Enable OperatingSystemManager in E2E tests

.prow/provider-aws.yaml

@@ -42,6 +42,38 @@ presubmits:
             limits:
               memory: 6Gi
 
+  - name: pull-machine-controller-e2e-aws-legacy-userdata
+    always_run: true
+    decorate: true
+    clone_uri: "ssh://git@github.com/kubermatic/machine-controller.git"
+    labels:
+      preset-aws: "true"
+      preset-hetzner: "true"
+      preset-e2e-ssh: "true"
+      preset-rhel: "true"
+      preset-goproxy: "true"
+      preset-kind-volume-mounts: "true"
+      preset-docker-mirror: "true"
+      preset-kubeconfig-ci: "true"
+    spec:
+      containers:
+        - image: quay.io/kubermatic/build:go-1.18-node-16-kind-0.14-9
+          env:
+            - name: OPERATING_SYSTEM_MANAGER
+              value: "false"
+          command:
+            - "./hack/ci/run-e2e-tests.sh"
+          args:
+            - "TestAWSProvisioningE2E"
+          securityContext:
+            privileged: true
+          resources:
+            requests:
+              memory: 6Gi
+              cpu: 2
+            limits:
+              memory: 6Gi
+
   - name: pull-machine-controller-e2e-aws-arm
     always_run: true
     decorate: true

examples/machine-controller.yaml

@@ -218,6 +218,7 @@ spec:
             - -cluster-dns=10.10.10.10
             - -metrics-address=0.0.0.0:8080
             - -health-probe-address=0.0.0.0:8085
+            - -use-osm=true
             # Machines that fail to join the cluster within this timeout and
             # are owned by a MachineSet will get deleted so the MachineSet
             # controller re-creates them
@@ -260,6 +261,8 @@ spec:
             - /usr/local/bin/webhook
             - -logtostderr
             - -v=6
+            - -use-osm=true
+            - -namespace=kube-system
             - -listen-address=0.0.0.0:9876
           volumeMounts:
             - name: machine-controller-admission-cert
@@ -566,6 +569,34 @@ subjects:
     name: machine-controller
     namespace: kube-system
 ---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: Role
+metadata:
+  name: machine-controller-webhook
+  namespace: kube-system
+rules:
+  - apiGroups:
+      - operatingsystemmanager.k8c.io
+    resources:
+      - operatingsystemprofiles
+    verbs:
+      - get
+      - list
+---
+apiVersion: rbac.authorization.k8s.io/v1
+kind: RoleBinding
+metadata:
+  name: machine-controller-webhook
+  namespace: kube-system
+roleRef:
+  apiGroup: rbac.authorization.k8s.io
+  kind: Role
+  name: machine-controller-webhook
+subjects:
+  - kind: ServiceAccount
+    name: machine-controller
+    namespace: kube-system
+---
 apiVersion: admissionregistration.k8s.io/v1
 kind: MutatingWebhookConfiguration
 metadata: