fix(#3751): remove redundant ref:// entries for bundled extensions plugins

[fullsend-ai-coder]

The extensions E2E dynamic-plugins.yaml included ref:// entries for three extensions plugins that are bundled inside the RHDH container image as local paths. In nightly mode, ref:// is resolved to {{inherit}} OCI references, but the inherit mechanism cannot match local-path entries in dynamic-plugins.default.yaml, causing the install-dynamic-plugins init container to crash.

Remove the three ref:// entries since the extensions plugins are already enabled by default via local paths. Keep only the oidc-provider auth plugin entry which uses a direct OCI reference.

---

Closes #3751

Post-script verification

• Branch is not main/master (agent/3751-remove-extensions-ref-entries)
• Secret scan passed (gitleaks — 899b60c9a39cb8e4d1b78fc23d2e2f0505a97fb3..HEAD)
• Pre-commit hooks passed (authoritative run on runner)
• Tests ran inside sandbox

[openshift-ci]

Hi @fullsend-ai-coder[bot]. Thanks for your PR.

I'm waiting for a redhat-developer member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 6:12 AM UTC · Completed 6:17 AM UTC

Commit: 7d36a8c · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Cost: $0.68

[fullsend-ai-review]

Review — approve

Summary

This PR removes three redundant ref:// entries from workspaces/extensions/e2e-tests/tests/config/dynamic-plugins.yaml, fixing the nightly E2E test failure described in #3751.

Analysis

Root cause is correctly identified. The ref:// references for the three extensions plugins (catalog-backend-module-extensions, extensions-backend, extensions) are resolved via the {{inherit}} mechanism in nightly mode. This mechanism looks for a matching OCI entry in dynamic-plugins.default.yaml to inherit the version tag. However, these plugins are bundled inside the RHDH container image as local paths (./dynamic-plugins/dist/...), not as OCI references. The OCI-to-local-path mismatch causes the install-dynamic-plugins init container to crash.

Fix is correct. Since the extensions plugins are already included and enabled by default via local paths in the RHDH image, the ref:// entries are entirely redundant — they add nothing in local/PR mode and break nightly mode. Removing them is the right approach.

Remaining entry is unaffected. The oidc-provider auth plugin entry uses a direct OCI reference (oci://ghcr.io/...) rather than ref://, so it bypasses the {{inherit}} mechanism entirely and continues to work in all modes. This plugin is required for the Keycloak auth configuration used by the test spec.

Scope is appropriate. The change is confined to a single E2E test config file within the workspaces/extensions/e2e-tests/ directory, which is within the allowed modification scope for E2E nightly fixes per repo conventions. No plugin source code, CI configuration, or metadata files are modified.

No findings.