[WINC-1777] Add OTE extension binary skeleton for Windows Containers tests

Add initial OTE (OpenShift Tests Extension) binary following the same pattern
as MCO and NTO, with OCP-37362 as a pilot test case.

Changes:
- cmd/windows-machine-config-operator-tests-ext/main.go: OTE binary with
  four suites: windows/all, windows/parallel, windows/serial, windows/storage.
  Suites named parallel/serial (not conformance/*) until tests carry conformance
  markers and achieve >=99% pass rate.
- test/extended/winc.go: OCP-37362 pilot test; uses json.Unmarshal for robust
  /version parsing with length validation before slice
- test/extended/utils/cli.go: minimal oc wrapper; AsAdmin() wired to
  --as=system:admin in Run()
- test/extended/suite_test.go: Ginkgo suite bootstrap
- Makefile: add build-tests-ext target with mkdir -p guard
- go.mod: add openshift-tests-extension + OpenShift ginkgo fork replace
  directive (required for OTE; TODO confirm with Mansi re upstream Ginkgo)

Verified locally:
  make build-tests-ext                             OK
  ./windows-machine-config-operator-tests-ext list 1 test listed
  ./windows-machine-config-operator-tests-ext run-test OCP-37362  PASSED
  (Azure IPI, OCP 4.20, WMCO v10.20.1)

Jira: WINC-1777

Author: weinliu

Makefile

@@ -103,6 +103,14 @@ build: fmt vet
 build-daemon:
 	env GOOS=windows GOARCH=amd64 go build -o ${OUTPUT_DIR}/bin/windows-instance-config-daemon.exe ./cmd/daemon
 
+# Build the OTE (OpenShift Tests Extension) binary for Windows Containers tests.
+# GO_COMPLIANCE_POLICY=exempt_all is required for test binaries per ART compliance policy.
+.PHONY: build-tests-ext
+build-tests-ext:
+	mkdir -p ${OUTPUT_DIR}/bin
+	GO_COMPLIANCE_POLICY="exempt_all" go build -o ${OUTPUT_DIR}/bin/windows-machine-config-operator-tests-ext \
+		./cmd/windows-machine-config-operator-tests-ext
+
 .PHONY: run
 run: manifests generate fmt vet ## Run a controller from your host.
 	go run cmd/operator/main.go

