feat: extract CI lifecycle and Prow job management skills from openshift/release

Extract 10 skills from openshift/release .claude/skills/ into this
repository, renaming them with concern-first naming (lifecycle-*,
prow-*) and adding dual-mode support for local/remote repo access.

Lifecycle skills (portable, pure API):
- lifecycle-ocp: OCP version lifecycle via Red Hat Product Life Cycles API
- lifecycle-aks: AKS K8s version lifecycle via AKS release status API
- lifecycle-eks: EKS K8s version lifecycle via AWS docs
- lifecycle-gke: GKE K8s version lifecycle via endoflife.date API

Prow job management skills (openshift/release):
- prow-ocp-jobs: list/generate OCP cluster-claim test entries
- prow-ocp-pools: list/generate Hive ClusterPool YAML
- prow-ocp-coverage: cross-reference pools, jobs, and lifecycle data
- prow-aks-jobs: list AKS MAPT test entries
- prow-eks-jobs: list EKS MAPT test entries
- prow-gke-jobs: list GKE test entries

Shared infrastructure (skills/_shared/):
- resolve-repo.sh: auto-detect local checkout or GitHub API fallback
- fetch-yaml.sh: dual-mode file listing/fetching helpers
- list-k8s-test-configs.sh: deduplicated from 3 identical copies

Key improvements over originals:
- 3x list-k8s-test-configs.sh duplication eliminated
- 2x print-configured-versions.sh duplication eliminated
- ocp-lifecycle.jq cross-reference is now a clean sibling path
- All read-only scripts support dual-mode (local or gh CLI)
- rhdh-decommission-release intentionally left in openshift/release

