Migrate test/e2e-oidc to OpenShift Tests Extension framework

This commit migrates the OIDC e2e tests from the old test framework to the
OpenShift Tests Extension (OTE) framework, ensuring compliance with cluster
monitoring and image registry policies.

Key changes:
- Migrate test/e2e-oidc tests to OTE framework structure
- Add ImageStream support to satisfy known-image-checker monitoring requirements
- Deploy IDP pods (GitLab, Keycloak) using internal registry images
- Set ClusterStability to Disruptive for serial test suite to handle temporary degraded states
- Remove [Disruptive] tags from individual OIDC tests
- Refactor cleanup logic for proper ImageStream and pod resource management
- Add vendor dependencies for OpenShift image client

Test improvements:
- Tests now comply with OpenShift cluster monitoring policies
- Proper cleanup order prevents resource leakage
- Suite-level stability configuration handles authentication operator degraded states during cleanup
- Fixed namespace lifecycle management

Co-Authored-By: Rohit Patil <ropatil@redhat.com>

Author: Rohit Patil

cmd/cluster-authentication-operator-tests-ext/main.go

@@ -15,6 +15,7 @@ import (
 	_ "github.com/openshift/cluster-authentication-operator/test/e2e"
 	_ "github.com/openshift/cluster-authentication-operator/test/e2e-encryption-kms"
 	_ "github.com/openshift/cluster-authentication-operator/test/e2e-encryption-perf"
+	_ "github.com/openshift/cluster-authentication-operator/test/e2e-oidc"
 
 	"k8s.io/klog/v2"
 )
@@ -75,11 +76,15 @@ func prepareOperatorTestsRegistry() (*oteextension.Registry, error) {
 	// The following suite runs tests that must execute serially (one at a time)
 	// because they modify cluster-wide resources like OAuth configuration.
 	// Tests tagged with [Serial] and any of [Operator], [OIDC], [Templates], [Tokens] are included in this suite.
+	// Excludes [Disruptive] tests which run in the disruptive suite instead.
+	// ClusterStability set to Disruptive: OIDC tests temporarily put authentication operator
+	// in Degraded state during cleanup when IDP configuration is rolled back.
 	extension.AddSuite(oteextension.Suite{
-		Name:        "openshift/cluster-authentication-operator/operator/serial",
-		Parallelism: 1,
+		Name:             "openshift/cluster-authentication-operator/operator/serial",
+		Parallelism:      1,
+		ClusterStability: oteextension.ClusterStabilityDisruptive,
 		Qualifiers: []string{
-			`name.contains("[Serial]") && (name.contains("[Operator]") || name.contains("[OIDC]") || name.contains("[Templates]") || name.contains("[Tokens]"))`,
+			`name.contains("[Serial]") && !name.contains("[Disruptive]") && (name.contains("[Operator]") || name.contains("[OIDC]") || name.contains("[Templates]") || name.contains("[Tokens]"))`,
 		},
 	})