test(e2e): add orchestrator RHDH entity workflow tests

.ibm/pipelines/resources/config_map/app-config-rhdh-rbac.yaml

@@ -114,6 +114,15 @@ catalog:
         - allow: [User, Group]
     - type: url
       target: https://github.com/redhat-developer/rhdh/blob/main/catalog-entities/e2e-test-resources/rbac-transitive-parent-ownership.yaml
+    # Orchestrator entity-workflow integration templates (RHIDP-11833 through RHIDP-11840)
+    - type: url
+      target: https://github.com/redhat-developer/rhdh-plugins/blob/main/workspaces/orchestrator/entities/greet-with-new-component/yamlgreet_with_new_component.yaml
+    - type: url
+      target: https://github.com/redhat-developer/rhdh-plugins/blob/main/workspaces/orchestrator/entities/yamlgreet.yaml
+    - type: url
+      target: https://github.com/testetson22/greeting_54mjks/blob/main/templates/greeting/greeting.yaml
+    - type: url
+      target: https://github.com/testetson22/greeting_54mjks/blob/main/templates/greeting/greeting_w_component.yaml
   providers:
     keycloakOrg:
       default:
@@ -165,6 +174,7 @@ permission:
       - scaffolder
       - kubernetes
       - scorecard
+      - orchestrator
     admin:
       users:
         - name: user:default/rhdh-qe

.ibm/pipelines/resources/config_map/app-config-rhdh.yaml

@@ -167,6 +167,15 @@ catalog:
       target: https://github.com/backstage/backstage/blob/master/packages/catalog-model/examples/acme-corp.yaml
       rules:
         - allow: [User, Group]
+    # Orchestrator entity-workflow integration templates (RHIDP-11833 through RHIDP-11840)
+    - type: url
+      target: https://github.com/redhat-developer/rhdh-plugins/blob/main/workspaces/orchestrator/entities/greet-with-new-component/yamlgreet_with_new_component.yaml
+    - type: url
+      target: https://github.com/redhat-developer/rhdh-plugins/blob/main/workspaces/orchestrator/entities/yamlgreet.yaml
+    - type: url
+      target: https://github.com/testetson22/greeting_54mjks/blob/main/templates/greeting/greeting.yaml
+    - type: url
+      target: https://github.com/testetson22/greeting_54mjks/blob/main/templates/greeting/greeting_w_component.yaml
   providers:
     keycloakOrg:
       default:

.ibm/pipelines/resources/config_map/rbac-policy.csv

@@ -53,3 +53,35 @@ g, user:default/rhdh-qe-8, role:default/owned_resource_reader
 
 g, user:default/rhdh-qe-9, role:default/all_resource_reader
 g, user:default/rhdh-qe-9, role:default/conditional_denier
+
+#######################################################################
+# Orchestrator Entity-Workflow RBAC (RHIDP-11839, RHIDP-11840)
+#######################################################################
+
+# catalogSuperuser: full catalog + scaffolder + orchestrator.workflow
+p, role:default/catalogSuperuser, catalog-entity, read, allow
+p, role:default/catalogSuperuser, catalog.entity.create, create, allow
+p, role:default/catalogSuperuser, catalog.entity.delete, delete, allow
+p, role:default/catalogSuperuser, catalog.entity.refresh, update, allow
+p, role:default/catalogSuperuser, catalog.location.read, read, allow
+p, role:default/catalogSuperuser, catalog.location.create, create, allow
+p, role:default/catalogSuperuser, catalog.location.delete, delete, allow
+p, role:default/catalogSuperuser, orchestrator.workflow, read, allow
+p, role:default/catalogSuperuser, orchestrator.workflow.use, update, allow
+p, role:default/catalogSuperuser, scaffolder.action.execute, use, allow
+p, role:default/catalogSuperuser, scaffolder.task.create, create, allow
+p, role:default/catalogSuperuser, scaffolder.task.read, read, allow
+g, user:default/catalog-user, role:default/catalogSuperuser
+
+# catalogSuperuserNoWorkflow: catalog + scaffolder, NO orchestrator
+p, role:default/catalogSuperuserNoWorkflow, catalog-entity, read, allow
+p, role:default/catalogSuperuserNoWorkflow, catalog.entity.create, create, allow
+p, role:default/catalogSuperuserNoWorkflow, catalog.entity.delete, delete, allow
+p, role:default/catalogSuperuserNoWorkflow, catalog.entity.refresh, update, allow
+p, role:default/catalogSuperuserNoWorkflow, catalog.location.read, read, allow
+p, role:default/catalogSuperuserNoWorkflow, catalog.location.create, create, allow
+p, role:default/catalogSuperuserNoWorkflow, catalog.location.delete, delete, allow
+p, role:default/catalogSuperuserNoWorkflow, scaffolder.action.execute, use, allow
+p, role:default/catalogSuperuserNoWorkflow, scaffolder.task.create, create, allow
+p, role:default/catalogSuperuserNoWorkflow, scaffolder.task.read, read, allow
+g, user:default/catalog-user-no-workflow, role:default/catalogSuperuserNoWorkflow

.ibm/pipelines/value_files/values_showcase-rbac.yaml

@@ -331,9 +331,9 @@ global:
                     config:
                       layout:
                         gridColumn: "1 / -1"
-                        if:
-                          anyOf:
-                            - IsOrchestratorCatalogTabAvailable
+                      if:
+                        anyOf:
+                          - IsOrchestratorCatalogTabAvailable
       - package: "oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-backend:bs_1.45.3__8.3.0!red-hat-developer-hub-backstage-plugin-orchestrator-backend"
         disabled: false
         pluginConfig:

.ibm/pipelines/value_files/values_showcase.yaml

@@ -343,9 +343,9 @@ global:
                     config:
                       layout:
                         gridColumn: "1 / -1"
-                        if:
-                          anyOf:
-                            - IsOrchestratorCatalogTabAvailable
+                      if:
+                        anyOf:
+                          - IsOrchestratorCatalogTabAvailable
       - package: "oci://ghcr.io/redhat-developer/rhdh-plugin-export-overlays/red-hat-developer-hub-backstage-plugin-orchestrator-backend:bs_1.45.3__8.3.0!red-hat-developer-hub-backstage-plugin-orchestrator-backend"
         disabled: false
         pluginConfig: