feat(components): check the ingress class the chart requests on OpenShift (budctl 0.3.2)

[dittops]

Why

On OpenShift, components.ingress checked the Ingress Operator and the default IngressController, but never the class the chart's Ingresses name. The Bud charts default to ingress.className: traefik and ingress.isTraefik: true. An OpenShift install missing the overrides therefore passed this check, while the router turned none of its Ingresses into Routes and the sync failed on Traefik Middleware objects.

Changes

• OpenShift: compare the rendered Ingresses' class with the cluster's IngressClasses.
  • Missing class → BLOCK.
  • Class served by a controller other than the router (openshift.io/ingress-to-route) → RISK.
  • openshift-default → PASS, and says so.
• Any cluster: BLOCK when the render contains Traefik objects and the cluster serves no Traefik API. The sync would stop with "no matches for kind"; an ingress-nginx cluster fails the same way.
• Without a render: the pass names the values to set on OpenShift. If values were given but the chart did not render, it says that instead of "no --values".
• components.ingress depends on config, so --only components still renders.
• Remedies use the charts' real key, ingress.className (not global.ingress.className), and the stale "OpenShift has no IngressClass" comment is corrected.
• After fix(registry): stop requiring registry.cn-hangzhou.aliyuncs.com for HAMi #2 merges, this branch is rebased and gets the budctl 0.3.2 commit (installer pin).

Verification

7 new tests (5 fail on the pre-change code); full suite passes. Against a single-node OpenShift 4.22 cluster with the published bud 1.2.8 chart:

Values	Result
none	PASS, names ingress.className: openshift-default / ingress.isTraefik: false
infra values.openshift.yaml	PASS: requests openshift-default, served by the router
chart defaults	BLOCK: 3 Traefik Middlewares the cluster does not serve (the server-side dry run rejects them too)
className: traefik, isTraefik: false	BLOCK: IngressClass traefik does not exist (the dry run does not catch this one)

🤖 Generated with Claude Code