requires at
+# least one trigger) and can still be run on demand from the Actions tab.
 on:
-  pull_request:
-    types: [opened, synchronize, reopened]
-    paths:
-      - 'AzLocal.UpdateManagement/**'
-      - '.github/workflows/AzLocal.UpdateManagement-pester.yml'
-  push:
-    branches: [main]
-    paths:
-      - 'AzLocal.UpdateManagement/**'
-      - '.github/workflows/AzLocal.UpdateManagement-pester.yml'
+  # pull_request:
+  #   types: [opened, synchronize, reopened]
+  #   paths:
+  #     - 'AzLocal.UpdateManagement/**'
+  #     - '.github/workflows/AzLocal.UpdateManagement-pester.yml'
+  # push:
+  #   branches: [main]
+  #   paths:
+  #     - 'AzLocal.UpdateManagement/**'
+  #     - '.github/workflows/AzLocal.UpdateManagement-pester.yml'
   workflow_dispatch:
 
 concurrency:

AzLocal.UpdateManagement/Automation-Pipeline-Examples/README.md

@@ -1,5 +1,5 @@
 # AZLOCAL-PIPELINE-ID: apply-updates-schedule-audit
-# Setup: 03 - Apply-Updates Schedule Coverage Audit Pipeline
+# Config: 03 - Apply-Updates Schedule Coverage Audit Pipeline
 # This pipeline runs the read-only Test-AzLocalApplyUpdatesScheduleCoverage advisor
 # weekly to detect drift between the cron schedule(s) in your apply-updates pipeline
 # YAML and the UpdateStartWindow tags that operators have placed on Azure Local clusters.
@@ -87,7 +87,7 @@ parameters:
     default: false
 
 variables:
-  GENERATED_AGAINST_MODULE_VERSION: '0.8.85'
+  GENERATED_AGAINST_MODULE_VERSION: '0.8.86'
   REQUIRED_MODULE_VERSION: '${{ parameters.moduleVersion }}'
   reportsPath: '$(Build.ArtifactStagingDirectory)/reports'
   # v0.8.7 sideload advisor defaults. Override at the pipeline / variable-group
@@ -98,7 +98,7 @@ variables:
 
 stages:
 - stage: ScheduleCoverage
-  displayName: 'Setup: 03 - Audit Apply-Updates Schedule Coverage'
+  displayName: 'Config: 03 - Audit Apply-Updates Schedule Coverage'
   jobs:
   - job: Audit
     displayName: 'Run Schedule Coverage Advisor'

AzLocal.UpdateManagement/Automation-Pipeline-Examples/azure-devops/apply-updates-schedule-audit.yml

@@ -129,7 +129,7 @@ variables:
   # log if the YAML appears stale - prompting you to refresh via
   # Copy-AzLocalPipelineExample -Update. See Automation-Pipeline-Examples/README.md section 5.
   - name: GENERATED_AGAINST_MODULE_VERSION
-    value: '0.8.85'
+    value: '0.8.86'
   # Resolution order for the module version pin (leave all unset to install the latest,
   # which is the default "fix-forward" behaviour): queue-time parameter > pipeline variable
   # 'REQUIRED_MODULE_VERSION' overridden at queue time > empty (latest).

AzLocal.UpdateManagement/Automation-Pipeline-Examples/azure-devops/apply-updates.yml

@@ -70,7 +70,7 @@ variables:
   # the version actually installed and to the latest on PSGallery, and emits a warning
   # log if the YAML appears stale - prompting you to refresh via
   # Copy-AzLocalPipelineExample -Update. See Automation-Pipeline-Examples/README.md section 5.
-  GENERATED_AGAINST_MODULE_VERSION: '0.8.85'
+  GENERATED_AGAINST_MODULE_VERSION: '0.8.86'
   # Resolution order for the module version pin (leave all unset to install the latest,
   # which is the default "fix-forward" behaviour): queue-time parameter > pipeline variable
   # 'REQUIRED_MODULE_VERSION' overridden at queue time > empty (latest).

AzLocal.UpdateManagement/Automation-Pipeline-Examples/azure-devops/assess-update-readiness.yml

@@ -110,7 +110,7 @@ variables:
   # the version actually installed and to the latest on PSGallery, and emits a warning
   # log if the YAML appears stale - prompting you to refresh via
   # Copy-AzLocalPipelineExample -Update. See Automation-Pipeline-Examples/README.md section 5.
-  GENERATED_AGAINST_MODULE_VERSION: '0.8.85'
+  GENERATED_AGAINST_MODULE_VERSION: '0.8.86'
   # Resolution order for the module version pin (leave all unset to install the latest,
   # which is the default "fix-forward" behaviour): queue-time parameter > pipeline variable
   # 'REQUIRED_MODULE_VERSION' overridden at queue time > empty (latest).

AzLocal.UpdateManagement/Automation-Pipeline-Examples/azure-devops/fleet-connectivity-status.yml

@@ -105,7 +105,7 @@ variables:
   # the version actually installed and to the latest on PSGallery, and emits a warning
   # log if the YAML appears stale - prompting you to refresh via
   # Copy-AzLocalPipelineExample -Update. See Automation-Pipeline-Examples/README.md section 5.
-  GENERATED_AGAINST_MODULE_VERSION: '0.8.85'
+  GENERATED_AGAINST_MODULE_VERSION: '0.8.86'
   # Resolution order for the module version pin (leave all unset to install the latest,
   # which is the default "fix-forward" behaviour): queue-time parameter > pipeline variable
   # 'REQUIRED_MODULE_VERSION' overridden at queue time > empty (latest).

AzLocal.UpdateManagement/Automation-Pipeline-Examples/azure-devops/fleet-health-status.yml

@@ -93,7 +93,7 @@ variables:
   # the version actually installed and to the latest on PSGallery, and emits a warning
   # log if the YAML appears stale - prompting you to refresh via
   # Copy-AzLocalPipelineExample -Update. See Automation-Pipeline-Examples/README.md section 5.
-  GENERATED_AGAINST_MODULE_VERSION: '0.8.85'
+  GENERATED_AGAINST_MODULE_VERSION: '0.8.86'
   # Resolution order for the module version pin (leave all unset to install the latest,
   # which is the default "fix-forward" behaviour): queue-time parameter > pipeline variable
   # 'REQUIRED_MODULE_VERSION' overridden at queue time > empty (latest).

AzLocal.UpdateManagement/Automation-Pipeline-Examples/azure-devops/fleet-update-status.yml

@@ -1,5 +1,5 @@
 # AZLOCAL-PIPELINE-ID: manage-updatering-tags
-# Setup: 02 - Manage UpdateRing Tags
+# Config: 02 - Manage UpdateRing Tags
 # This pipeline creates or updates UpdateRing tags on Azure Local clusters from a CSV file
 #
 # WORKFLOW:
@@ -46,7 +46,7 @@ variables:
   # log if the YAML appears stale - prompting you to refresh via
   # Copy-AzLocalPipelineExample -Update. See Automation-Pipeline-Examples/README.md section 5.
   - name: GENERATED_AGAINST_MODULE_VERSION
-    value: '0.8.85'
+    value: '0.8.86'
   # Resolution order for the module version pin (leave all unset to install the latest,
   # which is the default "fix-forward" behaviour): queue-time parameter > pipeline variable
   # 'REQUIRED_MODULE_VERSION' overridden at queue time > empty (latest).
@@ -58,7 +58,7 @@ pool:
 
 stages:
   - stage: ManageTags
-    displayName: 'Setup: 02 - Manage UpdateRing Tags'
+    displayName: 'Config: 02 - Manage UpdateRing Tags'
     jobs:
       - job: ApplyTags
         displayName: 'Apply UpdateRing Tags'

AzLocal.UpdateManagement/Automation-Pipeline-Examples/azure-devops/manage-updatering-tags.yml

@@ -84,7 +84,7 @@ parameters:
     default: ''
 
 variables:
-  GENERATED_AGAINST_MODULE_VERSION: '0.8.85'
+  GENERATED_AGAINST_MODULE_VERSION: '0.8.86'
   REQUIRED_MODULE_VERSION: '${{ parameters.moduleVersion }}'
   reportsPath: '$(Build.ArtifactStagingDirectory)/reports'