cmd/windows-machine-config-operator-tests-ext/main.go

@@ -0,0 +1,105 @@
+// windows-machine-config-operator-tests-ext is the OTE (OpenShift Tests Extension)
+// binary for Windows Containers tests. It wraps WINC Ginkgo tests and exposes them
+// through the standardized OTE interface (info / list / run-test / run-suite).
+//
+// References:
+//   - OTE Integration Guide: https://github.com/openshift-eng/openshift-tests-extension
+//   - Similar implementation (NTO): https://github.com/openshift/cluster-node-tuning-operator/blob/main/cmd/cluster-node-tuning-operator-test-ext/main.go
+//   - Similar implementation (MCO): https://github.com/openshift/machine-config-operator/blob/master/cmd/machine-config-tests-ext/main.go
+package main
+
+import (
+	"fmt"
+	"os"
+	"strings"
+
+	otecmd "github.com/openshift-eng/openshift-tests-extension/pkg/cmd"
+	e "github.com/openshift-eng/openshift-tests-extension/pkg/extension"
+	et "github.com/openshift-eng/openshift-tests-extension/pkg/extension/extensiontests"
+	g "github.com/openshift-eng/openshift-tests-extension/pkg/ginkgo"
+	"github.com/spf13/cobra"
+
+	_ "github.com/openshift/windows-machine-config-operator/test/extended"
+	// Register WINC Ginkgo tests.
+)
+
+func main() {
+	registry := e.NewRegistry()
+	ext := e.NewExtension("openshift", "payload", "windows-machine-config-operator")
+
+	// All WINC tests - used for full runs and informing jobs.
+	ext.AddSuite(e.Suite{
+		Name: "windows/all",
+		Qualifiers: []string{
+			`name.contains("[sig-windows]")`,
+		},
+	})
+
+	// Parallel subset: non-Serial, non-Slow, non-Disruptive tests.
+	// Renamed from windows/conformance/parallel until tests carry an explicit
+	// conformance marker and achieve >=99% pass rate, at which point Parents
+	// pointing to openshift/conformance/parallel will be added.
+	ext.AddSuite(e.Suite{
+		Name: "windows/parallel",
+		Qualifiers: []string{
+			`name.contains("[sig-windows]") && !name.contains("[Serial]") && !name.contains("[Slow]") && !name.contains("[Disruptive]")`,
+		},
+	})
+
+	// Serial subset: tests that must run in isolation.
+	// Renamed from windows/conformance/serial for the same reason as above.
+	ext.AddSuite(e.Suite{
+		Name: "windows/serial",
+		Qualifiers: []string{
+			`name.contains("[sig-windows]") && name.contains("[Serial]")`,
+		},
+	})
+
+	// Storage-specific tests.
+	ext.AddSuite(e.Suite{
+		Name: "windows/storage",
+		Qualifiers: []string{
+			`name.contains("[sig-windows]") && name.contains("storage")`,
+		},
+	})
+
+	specs, err := g.BuildExtensionTestSpecsFromOpenShiftGinkgoSuite()
+	if err != nil {
+		panic(fmt.Sprintf("couldn't build extension test specs from ginkgo: %v", err))
+	}
+
+	applyPlatformFilters(specs)
+
+	ext.AddSpecs(specs)
+	registry.Register(ext)
+
+	root := &cobra.Command{
+		Use:   "windows-machine-config-operator-tests-ext",
+		Short: "OpenShift Windows Containers test extension (OTE)",
+		Long:  "Runs the WINC test suite as an OpenShift Tests Extension binary.",
+	}
+
+	root.AddCommand(otecmd.DefaultExtensionCommands(registry)...)
+
+	if err := root.Execute(); err != nil {
+		os.Exit(1)
+	}
+}
+
+// applyPlatformFilters converts "Platform:<name>" and "NoPlatform:<name>" Ginkgo
+// labels into OTE include/exclude constraints so that openshift-tests can filter
+// tests before execution rather than relying on g.Skip() inside the test body.
+func applyPlatformFilters(specs et.ExtensionTestSpecs) {
+	specs.Walk(func(spec *et.ExtensionTestSpec) {
+		for label := range spec.Labels {
+			if strings.HasPrefix(label, "Platform:") {
+				platform := strings.TrimPrefix(label, "Platform:")
+				spec.Include(et.PlatformEquals(platform))
+			}
+			if strings.HasPrefix(label, "NoPlatform:") {
+				platform := strings.TrimPrefix(label, "NoPlatform:")
+				spec.Exclude(et.PlatformEquals(platform))
+			}
+		}
+	})
+}

go.mod

@@ -8,6 +8,9 @@ replace (
 	// fix CVE-2025-30204 transitive deps still using older v4. Remove once `go mod graph` shows only 4.5.2 or higher
 	github.com/golang-jwt/jwt/v4 => github.com/golang-jwt/jwt/v4 v4.5.2
 	github.com/golang-jwt/jwt/v5 => github.com/golang-jwt/jwt/v5 v5.2.2
+	// Required for openshift-tests-extension compatibility (uses OpenShift's ginkgo fork).
+	// TODO: confirm with Mansi whether this can be avoided with upstream Ginkgo.
+	github.com/onsi/ginkgo/v2 => github.com/openshift/onsi-ginkgo/v2 v2.6.1-0.20241205171354-8006f302fd12
 )
 
