Description of problem: With CAPI-based installer, we're not able to download the bootstrap logs when anything goes wrong during bootstrap.

Looking at a failed job, we can see from the logs:

Failed to gather bootstrap logs: failed to connect to the bootstrap machine: dial tcp 10.0.2.116:22: connect: connection timed out

I see two issues:

• the IP is from the machine subnet, and the node where the installer runs don't have access to it. We need to connect to the bootstrap VM via a floating IP.
• we don't open SSH in security groups, which would prevent pulling the logs.

Not having bootstrap logs makes it nearly impossible to debug any bootstrapping issue.

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:

    1.
    2.
    3.
    

Actual results:

Expected results:

Additional info: