[federation] Fix InstallPlan approval using ambiguous short name

The "oc get ip" command resolves to Kubernetes services instead of
installplans.operators.coreos.com, causing the approval task to fail
with "installplans.operators.coreos.com 172.30.0.1 not found" (a
cluster service IP mistaken for an InstallPlan name).

Replace the shell command with Ansible-native tasks: extract the
InstallPlan name from the already-registered ip_list variable using
the same label filter as the wait task, then approve it via
kubernetes.core.k8s.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Luca Miccini <lmiccini@redhat.com>

Author: 2 people

roles/federation/tasks/run_keycloak_setup.yml

@@ -64,15 +64,33 @@
   retries: 30
   delay: 40
 
+- name: Get rhsso install plan name
+  ansible.builtin.set_fact:
+    _rhsso_ip_name: "{{ item.metadata.name }}"
+    _rhsso_ip_namespace: "{{ item.metadata.namespace }}"
+  loop: >-
+    {{
+      ip_list.resources |
+      selectattr('metadata.labels', 'defined') |
+      list
+    }}
+  when: >-
+    item.metadata.labels | dict2items |
+    selectattr('key', 'match', '.*rhsso-operator.*') |
+    list | length > 0
+  loop_control:
+    label: "{{ item.metadata.name }}"
+
 - name: Approve rhsso operator install plan
-  environment:
-    KUBECONFIG: "{{ cifmw_openshift_kubeconfig }}"
-    PATH: "{{ cifmw_path }}"
-  ansible.builtin.shell: >-
-    oc patch installplan
-    $(oc get ip
-    -o=jsonpath='{.items[].metadata.name}')
-    --type merge --patch '{"spec":{"approved":true}}'
+  kubernetes.core.k8s:
+    kubeconfig: "{{ cifmw_openshift_kubeconfig }}"
+    api_version: operators.coreos.com/v1alpha1
+    kind: InstallPlan
+    name: "{{ _rhsso_ip_name }}"
+    namespace: "{{ _rhsso_ip_namespace }}"
+    definition:
+      spec:
+        approved: true
 
 - name: Add sso admin user secret
   kubernetes.core.k8s: