[image-builder-mk3] log errors for auth

This will help us troubleshoot:
* credential reload via watch
* potential ECR authN issues
* potential additionalAuth issues

Author: kylos101

components/image-builder-mk3/pkg/auth/auth.go

@@ -64,11 +64,13 @@ func (a *DockerConfigFileAuth) loadFromFile(fn string) (err error) {
 	defer func() {
 		if err != nil {
 			err = fmt.Errorf("error loading Docker config from %s: %w", fn, err)
+			log.WithError(err).Errorf("Failed loading from file: %s", fn)
 		}
 	}()
 
 	cntnt, err := os.ReadFile(fn)
 	if err != nil {
+		log.WithError(err).Errorf("Failed reading file: %s", fn)
 		return err
 	}
 	hash := sha256.New()
@@ -83,6 +85,7 @@ func (a *DockerConfigFileAuth) loadFromFile(fn string) (err error) {
 	cfg := configfile.New(fn)
 	err = cfg.LoadFromReader(bytes.NewReader(cntnt))
 	if err != nil {
+		log.WithError(err).Errorf("Read file failed: %s", fn)
 		return err
 	}
 
@@ -159,6 +162,7 @@ func (ath *ECRAuthenticator) Authenticate(ctx context.Context, registry string)
 	if time.Since(ath.ecrAuthLastRefreshTime) > ecrTokenRefreshTime {
 		tknout, err := ath.ecrc.GetAuthorizationToken(ctx, &ecr.GetAuthorizationTokenInput{})
 		if err != nil {
+			log.WithError(err).Errorf("Failed getting auth token")
 			return nil, err
 		}
 		if len(tknout.AuthorizationData) == 0 {
@@ -167,6 +171,7 @@ func (ath *ECRAuthenticator) Authenticate(ctx context.Context, registry string)
 
 		pwd, err := base64.StdEncoding.DecodeString(aws.ToString(tknout.AuthorizationData[0].AuthorizationToken))
 		if err != nil {
+			log.WithError(err).Errorf("Failed decoding token")
 			return nil, err
 		}
 
@@ -299,6 +304,7 @@ func (a AllowedAuthFor) GetAuthFor(ctx context.Context, auth RegistryAuthenticat
 
 	ref, err := reference.ParseNormalizedNamed(refstr)
 	if err != nil {
+		log.WithError(err).Errorf("Failed parsing normalized name")
 		return nil, xerrors.Errorf("cannot parse image ref: %v", err)
 	}
 	reg := reference.Domain(ref)
@@ -359,6 +365,8 @@ func (a AllowedAuthFor) additionalAuth(domain string) *Authentication {
 			res.Username = segs[0]
 			res.Password = strings.Join(segs[1:], ":")
 		}
+	} else {
+		log.WithError(err).Errorf("Failed getting additional auth")
 	}
 	return res
 }