Skip pull secret extraction when pre-populated

When the pull-secret file already exists with content (size > 0),
skip the kubeconfig-based extraction from the Kubernetes API. This
allows adoption CI jobs to pre-populate the pull secret from the
hypervisor where the kubeconfig is accessible, instead of requiring
the container to reach the OCP API directly.

The always-block cleanup is also skipped for pre-populated files
since the file lifecycle is managed externally.

Assisted-By: Claude Code
Change-Id: I66e6f1206a9e5e64d28b56aa2a3b658d57b5ba21
Signed-off-by: Itay Matza <imatza@redhat.com>

Author: imatza-rh

collection/tools/roles/tools_get_openshift_release/tasks/get_openshift_release_binaries.yml

@@ -26,7 +26,13 @@
         msg: "'openshift_release_pull_spec' must be set by get_openshift_release_build_name.yml"
       when: openshift_release_pull_spec is not defined or openshift_release_pull_spec == ''
 
+    - name: Check if pull secret is pre-populated
+      ansible.builtin.stat:
+        path: "{{ pull_secret_file }}"
+      register: _pull_secret_preexists
+
     - name: Extract pull secret from host cluster via Kubernetes API
+      when: not (_pull_secret_preexists.stat.exists and _pull_secret_preexists.stat.size > 0)
       changed_when: true
       ansible.builtin.shell: |
         python3 << 'PYEOF'
@@ -183,6 +189,7 @@
 
   always:
     - name: Remove pull secret file
+      when: not (_pull_secret_preexists.stat.exists | default(false))
       ansible.builtin.file:
         path: "{{ pull_secret_file }}"
         state: absent