 require (
@@ -16,6 +19,9 @@ require (
 	github.com/coreos/ignition/v2 v2.23.0
 	github.com/go-imports-organizer/goio v1.5.0
 	github.com/go-logr/logr v1.4.3
+	github.com/onsi/ginkgo/v2 v2.22.2
+	github.com/onsi/gomega v1.36.2
+	github.com/openshift-eng/openshift-tests-extension v0.0.0-20260127124016-0fed2b824818
 	github.com/openshift/api v0.0.0-20260213204242-d34f11c515b3
 	github.com/openshift/client-go v0.0.0-20260213141500-06efc6dce93b
 	github.com/openshift/library-go v0.0.0-20260213153706-03f1709971c5
@@ -86,11 +92,13 @@ require (
 	github.com/go-openapi/swag/stringutils v0.25.4 // indirect
 	github.com/go-openapi/swag/typeutils v0.25.4 // indirect
 	github.com/go-openapi/swag/yamlutils v0.25.4 // indirect
+	github.com/go-task/slim-sprig/v3 v3.0.0 // indirect
 	github.com/gogo/protobuf v1.3.2 // indirect
 	github.com/google/btree v1.1.3 // indirect
 	github.com/google/cel-go v0.26.0 // indirect
 	github.com/google/gnostic-models v0.7.1 // indirect
 	github.com/google/go-cmp v0.7.0 // indirect
+	github.com/google/pprof v0.0.0-20241210010833-40e02aabc2ad // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect
 	github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
@@ -109,9 +117,8 @@ require (
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
 	github.com/mxk/go-flowrate v0.0.0-20140419014527-cca7078d478f // indirect
 	github.com/onsi/ginkgo v1.16.5 // indirect
-	github.com/onsi/ginkgo/v2 v2.22.2 // indirect
-	github.com/onsi/gomega v1.36.2 // indirect
 	github.com/peterbourgon/diskv v2.0.1+incompatible // indirect
+	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/prometheus/client_golang v1.23.2 // indirect
 	github.com/prometheus/client_model v0.6.2 // indirect
@@ -143,6 +150,7 @@ require (
 	golang.org/x/term v0.40.0 // indirect
 	golang.org/x/text v0.34.0 // indirect
 	golang.org/x/time v0.14.0 // indirect
+	golang.org/x/tools v0.41.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20250721164621-a45f3dfb1074 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20250721164621-a45f3dfb1074 // indirect

