When the provisioner cannot create a dataproc cluster, there isn't any information about why it failed.
For example, if you create a new network without any firewall rules, the dataproc cluster will fail to create after ~15 minutes because the datanodes cannot communicate with each other. This manifests itself as a warning about firewall rules in the dataproc cloud console UI, but is not visible anywhere in CDAP.