improve ci failure logging

hack/ci/e2e-apparmor.sh

@@ -161,6 +161,7 @@ check_apparmor_profile_recording() {
 
   done
 
+  print_spo_logs
   git diff --exit-code examples
 }
 

hack/ci/e2e-seccomp.sh

@@ -96,6 +96,7 @@ EOT
   # that uses `setns` to join the container mount namespace.
   # As a consequence, we sometimes get all the funny syscalls emitted
   # by the Go runtime, which we need to ignore.
+  print_spo_logs
   echo "Diffing output while ignoring flaky syscalls"
   git diff --exit-code -U0 \
     -I rt_sigreturn \

hack/ci/install-spo.sh

@@ -56,13 +56,18 @@ wait_for() {
   done
 
   echo "Timed out waiting for $*"
-  echo "---------------------------------"
-  echo "Logs"
-  echo "---------------------------------"
-  k logs --selector name=spod --all-containers
+  print_spo_logs
   exit 1
 }
 
+print_spo_logs() {
+    echo "---------------------------------"
+    echo "Logs"
+    echo "---------------------------------"
+    k logs --selector name!=nonexistent --all-pods --all-containers --since=10m --prefix --tail=-1
+    echo "---------------------------------"
+}
+
 ensure_runtime_classes() {
   RUNTIMES=(runc crun)
   for RUNTIME in "${RUNTIMES[@]}"; do

internal/pkg/daemon/bpfrecorder/bpfrecorder.go

@@ -326,6 +326,12 @@ func (b *BpfRecorder) SyscallsForProfile(
 		return nil, err
 	}
 
+	b.logger.Info(
+		fmt.Sprintf("Found %d syscalls for profile", len(syscalls)),
+		"profile", r.GetName(),
+		"mntns", mntns,
+	)
+
 	return &api.SyscallsResponse{
 		Syscalls: syscalls,
 		GoArch:   runtime.GOARCH,
@@ -384,6 +390,7 @@ func (b *BpfRecorder) getMntnsForProfileWithRetry(profile string) (uint32, error
 			b.logger.Info("Looking up mount namespace for profile", "profile", profile, "try", try)
 			if foundMntns, ok := b.getMntnsForProfile(profile); ok {
 				mntns = foundMntns
+				b.logger.Info("Found mount namespace for profile", "profile", profile, "mntns", mntns)
 				return nil
 			}
 			b.logger.Info("No mount namespace found for profile", "profile", profile)
@@ -398,6 +405,7 @@ func (b *BpfRecorder) getMntnsForProfileWithRetry(profile string) (uint32, error
 
 func (b *BpfRecorder) getMntnsForProfile(profile string) (uint32, bool) {
 	if containerID, ok := b.containerIDToProfileMap.GetBackwards(profile); ok {
+		b.logger.Info("Found container id for profile", "containerID", containerID, "profile", profile)
 		if mntns, ok := b.mntnsToContainerIDMap.GetBackwards(containerID); ok {
 			return mntns, true
 		}