e2e: add policy-controller operator upgrade pipeline

[JasonPowr]

• Add a new integration PipelineRun for the policy-controller operator upgrade scenario.
• The pipeline provisions an ephemeral Hypershift cluster, installs RHTAS/Keycloak/TAS, runs upgrade tests (go test -tags=upgrade), and processes test results.
• Update the default RHTAS_BUNDLE_IMAGE from 1.2.0 to 1.3.1

Working Implementation

• fix: PCO add upgrade path from tech-preview to stable fbc#220
• https://konflux-ui.apps.stone-prd-rh01.pg1f.p1.openshiftapps.com/ns/rhtas-tenant/applications/pco-fbc-v4-19/pipelineruns/policy-controller-operator-upgrade-4bh6v

[osmman]

@JasonPowr PR has conflict

[github-actions]

Configuration Diff

1 document(s) impacted:

+ 0 added
- 0 removed
! 1 modified

Diff

@@ spec.resources @@
# projctl.konflux.dev/v1beta1/ProjectDevelopmentStreamTemplate/rhtas-tenant/pco-fbc-template
! + one list entry added:
+   - apiVersion: appstudio.redhat.com/v1beta2
+     kind: IntegrationTestScenario
+     metadata:
+       name: {{.application}}{{.nameSuffix}}-upgrade
+       labels:
+         test.appstudio.openshift.io/optional: "false"
+     spec:
+       application: {{.application}}{{.nameSuffix}}
+       contexts:
+       - name: component_{{.application}}{{.nameSuffix}}
+         description: "execute the upgrade integration test when component {{.application}}{{.nameSuffix}} updates"
+       params:
+       - name: OCP_VERSION
+         value: {{.ocpVersion}}
+       - name: POLICY_CONTROLLER_OPERATOR_GIT_REVISION
+         value: {{.policyControllerOperatorGitRevision}}
+       - name: UPGRADE_FROM_CHANNEL
+         value: tech-preview
+       - name: UPGRADE_TO_CHANNEL
+         value: {{.installChannel}}
+       resolverRef:
+         params:
+         - name: url
+           value: "https://github.com/securesign/pipelines.git"
+         - name: revision
+           value: main
+         - name: pathInRepo
+           value: pipelines/integration-test/pco-operator-upgrade.yaml
+         resolver: git
+         resourceKind: pipelinerun

---

_{📦 Artifacts: base-output.yaml, head-output.yaml, dyff-output.txt}