go.sum

@@ -275,7 +275,6 @@ github.com/go-openapi/validate v0.19.5/go.mod h1:8DJv2CVJQ6kGNpFW6eV9N3JviE1C85n
 github.com/go-playground/locales v0.13.0/go.mod h1:taPMhCMXrRLJO55olJkUXHZBHCxTMfnGwq/HNwmWNS8=
 github.com/go-playground/universal-translator v0.17.0/go.mod h1:UkSxE5sNxxRwHyU+Scu5vgOQjsIJAF8j9muTVoKLVtA=
 github.com/go-stack/stack v1.8.0/go.mod h1:v0f6uXyyMGvRgIKkXu+yp6POWl0qKG85gN/melR3HDY=
-github.com/go-task/slim-sprig v0.0.0-20210107165309-348f09dbbbc0 h1:p104kn46Q8WdvHunIJ9dAyjPVtrBPhSr3KT2yUst43I=
 github.com/go-task/slim-sprig v0.0.0-20210107165309-348f09dbbbc0/go.mod h1:fyg7847qk6SyHyPtNmDHnmrv/HOrqktSC+C9fM+CJOE=
 github.com/go-task/slim-sprig/v3 v3.0.0 h1:sUs3vkvUymDpBKi3qH1YSqBQk9+9D/8M2mN1vB6EwHI=
 github.com/go-task/slim-sprig/v3 v3.0.0/go.mod h1:W848ghGpv3Qj3dhTPRyJypKRiqCdHZiAzKg9hl15HA8=
@@ -505,8 +504,6 @@ github.com/onsi/ginkgo v1.12.1/go.mod h1:zj2OWP4+oCPe1qIXoGWkgMRwljMUYCdkwsT2108
 github.com/onsi/ginkgo v1.14.1/go.mod h1:iSB4RoI2tjJc9BBv4NKIKWKya62Rps+oPG/Lv9klQyY=
 github.com/onsi/ginkgo v1.16.5 h1:8xi0RTUf59SOSfEtZMvwTvXYMzG4gV23XVHOZiXNtnE=
 github.com/onsi/ginkgo v1.16.5/go.mod h1:+E8gABHa3K6zRBolWtd+ROzc/U5bkGt0FwiG042wbpU=
-github.com/onsi/ginkgo/v2 v2.22.2 h1:/3X8Panh8/WwhU/3Ssa6rCKqPLuAkVY2I0RoyDLySlU=
-github.com/onsi/ginkgo/v2 v2.22.2/go.mod h1:oeMosUL+8LtarXBHu/c0bx2D/K9zyQ6uX3cTyztHwsk=
 github.com/onsi/gomega v0.0.0-20170829124025-dcabb60a477c/go.mod h1:C1qb7wdrVGGVU+Z6iS04AVkA3Q65CEZX59MT0QO5uiA=
 github.com/onsi/gomega v1.7.0/go.mod h1:ex+gbHU/CVuBBDIJjb2X0qEXbFg53c61hWP/1CpauHY=
 github.com/onsi/gomega v1.7.1/go.mod h1:XdKZgCCFLUoM/7CFJVPcG8C1xQ1AJ0vpAezJrB7JYyY=
@@ -515,12 +512,16 @@ github.com/onsi/gomega v1.10.1/go.mod h1:iN09h71vgCQne3DLsj+A5owkum+a2tYe+TOCB1y
 github.com/onsi/gomega v1.10.2/go.mod h1:iN09h71vgCQne3DLsj+A5owkum+a2tYe+TOCB1ybHNo=
 github.com/onsi/gomega v1.36.2 h1:koNYke6TVk6ZmnyHrCXba/T/MoLBXFjeC1PtvYgw0A8=
 github.com/onsi/gomega v1.36.2/go.mod h1:DdwyADRjrc825LhMEkD76cHR5+pUnjhUN8GlHlRPHzY=
+github.com/openshift-eng/openshift-tests-extension v0.0.0-20260127124016-0fed2b824818 h1:jJLE/aCAqDf8U4wc3bE1IEKgIxbb0ICjCNVFA49x/8s=
+github.com/openshift-eng/openshift-tests-extension v0.0.0-20260127124016-0fed2b824818/go.mod h1:6gkP5f2HL0meusT0Aim8icAspcD1cG055xxBZ9yC68M=
 github.com/openshift/api v0.0.0-20260213204242-d34f11c515b3 h1:SZ8+jxtkMvpb4HDTjSAbaOyhFsw5PiWhjBog+XLY7jc=
 github.com/openshift/api v0.0.0-20260213204242-d34f11c515b3/go.mod h1:d5uzF0YN2nQQFA0jIEWzzOZ+edmo6wzlGLvx5Fhz4uY=
 github.com/openshift/client-go v0.0.0-20260213141500-06efc6dce93b h1:7rTnxq+haKrzUFKQQDylkklyFRtGFox73dlawRlnTA8=
 github.com/openshift/client-go v0.0.0-20260213141500-06efc6dce93b/go.mod h1:V3s8weD4bKXGXaN7d9g3V1QS2gmlYBRI2i/lfIwmroM=
 github.com/openshift/library-go v0.0.0-20260213153706-03f1709971c5 h1:9Pe6iVOMjt9CdA/vaKBNUSoEIjIe1po5Ha3ABRYXLJI=
 github.com/openshift/library-go v0.0.0-20260213153706-03f1709971c5/go.mod h1:K3FoNLgNBFYbFuG+Kr8usAnQxj1w84XogyUp2M8rK8k=
+github.com/openshift/onsi-ginkgo/v2 v2.6.1-0.20241205171354-8006f302fd12 h1:AKx/w1qpS8We43bsRgf8Nll3CGlDHpr/WAXvuedTNZI=
+github.com/openshift/onsi-ginkgo/v2 v2.6.1-0.20241205171354-8006f302fd12/go.mod h1:7Du3c42kxCUegi0IImZ1wUQzMBVecgIHjR1C+NkhLQo=
 github.com/operator-framework/api v0.5.2/go.mod h1:L7IvLd/ckxJEJg/t4oTTlnHKAJIP/p51AvEslW3wYdY=
 github.com/operator-framework/api v0.16.0 h1:swUOhVv7QDszxBTwYM8QAtyeqI4EQHNVAiKMS+xjakY=
 github.com/operator-framework/api v0.16.0/go.mod h1:kk8xJahHJR3bKqrA+A+1VIrhOTmyV76k+ARv+iV+u1Q=

test/extended/suite_test.go

@@ -0,0 +1,13 @@
+package extended
+
+import (
+	"testing"
+
+	g "github.com/onsi/ginkgo/v2"
+	o "github.com/onsi/gomega"
+)
+
+func TestExtended(t *testing.T) {
+	o.RegisterFailHandler(g.Fail)
+	g.RunSpecs(t, "Windows Containers Extended Test Suite")
+}

