ci: add Terraform logging (#1665)

* enable Terraform logging

* change to debug level

* rename artifact

* add name suffix

* remove blank line

.github/actions/constellation_create/action.yml

@@ -184,7 +184,7 @@ runs:
         echo "Creating cluster using config:"
         cat constellation-conf.yaml
         sudo sh -c 'echo "127.0.0.1 license.confidential.cloud" >> /etc/hosts' || true
-        constellation create -c ${{ inputs.controlNodesCount }} -w ${{ inputs.workerNodesCount }} -y --force --debug
+        constellation create -c ${{ inputs.controlNodesCount }} -w ${{ inputs.workerNodesCount }} -y --force --debug --tf-log=DEBUG
 
     - name: Cdbg deploy
       if: inputs.isDebugImage == 'true'

.github/actions/constellation_destroy/action.yml

@@ -40,4 +40,4 @@ runs:
 
     - name: Constellation terminate
       shell: bash
-      run: constellation terminate --yes
+      run: constellation terminate --yes --tf-log=DEBUG

.github/actions/constellation_iam_create/action.yml

@@ -55,7 +55,7 @@ runs:
           --region=${{ inputs.azureRegion }} \
           --resourceGroup="${{ inputs.namePrefix }}-rg" \
           --servicePrincipal="${{ inputs.namePrefix }}-sp" \
-          --generate-config --yes
+          --generate-config --yes --tf-log=DEBUG
 
     - name: Constellation iam create gcp
       shell: bash

.github/actions/constellation_iam_destroy/action.yml

@@ -3,14 +3,14 @@ description: Delete previously created IAM configuration.
 
 inputs:
   cloudProvider:
-      description: "Either 'aws', 'azure' or 'gcp'."
-      required: true
+    description: "Either 'aws', 'azure' or 'gcp'."
+    required: true
   gcpServiceAccount:
-      description: "GCP service account to use for authentication."
-      required: false
+    description: "GCP service account to use for authentication."
+    required: false
   azureCredentials:
-      description: "Azure service principal to use for authentication."
-      required: false
+    description: "Azure service principal to use for authentication."
+    required: false
 
 runs:
   using: "composite"
@@ -39,4 +39,4 @@ runs:
     - name: Delete IAM configuration
       shell: bash
       run: |
-        constellation iam destroy --yes
+        constellation iam destroy --yes --tf-log=DEBUG

.github/actions/e2e_test/action.yml

@@ -79,7 +79,10 @@ outputs:
   kubeconfig:
     description: "The kubeconfig for the cluster."
     value: ${{ steps.constellation-create.outputs.kubeconfig }}
-
+  namePrefix:
+    description: "The name prefix of the cloud resources used in the e2e test."
+    value: ${{ steps.create-prefix.outputs.prefix }}
+    
 runs:
   using: "composite"
   steps:

.github/actions/upload_terraform_logs/action.yml

@@ -0,0 +1,16 @@
+name: Upload Terraform logs
+description: "Upload the Terraform log file as an artifact."
+
+inputs:
+  artifactNameSuffix:
+    description: "Name suffix for the created artifact."
+    required: true
+
+runs:
+  using: "composite"
+  steps:
+    - name: Upload artifact
+      uses: actions/upload-artifact@v3
+      with:
+        name: terraform-logs-${{ inputs.artifactNameSuffix }}
+        path: terraform.log

.github/workflows/e2e-test-daily.yml

@@ -104,6 +104,12 @@ jobs:
           azureCredentials: ${{ secrets.AZURE_E2E_IAM_CREDENTIALS }}
           gcpServiceAccount: "constellation-iam-e2e@constellation-331613.iam.gserviceaccount.com"
 
+      - name: Always upload Terraform logs
+        if: always()
+        uses: ./.github/actions/upload_terraform_logs
+        with:
+          artifactNameSuffix: ${{ steps.e2e_test.outputs.namePrefix }}
+
       - name: Notify about failure
         if: |
           failure() &&

.github/workflows/e2e-test-manual.yml

@@ -276,3 +276,9 @@ jobs:
           cloudProvider: ${{ inputs.cloudProvider }}
           azureCredentials: ${{ secrets.AZURE_E2E_IAM_CREDENTIALS }}
           gcpServiceAccount: "constellation-iam-e2e@constellation-331613.iam.gserviceaccount.com"
+
+      - name: Always upload Terraform logs
+        if: always()
+        uses: ./.github/actions/upload_terraform_logs
+        with:
+          artifactNameSuffix: ${{ steps.e2e_test.outputs.namePrefix }}

.github/workflows/e2e-test-release.yml

@@ -216,6 +216,12 @@ jobs:
           azureCredentials: ${{ secrets.AZURE_E2E_IAM_CREDENTIALS }}
           gcpServiceAccount: "constellation-iam-e2e@constellation-331613.iam.gserviceaccount.com"
 
+      - name: Always upload Terraform logs
+        if: always()
+        uses: ./.github/actions/upload_terraform_logs
+        with:
+          artifactNameSuffix: ${{ steps.e2e_test.outputs.namePrefix }}
+
   e2e-upgrade:
     strategy:
       fail-fast: false

.github/workflows/e2e-test-weekly.yml

@@ -242,6 +242,12 @@ jobs:
           kubernetesVersion: ${{ matrix.kubernetes-version }}
           provider: ${{ matrix.provider }}
 
+      - name: Always upload Terraform logs
+        if: always()
+        uses: ./.github/actions/upload_terraform_logs
+        with:
+          artifactNameSuffix: ${{ steps.e2e_test.outputs.namePrefix }}
+
   e2e-upgrade:
     strategy:
       fail-fast: false

.github/workflows/e2e-upgrade.yml

@@ -200,6 +200,12 @@ jobs:
           azureCredentials: ${{ secrets.AZURE_E2E_IAM_CREDENTIALS }}
           gcpServiceAccount: "constellation-iam-e2e@constellation-331613.iam.gserviceaccount.com"
 
+      - name: Always upload Terraform logs
+        if: always()
+        uses: ./.github/actions/upload_terraform_logs
+        with:
+          artifactNameSuffix: ${{ steps.e2e_test.outputs.namePrefix }}
+
       - name: Notify about failure
         if: |
           failure() &&