Add test to rotate keys until an old one invalidades

[afaranha]

Jira: OSPRH-9674

[afaranha]

/retest

[Deydra71]

/test keystone-operator-build-deploy-kuttl

[Deydra71]

Updates:

Replaced oc patch with oc apply to handle the entire resource replacement reliably. oc patch often resulted in inconsistent updates or partial changes in keystone secret, which resulted in incomplete rotation triggers (secret annotation was updated, but fernet keys weren't rotated... but this was not happening 100% of times.)
oc apply ensures the full configuration is applied cleanly.

Increased the timeout duration for rollout status checks to accommodate slower deployments observed during rotations. The 100 seconds might not be necessary for CI, but in my environment it was the first value that prevented premature failures.

TODO 1 : Check the validate_test_token.sh script, the grep is probably not working correctly (use the updated one from test_invalid_token.sh script.

TODO 2(me): Resolve the script hack/configure_local_webhook.sh added by mistake, it's probably a remnant from rebasing...

[Deydra71]

/test keystone-operator-build-deploy-kuttl

timeout

[stuggi]

/lgtm

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: afaranha, stuggi, xek

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [stuggi]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[Deydra71]

/cherry-pick 18.0-fr1

[openshift-cherrypick-robot]

@Deydra71: #503 failed to apply on top of branch "18.0-fr1":

Applying: Update fernet keys rotation scripts
error: mode change for tests/kuttl/tests/fernet_rotation/03-cleanup-openstackclient.yaml, which is not in current HEAD
error: could not build fake ancestor
hint: Use 'git am --show-current-patch=diff' to see the failed patch
hint: When you have resolved this problem, run "git am --continue".
hint: If you prefer to skip this patch, run "git am --skip" instead.
hint: To restore the original branch and stop patching, run "git am --abort".
hint: Disable this message with "git config advice.mergeConflict false"
Patch failed at 0001 Update fernet keys rotation scripts

In response to this:

/cherry-pick 18.0-fr1

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[Deydra71]

/cherry-pick 18.0-fr1

[openshift-cherrypick-robot]

@Deydra71: new pull request created: #521

In response to this:

/cherry-pick 18.0-fr1

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.