[tls-scanner] Provision 4.22 cluster for default-tls test step

Author: richardsonnick

ci-operator/config/openshift/cluster-api-provider-metal3/openshift-cluster-api-provider-metal3-main.yaml

@@ -57,7 +57,8 @@ tests:
   commands: make -C openshift verify
   container:
     from: src
-- as: e2e-metal3-capi-techpreview
+- always_run: false
+  as: e2e-metal3-capi-techpreview
   capabilities:
   - intranet
   steps:

ci-operator/config/openshift/tls-scanner/openshift-tls-scanner-main.yaml

@@ -39,18 +39,12 @@ resources:
       memory: 200Mi
 tests:
 - as: default-tls
-  cluster_claim:
-    architecture: amd64
-    cloud: aws
-    owner: openshift-ci
-    product: ocp
-    timeout: 5h0m0s
-    version: "4.22"
   optional: true
   steps:
+    cluster_profile: aws
     test:
     - ref: tls-scanner-run
-    workflow: generic-claim
+    workflow: ipi-aws
 - as: tls13-conformance
   optional: true
   steps:

ci-operator/jobs/openshift/cluster-api-provider-metal3/openshift-cluster-api-provider-metal3-main-presubmits.yaml

@@ -1,7 +1,7 @@
 presubmits:
   openshift/cluster-api-provider-metal3:
   - agent: kubernetes
-    always_run: true
+    always_run: false
     branches:
     - ^main$
     - ^main-
@@ -80,7 +80,7 @@ presubmits:
       - name: result-aggregator
         secret:
           secretName: result-aggregator
-    trigger: (?m)^/test( | .* )e2e-metal3-capi-techpreview,?($|\s.*)
+    trigger: (?m)^/test( | .* )(e2e-metal3-capi-techpreview|remaining-required),?($|\s.*)
   - agent: kubernetes
     always_run: true
     branches:

ci-operator/jobs/openshift/tls-scanner/openshift-tls-scanner-main-presubmits.yaml

@@ -11,6 +11,8 @@ presubmits:
     decoration_config:
       skip_cloning: true
     labels:
+      ci-operator.openshift.io/cloud: aws
+      ci-operator.openshift.io/cloud-cluster-profile: aws
       ci.openshift.io/generator: prowgen
       pj-rehearse.openshift.io/can-be-rehearsed: "true"
     name: pull-ci-openshift-tls-scanner-main-default-tls
@@ -20,8 +22,8 @@ presubmits:
       containers:
       - args:
         - --gcs-upload-secret=/secrets/gcs/service-account.json
-        - --hive-kubeconfig=/secrets/hive-hive-credentials/kubeconfig
         - --image-import-pull-secret=/etc/pull-secret/.dockerconfigjson
+        - --lease-server-credentials-file=/etc/boskos/credentials
         - --report-credentials-file=/etc/report/credentials
         - --secret-dir=/secrets/ci-pull-credentials
         - --target=default-tls
@@ -42,15 +44,15 @@ presubmits:
           requests:
             cpu: 10m
         volumeMounts:
+        - mountPath: /etc/boskos
+          name: boskos
+          readOnly: true
         - mountPath: /secrets/ci-pull-credentials
           name: ci-pull-credentials
           readOnly: true
         - mountPath: /secrets/gcs
           name: gcs-credentials
           readOnly: true
-        - mountPath: /secrets/hive-hive-credentials
-          name: hive-hive-credentials
-          readOnly: true
         - mountPath: /secrets/manifest-tool
           name: manifest-tool-local-pusher
           readOnly: true
@@ -62,12 +64,15 @@ presubmits:
           readOnly: true
       serviceAccountName: ci-operator
       volumes:
+      - name: boskos
+        secret:
+          items:
+          - key: credentials
+            path: credentials
+          secretName: boskos-credentials
       - name: ci-pull-credentials
         secret:
           secretName: ci-pull-credentials
-      - name: hive-hive-credentials
-        secret:
-          secretName: hive-hive-credentials
       - name: manifest-tool-local-pusher
         secret:
           secretName: manifest-tool-local-pusher