[WINC-1777] Add OTE extension binary skeleton for Windows Containers tests

Add initial OTE (OpenShift Tests Extension) binary using upstream Ginkgo
(github.com/onsi/ginkgo/v2) without the OpenShift fork.

Tests are registered as plain Go functions via et.ExtensionTestSpecs instead
of BuildExtensionTestSpecsFromOpenShiftGinkgoSuite(), which requires the
OpenShift Ginkgo fork's internal APIs. This keeps WMCO's go.mod clean.

Changes:
- cmd/windows-machine-config-operator-tests-ext/main.go: OTE binary with
  four suites (windows/all, windows/parallel, windows/serial, windows/storage).
  Specs registered manually; no OpenShift Ginkgo fork required.
- test/extended/winc.go: OCP-37362 as a plain Go function returning error
- test/extended/utils/cli.go: lightweight oc wrapper; AsAdmin() wired to
  --as=system:admin; NewCLIWithoutNamespace delegates to NewCLI("");
  filepath.Join used for default kubeconfig path
- Makefile: add build-tests-ext target with mkdir -p guard
- Containerfile: add COPY test test for Konflux build
- go.mod: add openshift-tests-extension dependency

Verified locally:
  make build-tests-ext                             OK
  ./windows-machine-config-operator-tests-ext list 1 test listed
  ./windows-machine-config-operator-tests-ext run-test OCP-37362  PASSED
  (Azure IPI, OCP 4.20, WMCO v10.20.1)

Jira: WINC-1777

Author: weinliu

Containerfile

@@ -88,6 +88,7 @@ COPY cmd cmd
 COPY controllers controllers
 COPY hack hack
 COPY pkg pkg
+COPY test test
 RUN make build
 RUN make build-daemon
 

Makefile

@@ -103,6 +103,14 @@ build: fmt vet
 build-daemon:
 	env GOOS=windows GOARCH=amd64 go build -o ${OUTPUT_DIR}/bin/windows-instance-config-daemon.exe ./cmd/daemon
 
+# Build the OTE (OpenShift Tests Extension) binary for Windows Containers tests.
+# GO_COMPLIANCE_POLICY=exempt_all is required for test binaries per ART compliance policy.
+.PHONY: build-tests-ext
+build-tests-ext:
+	mkdir -p ${OUTPUT_DIR}/bin
+	GO_COMPLIANCE_POLICY="exempt_all" go build -o ${OUTPUT_DIR}/bin/windows-machine-config-operator-tests-ext \
+		./cmd/windows-machine-config-operator-tests-ext
+
 .PHONY: run
 run: manifests generate fmt vet ## Run a controller from your host.
 	go run cmd/operator/main.go

cmd/windows-machine-config-operator-tests-ext/main.go

@@ -0,0 +1,85 @@
+// windows-machine-config-operator-tests-ext is the OTE (OpenShift Tests Extension)
+// binary for Windows Containers tests. Tests are registered as plain Go functions
+// using upstream Ginkgo, without the OpenShift Ginkgo fork.
+//
+// References:
+//   - OTE Integration Guide: https://github.com/openshift-eng/openshift-tests-extension
+package main
+
+import (
+	"context"
+	"os"
+
+	otecmd "github.com/openshift-eng/openshift-tests-extension/pkg/cmd"
+	e "github.com/openshift-eng/openshift-tests-extension/pkg/extension"
+	et "github.com/openshift-eng/openshift-tests-extension/pkg/extension/extensiontests"
+	"github.com/spf13/cobra"
+
+	"github.com/openshift/windows-machine-config-operator/test/extended"
+	"github.com/openshift/windows-machine-config-operator/test/extended/utils"
+)
+
+func main() {
+	registry := e.NewRegistry()
+	ext := e.NewExtension("openshift", "payload", "windows-machine-config-operator")
+
+	// All WINC tests - used for full runs and informing jobs.
+	ext.AddSuite(e.Suite{
+		Name: "windows/all",
+		Qualifiers: []string{
+			`name.contains("[sig-windows]")`,
+		},
+	})
+
+	// Parallel subset: non-Serial, non-Slow, non-Disruptive tests.
+	ext.AddSuite(e.Suite{
+		Name: "windows/parallel",
+		Qualifiers: []string{
+			`name.contains("[sig-windows]") && !name.contains("[Serial]") && !name.contains("[Slow]") && !name.contains("[Disruptive]")`,
+		},
+	})
+
+	// Serial subset: tests that must run in isolation.
+	ext.AddSuite(e.Suite{
+		Name: "windows/serial",
+		Qualifiers: []string{
+			`name.contains("[sig-windows]") && name.contains("[Serial]")`,
+		},
+	})
+
+	// Storage-specific tests.
+	ext.AddSuite(e.Suite{
+		Name: "windows/storage",
+		Qualifiers: []string{
+			`name.contains("[sig-windows]") && name.contains("storage")`,
+		},
+	})
+
+	// Register test specs manually — no OpenShift Ginkgo fork required.
+	specs := et.ExtensionTestSpecs{
+		{
+			Name: "[sig-windows] Windows_Containers Author:rrasouli-Smokerun-Medium-37362-[wmco] wmco using correct golang version [OTP]",
+			Run: func(ctx context.Context) *et.ExtensionTestResult {
+				if err := extended.CheckWmcoGolangVersion(ctx, utils.NewCLIWithoutNamespace()); err != nil {
+					return &et.ExtensionTestResult{Result: et.ResultFailed, Output: err.Error()}
+				}
+				return &et.ExtensionTestResult{Result: et.ResultPassed}
+			},
+		},
+	}
+
+	ext.AddSpecs(specs)
+	registry.Register(ext)
+
+	root := &cobra.Command{
+		Use:   "windows-machine-config-operator-tests-ext",
+		Short: "OpenShift Windows Containers test extension (OTE)",
+		Long:  "Runs the WINC test suite as an OpenShift Tests Extension binary.",
+	}
+
+	root.AddCommand(otecmd.DefaultExtensionCommands(registry)...)
+
+	if err := root.Execute(); err != nil {
+		os.Exit(1)
+	}
+}

go.mod

@@ -8,6 +8,7 @@ require (
 	github.com/coreos/ignition/v2 v2.26.0
 	github.com/go-imports-organizer/goio v1.5.0
 	github.com/go-logr/logr v1.4.3
+	github.com/openshift-eng/openshift-tests-extension v0.0.0-20260127124016-0fed2b824818
 	github.com/openshift/api v0.0.0-20260311132013-1d84ab4f6a62
 	github.com/openshift/client-go v0.0.0-20260306160707-3935d929fc7d
 	github.com/openshift/library-go v0.0.0-20260311094140-ac826d10cb40
@@ -98,6 +99,7 @@ require (
 	github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
 	github.com/onsi/ginkgo v1.16.5 // indirect
 	github.com/peterbourgon/diskv v2.0.1+incompatible // indirect
+	github.com/pkg/errors v0.9.1 // indirect
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/prometheus/client_golang v1.23.2 // indirect
 	github.com/prometheus/client_model v0.6.2 // indirect

go.sum

@@ -506,6 +506,8 @@ github.com/onsi/gomega v1.10.1/go.mod h1:iN09h71vgCQne3DLsj+A5owkum+a2tYe+TOCB1y
 github.com/onsi/gomega v1.10.2/go.mod h1:iN09h71vgCQne3DLsj+A5owkum+a2tYe+TOCB1ybHNo=
 github.com/onsi/gomega v1.39.1 h1:1IJLAad4zjPn2PsnhH70V4DKRFlrCzGBNrNaru+Vf28=
 github.com/onsi/gomega v1.39.1/go.mod h1:hL6yVALoTOxeWudERyfppUcZXjMwIMLnuSfruD2lcfg=
+github.com/openshift-eng/openshift-tests-extension v0.0.0-20260127124016-0fed2b824818 h1:jJLE/aCAqDf8U4wc3bE1IEKgIxbb0ICjCNVFA49x/8s=
+github.com/openshift-eng/openshift-tests-extension v0.0.0-20260127124016-0fed2b824818/go.mod h1:6gkP5f2HL0meusT0Aim8icAspcD1cG055xxBZ9yC68M=
 github.com/openshift/api v0.0.0-20260311132013-1d84ab4f6a62 h1:Y5bgh8kcu6XujKNCASYNWdn8COBlfdgZpmwOaZqKD4E=
 github.com/openshift/api v0.0.0-20260311132013-1d84ab4f6a62/go.mod h1:pyVjK0nZ4sRs4fuQVQ4rubsJdahI1PB94LnQ8sGdvxo=
 github.com/openshift/client-go v0.0.0-20260306160707-3935d929fc7d h1:T+9HFgEEcnu1TDDfsO5JcJC6N0/Kzob5AtG9IpITHJ8=
@@ -526,6 +528,7 @@ github.com/peterbourgon/diskv v2.0.1+incompatible h1:UBdAOUP5p4RWqPBg048CAvpKN+v
 github.com/peterbourgon/diskv v2.0.1+incompatible/go.mod h1:uqqh8zWWbv1HBMNONnaR/tNboyR3/BZd58JJSHlUSCU=
 github.com/pkg/errors v0.8.0/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pkg/errors v0.8.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
+github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4=
 github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pkg/sftp v1.13.10 h1:+5FbKNTe5Z9aspU88DPIKJ9z2KZoaGCu6Sr6kKR/5mU=
 github.com/pkg/sftp v1.13.10/go.mod h1:bJ1a7uDhrX/4OII+agvy28lzRvQrmIQuaHrcI1HbeGA=

test/extended/utils/cli.go

@@ -0,0 +1,77 @@
+package utils
+
+import (
+	"bytes"
+	"fmt"
+	"os"
+	"os/exec"
+	"path/filepath"
+	"strings"
+)
+
+// CLI wraps the oc command-line tool for use in OTE Ginkgo tests.
+type CLI struct {
+	namespace  string
+	asAdmin    bool
+	kubeconfig string
+}
+
+// NewCLI creates a CLI instance with the given namespace.
+func NewCLI(namespace string) *CLI {
+	return &CLI{
+		namespace:  namespace,
+		kubeconfig: kubeconfig(),
+	}
+}
+
+// NewCLIWithoutNamespace creates a CLI instance without a namespace (for cluster-scoped resources).
+func NewCLIWithoutNamespace() *CLI {
+	return NewCLI("")
+}
+
+// AsAdmin returns a copy of the CLI that runs as cluster-admin.
+func (c *CLI) AsAdmin() *CLI {
+	copy := *c
+	copy.asAdmin = true
+	return &copy
+}
+
+// Run executes an oc subcommand with the given arguments and returns stdout, stderr, and any error.
+func (c *CLI) Run(verb string, args ...string) (string, string, error) {
+	cmdArgs := []string{verb}
+	if c.asAdmin {
+		cmdArgs = append(cmdArgs, "--as=system:admin")
+	}
+	if c.namespace != "" {
+		cmdArgs = append(cmdArgs, "-n", c.namespace)
+	}
+	cmdArgs = append(cmdArgs, args...)
+
+	cmd := exec.Command("oc", cmdArgs...)
+	if c.kubeconfig != "" {
+		cmd.Env = append(os.Environ(), "KUBECONFIG="+c.kubeconfig)
+	}
+
+	var stdout, stderr bytes.Buffer
+	cmd.Stdout = &stdout
+	cmd.Stderr = &stderr
+
+	err := cmd.Run()
+	return strings.TrimSpace(stdout.String()), strings.TrimSpace(stderr.String()), err
+}
+
+// Output is a convenience wrapper that returns stdout or an error combining stderr.
+func (c *CLI) Output(verb string, args ...string) (string, error) {
+	out, errOut, err := c.Run(verb, args...)
+	if err != nil {
+		return "", fmt.Errorf("%w\nstderr: %s", err, errOut)
+	}
+	return out, nil
+}
+
+func kubeconfig() string {
+	if kc := os.Getenv("KUBECONFIG"); kc != "" {
+		return kc
+	}
+	return filepath.Join(os.Getenv("HOME"), ".kube", "config")
+}

test/extended/winc.go

@@ -0,0 +1,53 @@
+package extended
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"strings"
+
+	"github.com/openshift/windows-machine-config-operator/test/extended/utils"
+)
+
+const (
+	wmcoNamespace = "openshift-windows-machine-config-operator"
+)
+
+// CheckWmcoGolangVersion verifies that the golang version reported by the cluster
+// matches the version used to build the WMCO binary (OCP-37362).
+func CheckWmcoGolangVersion(_ context.Context, oc *utils.CLI) error {
+	serverVersion, err := oc.AsAdmin().Output("get", "--raw", "/version")
+	if err != nil {
+		return fmt.Errorf("failed to get cluster version: %w", err)
+	}
+
+	var versionInfo struct {
+		GoVersion string `json:"goVersion"`
+	}
+	if err := json.Unmarshal([]byte(serverVersion), &versionInfo); err != nil {
+		return fmt.Errorf("failed to parse /version JSON: %w", err)
+	}
+	if versionInfo.GoVersion == "" {
+		return fmt.Errorf("goVersion not found in /version response")
+	}
+
+	parts := strings.Split(versionInfo.GoVersion, ".")
+	if len(parts) < 2 {
+		return fmt.Errorf("unexpected golang version format: %s", versionInfo.GoVersion)
+	}
+	truncated := strings.Join(parts[:2], ".")
+
+	logs, err := oc.AsAdmin().Output("logs",
+		"deployment.apps/windows-machine-config-operator",
+		"-n", wmcoNamespace,
+	)
+	if err != nil {
+		return fmt.Errorf("failed to get WMCO logs: %w", err)
+	}
+
+	if !strings.Contains(logs, truncated) {
+		return fmt.Errorf("WMCO logs do not contain expected golang version %s (full: %s)",
+			truncated, versionInfo.GoVersion)
+	}
+	return nil
+}