[ote] Add windows-ote-setup step for WMCO non-payload OTE binary

WMCO is an OLM optional operator (not CVO-managed payload), so the
standard payload-based OTE binary registration does not apply.

This step implements the non-payload OTE binary mechanism introduced in
openshift/origin#30863 (TestExtensionAdmission CRD + ImageStreamTag
annotations). When run after WMCO is deployed:

1. Creates an ImageStream in the WMCO namespace pointing to the CI image
   (built from Dockerfile.ci, which includes wmco-tests-ext.gz)
2. Annotates the ImageStreamTag with testextension.redhat.io/component
   and testextension.redhat.io/binary for OTE discovery
3. Installs the TestExtensionAdmission CRD
4. Creates a TestExtensionAdmission CR permitting the WMCO namespace

Added to aws-e2e-operator job to enable rehearsal testing.

Related: WINC-1777, OCP-37362

Author: weinliu

ci-operator/config/openshift/windows-machine-config-operator/openshift-windows-machine-config-operator-master.yaml

@@ -89,6 +89,7 @@ tests:
       COMPUTE_NODE_REPLICAS: "1"
       CONTROL_PLANE_REPLICAS: "1"
     test:
+    - ref: windows-ote-setup
     - ref: windows-e2e-operator-test
     workflow: ipi-aws-ovn-hybrid
 - always_run: false

ci-operator/step-registry/windows/ote-setup/windows-ote-setup-commands.sh

@@ -0,0 +1,49 @@
+#!/bin/bash
+
+set -o nounset
+set -o errexit
+set -o pipefail
+
+WMCO_NS="openshift-windows-machine-config-operator"
+
+# OPERATOR_IMAGE is the WMCO CI image built from Dockerfile.ci, which includes
+# wmco-tests-ext.gz at /usr/bin/wmco-tests-ext.gz
+if [[ -z "${OPERATOR_IMAGE:-}" ]]; then
+  echo "ERROR: OPERATOR_IMAGE is not set, cannot set up OTE"
+  exit 1
+fi
+
+echo "Setting up WMCO OTE non-payload binary registration..."
+echo "WMCO image: ${OPERATOR_IMAGE}"
+
+# Create ImageStream in the WMCO namespace
+oc apply -n "$WMCO_NS" -f - <<EOF
+apiVersion: image.openshift.io/v1
+kind: ImageStream
+metadata:
+  name: wmco-ote
+  namespace: ${WMCO_NS}
+EOF
+
+# Import the WMCO CI image as an ImageStreamTag.
+# The CI image (Dockerfile.ci) contains /usr/bin/wmco-tests-ext.gz.
+oc import-image wmco-ote:latest \
+  -n "$WMCO_NS" \
+  --from="${OPERATOR_IMAGE}" \
+  --confirm
+
+# Annotate the ImageStreamTag so openshift-tests can discover the OTE binary
+oc annotate imagestreamtag wmco-ote:latest \
+  -n "$WMCO_NS" \
+  --overwrite \
+  "testextension.redhat.io/component=windows-machine-config-operator" \
+  "testextension.redhat.io/binary=/usr/bin/wmco-tests-ext.gz"
+
+# Install the TestExtensionAdmission CRD (introduced in openshift/origin#30863)
+openshift-tests extension-admission install-crd
+
+# Create TestExtensionAdmission CR permitting the WMCO namespace
+openshift-tests extension-admission create wmco \
+  --permit="${WMCO_NS}/wmco-ote"
+
+echo "OTE setup complete. WMCO test binary is now discoverable by openshift-tests."

ci-operator/step-registry/windows/ote-setup/windows-ote-setup-ref.yaml

@@ -0,0 +1,22 @@
+ref:
+  as: windows-ote-setup
+  from: tests
+  cli: latest
+  commands: windows-ote-setup-commands.sh
+  resources:
+    requests:
+      cpu: 100m
+      memory: 200Mi
+  dependencies:
+    - env: OPERATOR_IMAGE
+      name: windows-machine-config-operator-test
+  documentation: |-
+    Sets up OTE (non-payload extension binary) discovery for the Windows Machine
+    Config Operator. Creates an ImageStream pointing to the WMCO CI image (which
+    contains wmco-tests-ext.gz at /usr/bin/wmco-tests-ext.gz), annotates it with
+    testextension.redhat.io annotations for OTE discovery, installs the
+    TestExtensionAdmission CRD, and creates an admission CR permitting the WMCO
+    namespace.
+
+    This step must run after WMCO is deployed and before openshift-tests runs.
+    It implements the non-payload OTE binary mechanism from openshift/origin#30863.