Assisted-by: OpenCode

Author: zdrapela

skills/_shared/fetch-yaml.sh

@@ -0,0 +1,171 @@
+#!/usr/bin/env bash
+# Fetch YAML files from the openshift/release repository (local or remote).
+#
+# Provides helper functions for listing and reading YAML files from either
+# a local checkout or the GitHub API, abstracting the dual-mode access
+# pattern used by all prow-* and lifecycle-* skills.
+#
+# Usage (in consuming scripts):
+#   SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+#   source "${SCRIPT_DIR}/../../_shared/fetch-yaml.sh"
+#   init_repo "$@"  # parses --repo-dir, resolves root
+#
+#   # List YAML files matching a glob in a repo directory
+#   list_yaml_files "ci-operator/config/redhat-developer/rhdh" "redhat-developer-rhdh-*.yaml"
+#
+#   # Read a single YAML file (local path or remote repo path)
+#   fetch_yaml "ci-operator/config/redhat-developer/rhdh/redhat-developer-rhdh-main.yaml"
+#
+# Requires: curl (remote mode), gh (remote mode)
+
+set -euo pipefail
+
+_SHARED_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${_SHARED_DIR}/resolve-repo.sh"
+
+# Parse --repo-dir from args and resolve the repo root.
+# Strips --repo-dir from the args and exports remaining args as SCRIPT_ARGS.
+# Call this at the top of each consuming script.
+init_repo() {
+  local args=()
+  while [[ $# -gt 0 ]]; do
+    case "$1" in
+      --repo-dir)
+        export OPENSHIFT_RELEASE_DIR="$2"
+        shift 2
+        ;;
+      *)
+        args+=("$1")
+        shift
+        ;;
+    esac
+  done
+  SCRIPT_ARGS=("${args[@]+"${args[@]}"}")
+  resolve_repo_root >/dev/null
+}
+
+# List YAML files in a directory, one path per line.
+#
+# In local mode, returns absolute paths.
+# In remote mode, returns repo-relative paths.
+#
+# Args:
+#   $1 - repo-relative directory path (e.g., "ci-operator/config/redhat-developer/rhdh")
+#   $2 - filename glob pattern (e.g., "redhat-developer-rhdh-*.yaml")
+list_yaml_files() {
+  local dir_path="$1"
+  local pattern="$2"
+
+  if is_remote; then
+    # Use GitHub Contents API to list directory, filter by pattern
+    local api_path="repos/${OPENSHIFT_RELEASE_REPO}/contents/${dir_path}"
+    gh api "$api_path" --jq ".[] | select(.name | test(\"${pattern}\")) | .path" 2>/dev/null || {
+      echo "ERROR: Failed to list ${dir_path} via GitHub API" >&2
+      return 1
+    }
+  else
+    local full_dir
+    full_dir="$(repo_path "$dir_path")"
+    if [[ ! -d "$full_dir" ]]; then
+      echo "ERROR: Directory not found: ${full_dir}" >&2
+      return 1
+    fi
+    # Convert glob pattern to find-compatible form and return repo-relative paths
+    for f in "${full_dir}"/${pattern}; do
+      [[ -f "$f" ]] || continue
+      echo "$f"
+    done
+  fi
+}
+
+# Fetch a single YAML file's content to stdout.
+#
+# In local mode, the argument is an absolute path (as returned by list_yaml_files).
+# In remote mode, the argument is a repo-relative path.
+#
+# Args:
+#   $1 - file path (absolute local or repo-relative for remote)
+fetch_yaml() {
+  local file_path="$1"
+
+  if is_remote; then
+    # Fetch via GitHub raw content
+    local raw_url="https://raw.githubusercontent.com/${OPENSHIFT_RELEASE_REPO}/HEAD/${file_path}"
+    curl -sL --fail "$raw_url" || {
+      echo "ERROR: Failed to fetch ${file_path} from GitHub" >&2
+      return 1
+    }
+  else
+    if [[ ! -f "$file_path" ]]; then
+      echo "ERROR: File not found: ${file_path}" >&2
+      return 1
+    fi
+    cat "$file_path"
+  fi
+}
+
+# Extract the branch/filename stem from a config file path.
+# Works for both absolute local paths and repo-relative remote paths.
+#
+# Example:
+#   extract_branch "redhat-developer-rhdh-" ".../redhat-developer-rhdh-main.yaml"
+#   => "main"
+#   extract_branch "redhat-developer-rhdh-" ".../redhat-developer-rhdh-release-1.9.yaml"
+#   => "release-1.9"
+extract_branch() {
+  local prefix="$1"
+  local filepath="$2"
+  local filename
+  filename="$(basename "$filepath")"
+  echo "$filename" | sed "s/^${prefix}//;s/\\.yaml$//"
+}
+
+# Print configured MAPT_KUBERNETES_VERSION per branch from CI config files.
+#
+# Shared helper used by lifecycle-aks and lifecycle-eks scripts.
+#
+# Args:
+#   $1 - repo-relative config dir (e.g., "ci-operator/config/redhat-developer/rhdh")
+#   $2 - test name regex pattern (e.g., "^e2e-aks-")
+#   $3 - (optional) repo-relative path to MAPT ref YAML
+#
+# Requires: yq (v4+)
+print_configured_versions() {
+  local config_dir="$1"
+  local test_pattern="$2"
+  local mapt_ref="${3:-}"
+
+  local mapt_tag=""
+  if [[ -n "$mapt_ref" ]]; then
+    local ref_content
+    ref_content="$(fetch_yaml "$mapt_ref" 2>/dev/null)" || true
+    if [[ -n "$ref_content" ]]; then
+      mapt_tag=$(echo "$ref_content" | grep 'tag:' | awk '{print $2}' | head -1 || true)
+    fi
+  fi
+
+  if ! command -v yq &>/dev/null; then
+    echo "WARNING: yq not available, skipping configured versions" >&2
+    return 0
+  fi
+
+  local prefix="redhat-developer-rhdh-"
+  local files
+  files="$(list_yaml_files "$config_dir" "${prefix}*.yaml")" || return 0
+  [[ -z "$files" ]] && return 0
+
+  echo "Configured MAPT_KUBERNETES_VERSION per branch:"
+  while IFS= read -r f; do
+    [[ -z "$f" ]] && continue
+    local branch
+    branch="$(extract_branch "$prefix" "$f")"
+    local content
+    content="$(fetch_yaml "$f" 2>/dev/null)" || continue
+    local ver
+    ver=$(echo "$content" | yq -o=json "[.tests[] | select(.as | test(\"${test_pattern}\")) | .steps.env.MAPT_KUBERNETES_VERSION // \"N/A\"] | unique | .[]" 2>/dev/null | sort -u | paste -sd',' - || echo "N/A")
+    [[ -z "$ver" ]] && ver="N/A"
+    echo "  ${branch}: ${ver}"
+  done <<< "$files"
+  [[ -n "$mapt_tag" ]] && echo "MAPT image: mapt:${mapt_tag}"
+  echo ""
+}

