feat(build_stream): complete ER-BSM-003 log observability implementation - #5809

…M-003-ci-console-and-parity)

Add a self-contained default.after_script to the build, cadence, and deploy
child CI templates (AC-006/AC-007). On success and failure it previews the last
N execution-log lines (BSM_LOG_TAIL_LINES, default 50) for stages that ran an
Ansible playbook via GET /jobs/{id}/logs, and prints authenticated curl command
templates with a <TOKEN> placeholder (no credentials echoed). Runs in its own
shell, reads the freshest token from /tmp or the ACCESS_TOKEN dotenv var, maps
GitLab stage -> BSM stage per pipeline, and never changes the job exit status.
Self-hosted and external modes share these templates (AC-008 parity).

Signed-off-by: SOWJANYAJAGADISH123 <sowjanya.jagadish@dell.com>

…SM-003-ci-console-and-parity)

Runnable verification of the default.after_script embedded in the build,
cadence, and deploy-child CI templates (AC-006/AC-007/AC-008). Drives the real
POSIX shell against a mock BSM log API: asserts the labelled tail preview,
custom BSM_LOG_TAIL_LINES, <TOKEN> CLI templates with no credential echo,
non-fatal API-unreachable handling, 404 graceful message, non-playbook-stage
skip, and cross-template parity.

Signed-off-by: SOWJANYAJAGADISH123 <sowjanya.jagadish@dell.com>

…-query-api-and-redaction)

Document the [log_query] configuration section in build_stream.ini and the
BSM_LOG_TAIL_LINES CI variable in INPUT_CONTRACT.md §1.3.

Signed-off-by: SOWJANYAJAGADISH123 <sowjanya.jagadish@dell.com>

Silence pylint import-position warnings and line-length findings in the
new test modules.

Signed-off-by: SOWJANYAJAGADISH123 <sowjanya.jagadish@dell.com>

…ig.yml (ER-BSM-003-log-query-api-and-redaction)

Expose log_tail_lines_default, log_tail_lines_max, max_log_response_bytes, log_query_rate_limit and log_query_max_concurrent as operator inputs in build_stream_config.yml (Section 5), with JSON schema, L2 validation and INPUT_CONTRACT docs. The log query API reads them at startup and falls back to build_stream.ini/defaults on invalid values.

Signed-off-by: SOWJANYAJAGADISH123 <sowjanya.jagadish@dell.com>

…pt/omnia (ER-BSM-003-log-query-api-and-redaction)

Add tests for the log inputs (schema, validator, overlay, precedence). Isolate test_upload_use_case.py destinations in tmp_path; it previously overwrote the real orchestrator network_spec.yml and pxe_mapping_file.csv with test content.

Signed-off-by: SOWJANYAJAGADISH123 <sowjanya.jagadish@dell.com>

…SM-003-ci-console-and-parity)

Add log_ci_preview_lines to build_stream_config.yml with schema and L2 validation (must not exceed log_tail_lines_max). The hosted_gitlab role pushes it to the GitLab project as BSM_LOG_TAIL_LINES on every run, and the CI templates no longer hardcode the value.

Signed-off-by: SOWJANYAJAGADISH123 <sowjanya.jagadish@dell.com>

…ages (ER-BSM-003-log-query-api-and-redaction)

Unfiltered log queries list only create-local-repository, build-image, validate, restart and deploy. Filtering on parse-catalog or upload returns 404 explaining the stage has no execution log, and job detail reports has_log=false for them.

Signed-off-by: SOWJANYAJAGADISH123 <sowjanya.jagadish@dell.com>

…ER-BSM-003-log-query-api-and-redaction)

Cover the playbook-stage-only rule and automate TC-NFT-001/002/003 latency budgets in-process.

Signed-off-by: SOWJANYAJAGADISH123 <sowjanya.jagadish@dell.com>

…SM-003-ci-console-and-parity)

Access tokens expire after 60 minutes, so after long playbook stages the after_script preview got 401. Mint a fresh token from CLIENT_ID/CLIENT_SECRET when the saved token is missing or rejected, in the build, cadence and deploy-child templates. Credentials are never printed and the hook never changes the job status.

Signed-off-by: SOWJANYAJAGADISH123 <sowjanya.jagadish@dell.com>

…R-BSM-003-ci-console-and-parity)

Signed-off-by: SOWJANYAJAGADISH123 <sowjanya.jagadish@dell.com>

The deploy_openchami role resolved the latest release tag via the GitHub
API and built <tag>/openchami-0.2.0.rpm. When the latest tag moved to
v0.2.1 the asset name stayed openchami-0.2.0.rpm, so the URL returned
HTTP 404 and OpenCHAMI installation failed after all retries.

Use a fixed openchami_rpm_url (v0.2.0) and drop the release-metadata
lookup and the URL-derivation task.

Signed-off-by: SOWJANYAJAGADISH123 <sowjanya.jagadish@dell.com>