Wrap Workload cluster errors

pkg/ck8s/workload_cluster.go

@@ -322,19 +322,24 @@ func (w *Workload) RefreshWorkerCertificates(ctx context.Context, machine *clust
 	eg, ctx := errgroup.WithContext(ctx)
 	eg.Go(func() error {
 		seconds, err = w.refreshCertificatesRun(ctx, machine, nodeToken, &request)
-		return err
+		if err != nil {
+			return fmt.Errorf("failed to run refresh certificates: %w", err)
+		}
+		return nil
 	})
 
 	eg.Go(func() error {
-		return w.ApproveCertificates(ctx, machine, nodeToken, seed)
+		if err := w.ApproveCertificates(ctx, machine, nodeToken, seed); err != nil {
+			return fmt.Errorf("failed to approve certificates: %w", err)
+		}
+		return nil
 	})
 
 	if err := eg.Wait(); err != nil {
 		return 0, fmt.Errorf("failed to refresh worker certificates: %w", err)
 	}
 
 	return seconds, nil
-
 }
 
 func (w *Workload) RefreshControlPlaneCertificates(ctx context.Context, machine *clusterv1.Machine, nodeToken string, expirationSeconds int, extraSANs []string) (int, error) {