skills/_shared/list-k8s-test-configs.sh

@@ -0,0 +1,84 @@
+#!/usr/bin/env bash
+# List K8s platform test entries in RHDH CI config files.
+#
+# Shared script used by prow-aks-jobs, prow-eks-jobs, and prow-gke-jobs skills.
+# Supports both local openshift/release checkout and remote GitHub API access.
+#
+# Usage:
+#   list-k8s-test-configs.sh --pattern <regex> [--branch <name>] [--repo-dir <path>]
+#
+# Examples:
+#   list-k8s-test-configs.sh --pattern "^e2e-aks-"
+#   list-k8s-test-configs.sh --pattern "^e2e-eks-" --branch main
+#   list-k8s-test-configs.sh --pattern "^e2e-gke-"
+#
+# Requires: yq (v4+), jq
+
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+source "${SCRIPT_DIR}/fetch-yaml.sh"
+
+CONFIG_DIR="ci-operator/config/redhat-developer/rhdh"
+PATTERN=""
+FILTER_BRANCH=""
+
+# Parse --repo-dir first, then skill-specific args
+init_repo "$@"
+set -- "${SCRIPT_ARGS[@]+"${SCRIPT_ARGS[@]}"}"
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --pattern|-p)    PATTERN="$2"; shift 2 ;;
+    --branch|-b)     FILTER_BRANCH="$2"; shift 2 ;;
+    --config-dir|-d) CONFIG_DIR="$2"; shift 2 ;;
+    *) echo "Usage: $0 --pattern <regex> [--branch <name>] [--config-dir <path>] [--repo-dir <path>]" >&2; exit 1 ;;
+  esac
+done
+
+[[ -n "$PATTERN" ]] || { echo "ERROR: --pattern is required" >&2; exit 1; }
+command -v yq &>/dev/null || { echo "ERROR: yq (v4+) required" >&2; exit 1; }
+
+PREFIX="redhat-developer-rhdh-"
+HAS_MAPT_VERSION=false
+
+FILES=$(list_yaml_files "$CONFIG_DIR" "${PREFIX}*.yaml") || { echo "ERROR: Failed to list config files" >&2; exit 1; }
+
+while IFS= read -r f; do
+  [[ -z "$f" ]] && continue
+  branch=$(extract_branch "$PREFIX" "$f")
+  [[ -n "$FILTER_BRANCH" && "$branch" != "$FILTER_BRANCH" ]] && continue
+
+  content=$(fetch_yaml "$f" 2>/dev/null) || continue
+  entries=$(echo "$content" | yq -o=json -I=0 "[.tests[] | select(.as | test(\"${PATTERN}\"))]" 2>/dev/null || true)
+  [[ -z "$entries" || "$entries" == "[]" ]] && continue
+
+  # Check if any entry has MAPT_KUBERNETES_VERSION
+  has_ver=$(echo "$entries" | jq -r '[.[] | .steps.env.MAPT_KUBERNETES_VERSION // empty] | length')
+
+  echo ""
+  echo "=== Branch: ${branch} ==="
+  if [[ "$has_ver" -gt 0 ]]; then
+    HAS_MAPT_VERSION=true
+    printf "  %-40s %-13s %-30s %-10s\n" TEST_NAME K8S_VERSION CRON OPTIONAL
+    printf "  %-40s %-13s %-30s %-10s\n" --------- ----------- ---- --------
+    echo "$entries" | jq -r '.[] | [.as, (.steps.env.MAPT_KUBERNETES_VERSION//"N/A"), (.cron//"N/A"), (.optional//false|tostring)] | @tsv' | sort | \
+      while IFS=$'\t' read -r name ver cron opt; do
+        printf "  %-40s %-13s %-30s %-10s\n" "$name" "$ver" "$cron" "$opt"
+      done
+  else
+    printf "  %-40s %-30s %-10s\n" TEST_NAME CRON OPTIONAL
+    printf "  %-40s %-30s %-10s\n" --------- ---- --------
+    echo "$entries" | jq -r '.[] | [.as, (.cron//"N/A"), (.optional//false|tostring)] | @tsv' | sort | \
+      while IFS=$'\t' read -r name cron opt; do
+        printf "  %-40s %-30s %-10s\n" "$name" "$cron" "$opt"
+      done
+  fi
+done <<< "$FILES"
+
+echo ""
+if [[ "$HAS_MAPT_VERSION" == "true" ]]; then
+  echo "K8s version source: MAPT_KUBERNETES_VERSION in steps.env per test entry" >&2
+else
+  echo "K8s version: managed outside CI config (static cluster)" >&2
+fi

skills/_shared/resolve-repo.sh

@@ -0,0 +1,78 @@
+#!/usr/bin/env bash
+# Resolve the openshift/release repository root for local or remote access.
+#
+# Provides a single function that all scripts source to determine whether
+# to read files from a local checkout or via the GitHub API.
+#
+# Resolution order:
+#   1. Explicit --repo-dir flag (passed via OPENSHIFT_RELEASE_DIR before sourcing)
+#   2. OPENSHIFT_RELEASE_DIR environment variable
+#   3. Walk up from $PWD looking for the ci-operator sentinel directory
+#   4. Fall back to REMOTE mode (GitHub API via gh CLI)
+#
+# Usage (in consuming scripts):
+#   source "$(dirname "${BASH_SOURCE[0]}")/../../_shared/resolve-repo.sh"
+#   ROOT=$(resolve_repo_root)
+#   if is_remote; then
+#     # use gh api ...
+#   else
+#     # use local files at $ROOT/...
+#   fi
+#
+# No external dependencies beyond bash 3.2+.
+
+set -euo pipefail
+
+# Sentinel path that identifies an openshift/release checkout.
+_OR_SENTINEL="ci-operator/config/redhat-developer/rhdh"
+
+# GitHub repository for remote access.
+OPENSHIFT_RELEASE_REPO="${OPENSHIFT_RELEASE_REPO:-openshift/release}"
+
+# Resolved root -- populated by resolve_repo_root().
+_RESOLVED_ROOT=""
+
+resolve_repo_root() {
+  # 1. Explicit override via env var
+  if [[ -n "${OPENSHIFT_RELEASE_DIR:-}" ]]; then
+    if [[ -d "${OPENSHIFT_RELEASE_DIR}/${_OR_SENTINEL}" ]]; then
+      _RESOLVED_ROOT="$OPENSHIFT_RELEASE_DIR"
+      echo "$_RESOLVED_ROOT"
+      return 0
+    else
+      echo "WARNING: OPENSHIFT_RELEASE_DIR is set but ${_OR_SENTINEL} not found there" >&2
+    fi
+  fi
+
+  # 2. Walk up from cwd
+  local dir="$PWD"
+  while [[ "$dir" != "/" ]]; do
+    if [[ -d "${dir}/${_OR_SENTINEL}" ]]; then
+      _RESOLVED_ROOT="$dir"
+      echo "$_RESOLVED_ROOT"
+      return 0
+    fi
+    dir="$(dirname "$dir")"
+  done
+
+  # 3. Remote mode
+  _RESOLVED_ROOT="REMOTE"
+  echo "REMOTE"
+  return 0
+}
+
+# Returns 0 (true) if we are in remote mode.
+is_remote() {
+  [[ "$_RESOLVED_ROOT" == "REMOTE" ]]
+}
+
+# Returns the full local path for a repo-relative path, or the path as-is
+# in remote mode (callers should check is_remote first).
+repo_path() {
+  local relpath="$1"
+  if is_remote; then
+    echo "$relpath"
+  else
+    echo "${_RESOLVED_ROOT}/${relpath}"
+  fi
+}