feat(e2e): use Bitwarden for local secrets

[zdrapela]

Description

Replace local Vault secret loading with rhdh-e2e-secrets Bitwarden profiles. Consolidate mounted and streamed secret handling, add a host-side Playwright runner, and preserve local cluster authentication across the Podman boundary.

Which issue(s) does this PR fix

• N/A

PR acceptance criteria

• GitHub Actions are completed and successful
• Unit Tests are updated and passing
• E2E Tests are updated and passing
• Documentation is updated if necessary (requirement for new features)
• Add a screenshot if the change is UX/UI related (not applicable)

How to test changes / Special notes to the reviewer

Tests were completed before the final rebase and were not rerun afterward.

[openshift-ci]

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 59.69%. Comparing base (24c2768) to head (cc426c8).
⚠️ Report is 12 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #5404      +/-   ##
==========================================
- Coverage   63.68%   59.69%   -3.99%     
==========================================
  Files         121      109      -12     
  Lines        2288     2062     -226     
  Branches      503      501       -2     
==========================================
- Hits         1457     1231     -226     
  Misses        830      830              
  Partials        1        1              

Flag	Coverage Δ
rhdh	59.69% <ø> (-3.99%)	⬇️

Components	Coverage Δ
Backend plugins	∅ <ø> (∅)
Backend app	69.69% <ø> (ø)
Frontend app	58.82% <ø> (ø)
Plugin utils	∅ <ø> (∅)

---

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 24c2768...cc426c8. Read the comment docs.

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[github-actions]

The container image build workflow finished with status: failure.

[github-actions]

Image was built and published successfully. It is available at:

• quay.io/rhdh-community/rhdh:pr-5404
• quay.io/rhdh-community/rhdh:pr-5404-0924a656

[zdrapela]

/test e2e-ocp-helm

[rhdh-qodo-merge]

Important

The /test command by Qodo was deprecated on the 1st of September 2026 and is no longer available. We recommend switching to the latest Qodo review capabilities. Learn more

[openshift-ci]

@zdrapela: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-ocp-helm	0924a65	link	true	/test e2e-ocp-helm

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[github-actions]

Image was built and published successfully. It is available at:

• quay.io/rhdh-community/rhdh:pr-5404
• quay.io/rhdh-community/rhdh:pr-5404-cc426c84

[openshift-ci]

PR needs rebase.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.