test/extended/utils/cli.go

@@ -0,0 +1,82 @@
+package utils
+
+import (
+	"bytes"
+	"fmt"
+	"os"
+	"os/exec"
+	"strings"
+)
+
+// CLI wraps the oc command-line tool for use in OTE Ginkgo tests.
+type CLI struct {
+	namespace   string
+	asAdmin     bool
+	noNamespace bool
+	kubeconfig  string
+}
+
+// NewCLI creates a CLI instance with the given namespace.
+func NewCLI(namespace string) *CLI {
+	return &CLI{
+		namespace:  namespace,
+		kubeconfig: kubeconfig(),
+	}
+}
+
+// NewCLIWithoutNamespace creates a CLI instance without a namespace (for cluster-scoped resources).
+func NewCLIWithoutNamespace() *CLI {
+	return &CLI{
+		noNamespace: true,
+		kubeconfig:  kubeconfig(),
+	}
+}
+
+// AsAdmin returns a copy of the CLI that runs as cluster-admin.
+func (c *CLI) AsAdmin() *CLI {
+	copy := *c
+	copy.asAdmin = true
+	return &copy
+}
+
+// Run executes an oc subcommand with the given arguments and returns stdout, stderr, and any error.
+func (c *CLI) Run(verb string, args ...string) (string, string, error) {
+	cmdArgs := []string{verb}
+	if c.asAdmin {
+		cmdArgs = append(cmdArgs, "--as=system:admin")
+	}
+	if c.noNamespace {
+		// no -n flag
+	} else if c.namespace != "" {
+		cmdArgs = append(cmdArgs, "-n", c.namespace)
+	}
+	cmdArgs = append(cmdArgs, args...)
+
+	cmd := exec.Command("oc", cmdArgs...)
+	if c.kubeconfig != "" {
+		cmd.Env = append(os.Environ(), "KUBECONFIG="+c.kubeconfig)
+	}
+
+	var stdout, stderr bytes.Buffer
+	cmd.Stdout = &stdout
+	cmd.Stderr = &stderr
+
+	err := cmd.Run()
+	return strings.TrimSpace(stdout.String()), strings.TrimSpace(stderr.String()), err
+}
+
+// Output is a convenience wrapper that returns stdout or an error combining stderr.
+func (c *CLI) Output(verb string, args ...string) (string, error) {
+	out, errOut, err := c.Run(verb, args...)
+	if err != nil {
+		return "", fmt.Errorf("%w\nstderr: %s", err, errOut)
+	}
+	return out, nil
+}
+
+func kubeconfig() string {
+	if kc := os.Getenv("KUBECONFIG"); kc != "" {
+		return kc
+	}
+	return os.Getenv("HOME") + "/.kube/config"
+}

test/extended/winc.go

@@ -0,0 +1,50 @@
+package extended
+
+import (
+	"encoding/json"
+	"strings"
+
+	g "github.com/onsi/ginkgo/v2"
+	o "github.com/onsi/gomega"
+
+	"github.com/openshift/windows-machine-config-operator/test/extended/utils"
+)
+
+const (
+	wmcoNamespace = "openshift-windows-machine-config-operator"
+)
+
+var _ = g.Describe("[sig-windows] Windows_Containers", func() {
+	var oc = utils.NewCLIWithoutNamespace()
+
+	// author: rrasouli@redhat.com
+	// OCP-37362 - Pilot case for OTE migration to WMCO
+	g.It("Author:rrasouli-Smokerun-Medium-37362-[wmco] wmco using correct golang version [OTP]", func() {
+		g.By("Fetch the correct golang version from cluster")
+		serverVersion, err := oc.AsAdmin().Output("get", "--raw", "/version")
+		o.Expect(err).NotTo(o.HaveOccurred())
+
+		// Unmarshal the version response to extract goVersion safely.
+		var versionInfo struct {
+			GoVersion string `json:"goVersion"`
+		}
+		o.Expect(json.Unmarshal([]byte(serverVersion), &versionInfo)).To(o.Succeed(),
+			"failed to parse /version JSON response")
+		o.Expect(versionInfo.GoVersion).NotTo(o.BeEmpty(), "goVersion not found in /version response")
+
+		// Truncate to major.minor (e.g. "go1.24.6" -> "go1.24")
+		parts := strings.Split(versionInfo.GoVersion, ".")
+		o.Expect(len(parts)).To(o.BeNumerically(">=", 2), "unexpected golang version format: %s", versionInfo.GoVersion)
+		truncated := strings.Join(parts[:2], ".")
+		g.GinkgoWriter.Printf("Golang version: %s, truncated: %s\n", versionInfo.GoVersion, truncated)
+
+		g.By("Compare with golang version in WMCO logs")
+		logs, err := oc.AsAdmin().Output("logs",
+			"deployment.apps/windows-machine-config-operator",
+			"-n", wmcoNamespace,
+		)
+		o.Expect(err).NotTo(o.HaveOccurred())
+		o.Expect(logs).To(o.ContainSubstring(truncated),
+			"WMCO logs do not contain expected golang version %s", truncated)
+	})
+})