…ter-ui-only

[TSLA-9971] policy filter UI only

…o#12892)

* Added KubeVirt live migration test cases on KIND cluster

* Address review feedback for KubeVirt KIND e2e tests

- Rename wait* helpers to expect* and add GinkgoHelper() so failures
  attribute to the caller's line
- Replace self-skip with Fail and use Feature:KubeVirt-KIND tag
- Remove redundant logrus summary lines (By() already logs steps)
- Remove redundant migration phase re-check after expectMigrationSuccess
- Fix Expect messages to describe the check, not the cause
- Move IPAM owner promotion test to ip_persistence.go (common test)
- Remove unused requireOperatorManagedCluster helper
- Tag ip_persistence suite with both KubeVirt and KubeVirt-KIND features

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Add Semaphore CI job for KubeVirt live migration e2e on KIND

Add the Semaphore block and e2e config to run KubeVirt-KIND tests in CI.
The job creates a KIND cluster, deploys MockVirt (KubeVirt simulation
mode), and runs e2e tests filtered by Feature:KubeVirt-KIND.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Address PR projectcalico#12892 review feedback

- Replace Feature:KubeVirt-KIND with RequiresRealKubeVirt requirement label
  so KIND lane includes Feature:KubeVirt and excludes RequiresRealKubeVirt
  instead of double-tagging tests with two features (Casey #1).
- Add back isKINDCluster guards with explicit failure messages explaining
  why the test cannot run on KIND (Casey #2).
- Split live_migration_kind.go: move helpers (kindBIRDPeer, setupKindEBGPPeering,
  expectMigrationFailed) into utils.go, keep only test suite in the file (Casey #3).
- Use existing WithExternalNode() label instead of RequiresExternalNode()
  to avoid duplicate labels with same semantics (skoryk #7).
- Move WithSerial() from describe block to eBGP It only — other tests
  are namespace-scoped and parallel-safe (skoryk #8).
- Add nil guard for net.ParseIP().To4() in querySnapshot and
  queryTORSnapshot to prevent panic on malformed/IPv6 input (skoryk projectcalico#9).
- Remove duplicate NetworkPolicy test from live_migration.go — the KIND
  ICMP version provides equivalent coverage without requiring a real
  guest OS (skoryk projectcalico#10).
- Randomize BIRD container name with GenerateRandomName to prevent
  collisions on parallel runs (skoryk projectcalico#11).
- Change queryWorkerMetric to return (int, error) so failures surface
  the real cause instead of hiding it behind a -1 sentinel (skoryk projectcalico#13).
- Add non-go:/e2e/pkg/ to CHANGE_IN macro so test file changes trigger
  the KubeVirt KIND CI lane (skoryk projectcalico#14).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

* Decouple KubeVirt e2e tests from KIND: extract BGP utilities, rename to MockVirt

Extract shared BIRD/BGP peer utilities from kubevirt test utils into a
reusable e2e/pkg/utils/bgp package with a BIRDPeer interface implemented
by both ContainerBIRDPeer (local Docker) and SSHBIRDPeer (SSH external
node). Rename KIND-specific references to MockVirt where they refer to
simulated KubeVirt, replace isKINDCluster with isMockVirtDeployed using
the dynamic client to check the KubeVirt CR simulationMode field, and
decouple the BIRD container lifecycle from test code by reading the
container name from BIRD_BGPPEER_CONTAINER_NAME env var. Add BIRD
container setup to the Semaphore CI pipeline.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

Merge current Calico master