Installing with Shielded VMs (i.e. secureboot enabled) got control-plane machines failing to boot up

    4.16.0-0.nightly-2024-01-23-071601

    Always

    1. "create install-config", then edit it to insert "secureBoot: Enabled" for compute.platform.gcp and controlPlane.platform.gcp
    2. "create cluster"

    Bootstrap failed, and all the control-plane machines are inaccessible. 

    Installation should succeed. 

    The PROW CI test which failed: https://qe-private-deck-ci.apps.ci.l2s4.p1.openshiftapps.com/view/gs/qe-private-deck/logs/periodic-ci-openshift-openshift-tests-private-release-4.16-amd64-nightly-gcp-ipi-secureboot-confidential-computing-f14/1749497426076504064, where its bootstrap log bundle is at https://gcsweb-qe-private-deck-ci.apps.ci.l2s4.p1.openshiftapps.com/gcs/qe-private-deck/logs/periodic-ci-openshift-openshift-tests-private-release-4.16-amd64-nightly-gcp-ipi-secureboot-confidential-computing-f14/1749497426076504064/artifacts/gcp-ipi-secureboot-confidential-computing-f14/ipi-install-install/artifacts/log-bundle-20240122190107.tar

QE's Flexy-install job which has the issue: Flexy-install/259851/
VARIABLES_LOCATION private-templates/functionality-testing/aos-4_16/ipi-on-gcp/versioned-installer-shieldedvms

FYI one of the control-plane machine's serial port outputs snippet is available at https://drive.google.com/file/d/1v56vwtv5kvaO873l3Qt-UmY9jmEJraiQ/view?usp=drive_link