debug debug

Author: LiangquanLi930

test/e2e/shared/aws.go

@@ -45,6 +45,7 @@ import (
 	iamtypes "github.com/aws/aws-sdk-go-v2/service/iam/types"
 	"github.com/aws/aws-sdk-go-v2/service/sts"
 	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/awserr"
 	"github.com/aws/aws-sdk-go/aws/client"
 	awscreds "github.com/aws/aws-sdk-go/aws/credentials"
 	"github.com/aws/aws-sdk-go/aws/session"
@@ -774,9 +775,35 @@ func deleteCloudFormationStack(prov client.ConfigProvider, t *cfn_bootstrap.Temp
 }
 
 func ensureTestImageUploaded(e2eCtx *E2EContext) error {
+	By("ensureTestImageUploaded: Creating AWS session for ECR Public")
 	sessionForRepo := NewAWSSessionRepoWithKey(e2eCtx.Environment.BootstrapAccessKey)
 
+	if sess, ok := sessionForRepo.(*session.Session); ok {
+		creds, err := sess.Config.Credentials.Get()
+		if err != nil {
+			By(fmt.Sprintf("ensureTestImageUploaded: Failed to get credentials from session: %v", err))
+			return fmt.Errorf("failed to get credentials: %w", err)
+		}
+		By(fmt.Sprintf("ensureTestImageUploaded: Session credentials - AccessKeyId: %s, ProviderName: %s",
+			creds.AccessKeyID, creds.ProviderName))
+	} else {
+		By("ensureTestImageUploaded: WARNING: Session is not *session.Session type")
+	}
+
 	ecrSvc := ecrpublic.New(sessionForRepo)
+
+	By("ensureTestImageUploaded: Testing ECR Public connection")
+	_, err := ecrSvc.DescribeRegistries(&ecrpublic.DescribeRegistriesInput{})
+	if err != nil {
+		By(fmt.Sprintf("ensureTestImageUploaded: Failed to connect to ECR Public: %v", err))
+		if awsErr, ok := err.(awserr.Error); ok {
+			By(fmt.Sprintf("ensureTestImageUploaded: AWS Error - Code: %s, Message: %s",
+				awsErr.Code(), awsErr.Message()))
+		}
+		return fmt.Errorf("failed to connect to ECR Public: %w", err)
+	}
+	By("ensureTestImageUploaded: Successfully connected to ECR Public")
+
 	repoName := ""
 	if err := wait.WaitForWithRetryable(wait.NewBackoff(), func() (bool, error) {
 		output, err := ecrSvc.CreateRepository(&ecrpublic.CreateRepositoryInput{
@@ -807,7 +834,7 @@ func ensureTestImageUploaded(e2eCtx *E2EContext) error {
 	cmd := exec.Command("docker", "inspect", "--format='{{index .Id}}'", "gcr.io/k8s-staging-cluster-api/capa-manager:e2e")
 	var stdOut bytes.Buffer
 	cmd.Stdout = &stdOut
-	err := cmd.Run()
+	err = cmd.Run()
 	if err != nil {
 		return err
 	}

test/e2e/shared/suite.go

@@ -32,6 +32,8 @@ import (
 	"time"
 
 	iamtypes "github.com/aws/aws-sdk-go-v2/service/iam/types"
+	"github.com/aws/aws-sdk-go/aws/awserr"
+	"github.com/aws/aws-sdk-go/aws/session"
 	"github.com/gofrs/flock"
 	. "github.com/onsi/ginkgo/v2"
 	. "github.com/onsi/gomega"
@@ -158,7 +160,32 @@ func Node1BeforeSuite(e2eCtx *E2EContext) []byte {
 	e2eCtx.Environment.BootstrapAccessKey = newUserAccessKey(context.TODO(), e2eCtx.AWSSessionV2, bootstrapTemplate.Spec.BootstrapUser.UserName)
 	e2eCtx.BootstrapUserAWSSession = NewAWSSessionWithKey(e2eCtx.Environment.BootstrapAccessKey)
 	e2eCtx.BootstrapUserAWSSessionV2 = NewAWSSessionWithKeyV2(e2eCtx.Environment.BootstrapAccessKey)
-	Expect(ensureTestImageUploaded(e2eCtx)).NotTo(HaveOccurred())
+
+	By("Waiting for access key to propagate...")
+	time.Sleep(10 * time.Second)
+
+	By("Starting ensureTestImageUploaded with detailed logging")
+	err = ensureTestImageUploaded(e2eCtx)
+	if err != nil {
+		By(fmt.Sprintf("ensureTestImageUploaded failed with error: %v", err))
+		if awsErr, ok := err.(awserr.Error); ok {
+			By(fmt.Sprintf("AWS Error details - Code: %s, Message: %s",
+				awsErr.Code(), awsErr.Message()))
+		}
+		if e2eCtx.BootstrapUserAWSSession != nil {
+			if sess, ok := e2eCtx.BootstrapUserAWSSession.(*session.Session); ok {
+				creds, err := sess.Config.Credentials.Get()
+				if err != nil {
+					By(fmt.Sprintf("Credentials retrieval failed after error: %v", err))
+				} else {
+					By(fmt.Sprintf("Current credentials - AccessKeyId: %s, ProviderName: %s",
+						creds.AccessKeyID, creds.ProviderName))
+				}
+			}
+		}
+		return []byte{}
+	}
+	By("ensureTestImageUploaded completed successfully")
 
 	// Image ID is needed when using a CI Kubernetes version. This is used in conformance test and upgrade to main test.
 	if !e2eCtx.IsManaged {