[kustomize_deploy] Fix MetalLB CR creation race with webhook readiness

The MetalLB validating webhook can reject CR creation with "no endpoints
available" when the operator's webhook services aren't fully ready yet.
The existing deployment availability checks pass before the backing
Endpoints objects have addresses populated, creating a window where
CR creation fails.

Add an explicit wait for all four MetalLB webhook endpoint services
(metallb-operator-controller-manager-service,
metallb-operator-webhook-server-service,
metallb-operator-webhook-service, webhook-service) to have at least
one ready address before applying MetalLB CRs. Also add retry logic
(retries: 10, delay: 15) to the CR apply step itself as a safety net
for any remaining transient webhook failures.

Co-Authored-By: Claude <noreply@anthropic.com>
Signed-off-by: Roberto Alfieri <ralfieri@redhat.com>

Author: 2 people

roles/kustomize_deploy/tasks/install_operators.yml

@@ -325,6 +325,28 @@
       register: _webhook_server_deployment
       until: _webhook_server_deployment is success
 
+    - name: Wait for MetalLB webhook endpoints to have addresses
+      kubernetes.core.k8s_info:
+        kubeconfig: "{{ cifmw_openshift_kubeconfig }}"
+        api_version: v1
+        kind: Endpoints
+        namespace: metallb-system
+        name: "{{ item }}"
+      retries: 10
+      delay: 15
+      register: _metallb_webhook_endpoints
+      until:
+        - _metallb_webhook_endpoints.resources is defined
+        - _metallb_webhook_endpoints.resources | length == 1
+        - >-
+          (_metallb_webhook_endpoints.resources | first).subsets | default([])
+          | map(attribute='addresses', default=[]) | flatten | length > 0
+      loop:
+        - metallb-operator-controller-manager-service
+        - metallb-operator-webhook-server-service
+        - metallb-operator-webhook-service
+        - webhook-service
+
     - name: Wait until NMstate operator resources are deployed
       kubernetes.core.k8s_info:
         kubeconfig: "{{ cifmw_openshift_kubeconfig }}"
@@ -374,6 +396,10 @@
           cifmw_kustomize_deploy_check_mode |
           default(false, true)
         }}
+      retries: 10
+      delay: 15
+      register: _metallb_cr_apply
+      until: _metallb_cr_apply is success
 
     - name: Wait for MetalLB speaker pods
       kubernetes.core.k8s_info: