fix(build): Add entitlement support for Konflux builds

Add subscription-manager and RHSM entitlement handling to Dockerfile.oadp
and pass CONTAINER_SUB_MANAGER_OFF=1 build arg in Tekton pipelines to
fix entitlement-related build failures in Konflux.

Reference: openshift/hive#2367

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
Signed-off-by: Juan Manuel Parrilla Madrid <jparrill@redhat.com>

Author: jparrill

.tekton/oadp-hypershift-oadp-plugin-main-pull-request.yaml

@@ -217,6 +217,7 @@ spec:
       - name: BUILD_ARGS
         value:
         - $(params.build-args[*])
+        - CONTAINER_SUB_MANAGER_OFF=1
       - name: BUILD_ARGS_FILE
         value: $(params.build-args-file)
       - name: PRIVILEGED_NESTED

.tekton/oadp-hypershift-oadp-plugin-main-push.yaml

@@ -214,6 +214,7 @@ spec:
       - name: BUILD_ARGS
         value:
         - $(params.build-args[*])
+        - CONTAINER_SUB_MANAGER_OFF=1
       - name: BUILD_ARGS_FILE
         value: $(params.build-args-file)
       - name: PRIVILEGED_NESTED

Dockerfile.oadp

@@ -1,13 +1,27 @@
+ARG CONTAINER_SUB_MANAGER_OFF=0
+
 #@follow_tag(registry-proxy.engineering.redhat.com/rh-osbs/openshift-golang-builder:rhel_9_golang_1.25)
 FROM brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.25 AS builder
+ARG CONTAINER_SUB_MANAGER_OFF
+ENV SMDEV_CONTAINER_OFF=${CONTAINER_SUB_MANAGER_OFF}
 
 COPY . /workspace
 WORKDIR /workspace/
+
+RUN unlink /etc/rhsm-host
+RUN if [ -e "/activation-key/org" ]; then subscription-manager register --org $(cat "/activation-key/org") --activationkey $(cat "/activation-key/activationkey"); fi
+
 ENV GOEXPERIMENT strictfipsruntime
 RUN CGO_ENABLED=1 GOOS=linux go build -v -mod=vendor -tags strictfipsruntime -o /workspace/bin/hypershift-oadp-plugin .
 
 #@follow_tag(registry.redhat.io/ubi9/ubi-minimal:latest)
 FROM registry.redhat.io/ubi9/ubi-minimal:latest
+ARG CONTAINER_SUB_MANAGER_OFF
+ENV SMDEV_CONTAINER_OFF=${CONTAINER_SUB_MANAGER_OFF}
+
+RUN unlink /etc/rhsm-host
+RUN if [ -e "/activation-key/org" ]; then subscription-manager register --org $(cat "/activation-key/org") --activationkey $(cat "/activation-key/activationkey"); fi
+
 RUN microdnf -y install openssl && microdnf -y reinstall tzdata && microdnf clean all
 RUN mkdir /plugins
 COPY --from=builder /workspace/bin/hypershift-oadp-plugin /plugins/