=== RUN   kuttl
    harness.go:460: starting setup
    harness.go:258: running tests using configured kubeconfig.
    harness.go:281: Successful connection to cluster at: https://35.223.58.178
    harness.go:366: running tests
    harness.go:77: going to run test suite with timeout of 600 seconds for each step
    harness.go:378: testsuite: e2e-tests/tests has 59 tests
=== RUN   kuttl/harness
=== RUN   kuttl/harness/cert-management-policy
=== PAUSE kuttl/harness/cert-management-policy
=== CONT  kuttl/harness/cert-management-policy
    logger.go:42: 21:48:51 | cert-management-policy | Creating namespace "kuttl-test-superb-vulture"
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | starting test step 0-deploy-operator
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | running command: [sh -c set -o errexit
        set -o xtrace
        
        source ../../functions
        init_temp_dir
        
        deploy_cert_manager
        deploy_operator]
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | + source ../../functions
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ realpath ../../..
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | ++++ pwd
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | ++ test_name=cert-management-policy
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/vars.sh
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ export GIT_BRANCH=PR-1760
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ GIT_BRANCH=PR-1760
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ export VERSION=PR-1760-3b2c18659
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ VERSION=PR-1760-3b2c18659
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | +++ [[ -z '' ]]
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | ++++ detect_k8s_platform
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | ++++ local detected_platform
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | ++++ local xtrace_enabled=false
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | ++++ [[ -o xtrace ]]
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | ++++ xtrace_enabled=true
    logger.go:42: 21:48:51 | cert-management-policy/0-deploy-operator | ++++ set +o xtrace
    logger.go:42: 21:48:54 | cert-management-policy/0-deploy-operator | +++ PLATFORM=gke
    logger.go:42: 21:48:54 | cert-management-policy/0-deploy-operator | +++ export PLATFORM
    logger.go:42: 21:48:54 | cert-management-policy/0-deploy-operator | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:48:54 | cert-management-policy/0-deploy-operator | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:48:54 | cert-management-policy/0-deploy-operator | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:54 | cert-management-policy/0-deploy-operator | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:54 | cert-management-policy/0-deploy-operator | +++ [[ ! -n '' ]]
    logger.go:42: 21:48:54 | cert-management-policy/0-deploy-operator | +++ [[ -n '' ]]
    logger.go:42: 21:48:54 | cert-management-policy/0-deploy-operator | +++ export PG_VER=18
    logger.go:42: 21:48:54 | cert-management-policy/0-deploy-operator | +++ PG_VER=18
    logger.go:42: 21:48:54 | cert-management-policy/0-deploy-operator | +++ export ARCH=
    logger.go:42: 21:48:54 | cert-management-policy/0-deploy-operator | +++ ARCH=
    logger.go:42: 21:48:54 | cert-management-policy/0-deploy-operator | +++ [[ -z '' ]]
    logger.go:42: 21:48:54 | cert-management-policy/0-deploy-operator | ++++ kubectl get nodes -o 'jsonpath={range .items[*]}{.metadata.labels.kubernetes\.io/arch}{"\n"}{end}'
    logger.go:42: 21:48:54 | cert-management-policy/0-deploy-operator | ++++ sort -u
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ node_arches=amd64
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ amd64 == arm64 ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ PG_DISTRIBUTION=
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ '' == community ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export PGOV1_VER=14
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ PGOV1_VER=14
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ MINIO_VER=5.4.0
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ VAULT_VER=0.32.0
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | ++++ printenv
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | ++++ grep -E '^IMAGE'
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | ++++ awk -F= '{print $1}'
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == docker.io/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == percona/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == perconalab/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | ++++ eval 'echo $IMAGE_AWS_CLI'
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++++ echo docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ var_value=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ [[ docker.io/amazon/aws-cli:2.34.60 == docker.io/* ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ continue
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | ++++ which gdate
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | ++++ which date
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ date=/usr/sbin/date
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | ++++ which gsed
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | ++++ which sed
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | +++ sed=/usr/sbin/sed
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | ++ arch_scheduling_enabled
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | ++ [[ -n '' ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | + init_temp_dir
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | + rm -rf /tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | + mkdir -p /tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | + deploy_cert_manager
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | + [[ gke == rancher ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | + destroy_cert_manager
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | + [[ gke == rancher ]]
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | + helm uninstall cert-manager -n cert-manager
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | + :
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | + kubectl get crd -o name
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | + grep cert-manager.io
    logger.go:42: 21:48:55 | cert-management-policy/0-deploy-operator | + xargs -r kubectl delete
    logger.go:42: 21:48:56 | cert-management-policy/0-deploy-operator | + kubectl get mutatingwebhookconfiguration -o name
    logger.go:42: 21:48:56 | cert-management-policy/0-deploy-operator | + grep cert-manager
    logger.go:42: 21:48:56 | cert-management-policy/0-deploy-operator | + xargs kubectl delete
    logger.go:42: 21:48:57 | cert-management-policy/0-deploy-operator | + :
    logger.go:42: 21:48:57 | cert-management-policy/0-deploy-operator | + kubectl get validatingwebhookconfiguration -o name
    logger.go:42: 21:48:57 | cert-management-policy/0-deploy-operator | + grep cert-manager
    logger.go:42: 21:48:57 | cert-management-policy/0-deploy-operator | + xargs kubectl delete
    logger.go:42: 21:48:57 | cert-management-policy/0-deploy-operator | + :
    logger.go:42: 21:48:57 | cert-management-policy/0-deploy-operator | + kubectl get clusterrole,clusterrolebinding -o name
    logger.go:42: 21:48:57 | cert-management-policy/0-deploy-operator | + grep cert-manager
    logger.go:42: 21:48:57 | cert-management-policy/0-deploy-operator | + xargs -r kubectl delete
    logger.go:42: 21:48:58 | cert-management-policy/0-deploy-operator | + kubectl delete namespace cert-manager --grace-period=0 --force=true --ignore-not-found
    logger.go:42: 21:48:59 | cert-management-policy/0-deploy-operator | + echo 'deploy cert manager'
    logger.go:42: 21:48:59 | cert-management-policy/0-deploy-operator | deploy cert manager
    logger.go:42: 21:48:59 | cert-management-policy/0-deploy-operator | + helm repo add jetstack https://charts.jetstack.io --force-update
    logger.go:42: 21:48:59 | cert-management-policy/0-deploy-operator | "jetstack" has been added to your repositories
    logger.go:42: 21:48:59 | cert-management-policy/0-deploy-operator | + helm repo update
    logger.go:42: 21:48:59 | cert-management-policy/0-deploy-operator | Hang tight while we grab the latest from your chart repositories...
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | ...Successfully got an update from the "jetstack" chart repository
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | Update Complete. ⎈Happy Helming!⎈
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + local -a cert_manager_arch_args
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + helm_arch_args cert_manager_arch_args
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + local arr_name=cert_manager_arch_args
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + local prefix=
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + arch_scheduling_enabled
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + [[ -n '' ]]
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + return
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + helm_arch_args cert_manager_arch_args webhook.
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + local arr_name=cert_manager_arch_args
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + local prefix=webhook.
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + arch_scheduling_enabled
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + [[ -n '' ]]
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + return
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + helm_arch_args cert_manager_arch_args cainjector.
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + local arr_name=cert_manager_arch_args
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + local prefix=cainjector.
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + arch_scheduling_enabled
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + [[ -n '' ]]
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + return
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + helm_arch_args cert_manager_arch_args startupapicheck.
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + local arr_name=cert_manager_arch_args
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + local prefix=startupapicheck.
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + arch_scheduling_enabled
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + [[ -n '' ]]
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + return
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + retry 2 20 helm upgrade --install cert-manager jetstack/cert-manager --namespace cert-manager --create-namespace --version 1.20.2 --set installCRDs=true --set 'extraArgs={--enable-certificate-owner-ref=true}'
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + local max=2
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + local delay=20
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + shift 2
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + local n=1
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | + helm upgrade --install cert-manager jetstack/cert-manager --namespace cert-manager --create-namespace --version 1.20.2 --set installCRDs=true --set 'extraArgs={--enable-certificate-owner-ref=true}'
    logger.go:42: 21:49:00 | cert-management-policy/0-deploy-operator | Release "cert-manager" does not exist. Installing it now.
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | NAME: cert-manager
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | LAST DEPLOYED: Tue Sep  8 21:49:01 2026
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | NAMESPACE: cert-manager
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | STATUS: deployed
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | REVISION: 1
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | TEST SUITE: None
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | NOTES:
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | ⚠️  WARNING: `installCRDs` is deprecated, use `crds.enabled` instead.
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | cert-manager v1.20.2 has been deployed successfully!
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | 
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | In order to begin issuing certificates, you will need to set up a ClusterIssuer
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | or Issuer resource (for example, by creating a 'letsencrypt-staging' issuer).
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | 
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | More information on the different types of issuers and how to configure them
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | can be found in our documentation:
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | 
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | https://cert-manager.io/docs/configuration/
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | 
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | For information on how to configure cert-manager to automatically provision
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | Certificates for Ingress resources, take a look at the `ingress-shim`
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | documentation:
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | 
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | https://cert-manager.io/docs/usage/ingress/
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | 
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | For information on how to configure cert-manager to automatically provision
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | Certificates for Gateway API resources, take a look at the `gateway resource`
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | documentation:
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | 
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | https://cert-manager.io/docs/usage/gateway/
    logger.go:42: 21:49:36 | cert-management-policy/0-deploy-operator | + kubectl label namespace cert-manager certmanager.k8s.io/disable-validation=true
    logger.go:42: 21:49:37 | cert-management-policy/0-deploy-operator | namespace/cert-manager labeled
    logger.go:42: 21:49:37 | cert-management-policy/0-deploy-operator | + kubectl label namespace cert-manager e2e.percona.com/managed-by=percona-postgresql-operator-tests --overwrite
    logger.go:42: 21:49:38 | cert-management-policy/0-deploy-operator | namespace/cert-manager labeled
    logger.go:42: 21:49:38 | cert-management-policy/0-deploy-operator | + kubectl label deployment -n cert-manager cert-manager cert-manager-webhook cert-manager-cainjector e2e.percona.com/managed-by=percona-postgresql-operator-tests --overwrite
    logger.go:42: 21:49:38 | cert-management-policy/0-deploy-operator | deployment.apps/cert-manager labeled
    logger.go:42: 21:49:39 | cert-management-policy/0-deploy-operator | deployment.apps/cert-manager-webhook labeled
    logger.go:42: 21:49:39 | cert-management-policy/0-deploy-operator | deployment.apps/cert-manager-cainjector labeled
    logger.go:42: 21:49:39 | cert-management-policy/0-deploy-operator | + kubectl wait deployment cert-manager cert-manager-webhook cert-manager-cainjector --for=condition=available --timeout=100s --namespace cert-manager
    logger.go:42: 21:49:40 | cert-management-policy/0-deploy-operator | deployment.apps/cert-manager condition met
    logger.go:42: 21:49:40 | cert-management-policy/0-deploy-operator | deployment.apps/cert-manager-webhook condition met
    logger.go:42: 21:49:40 | cert-management-policy/0-deploy-operator | deployment.apps/cert-manager-cainjector condition met
    logger.go:42: 21:49:40 | cert-management-policy/0-deploy-operator | + echo 'Waiting for cert-manager webhook to be ready...'
    logger.go:42: 21:49:40 | cert-management-policy/0-deploy-operator | Waiting for cert-manager webhook to be ready...
    logger.go:42: 21:49:40 | cert-management-policy/0-deploy-operator | + kubectl get validatingwebhookconfiguration cert-manager-webhook -o 'jsonpath={.webhooks[0].clientConfig.caBundle}'
    logger.go:42: 21:49:40 | cert-management-policy/0-deploy-operator | + grep -q '[A-Za-z0-9+/=]'
    logger.go:42: 21:49:41 | cert-management-policy/0-deploy-operator | + echo 'Waiting for cert-manager mutating webhook to be ready...'
    logger.go:42: 21:49:41 | cert-management-policy/0-deploy-operator | Waiting for cert-manager mutating webhook to be ready...
    logger.go:42: 21:49:41 | cert-management-policy/0-deploy-operator | + kubectl get mutatingwebhookconfiguration cert-manager-webhook -o 'jsonpath={.webhooks[0].clientConfig.caBundle}'
    logger.go:42: 21:49:41 | cert-management-policy/0-deploy-operator | + grep -q '[A-Za-z0-9+/=]'
    logger.go:42: 21:49:41 | cert-management-policy/0-deploy-operator | + echo 'Waiting for cert-manager webhook service to have endpoints...'
    logger.go:42: 21:49:41 | cert-management-policy/0-deploy-operator | Waiting for cert-manager webhook service to have endpoints...
    logger.go:42: 21:49:41 | cert-management-policy/0-deploy-operator | + kubectl -n cert-manager get endpoints cert-manager-webhook -o 'jsonpath={.subsets[*].addresses}'
    logger.go:42: 21:49:41 | cert-management-policy/0-deploy-operator | + grep -q .
    logger.go:42: 21:49:42 | cert-management-policy/0-deploy-operator | Warning: v1 Endpoints is deprecated in v1.33+; use discovery.k8s.io/v1 EndpointSlice
    logger.go:42: 21:49:42 | cert-management-policy/0-deploy-operator | + deploy_operator
    logger.go:42: 21:49:42 | cert-management-policy/0-deploy-operator | + local cw_prefix=
    logger.go:42: 21:49:42 | cert-management-policy/0-deploy-operator | + destroy_operator
    logger.go:42: 21:49:42 | cert-management-policy/0-deploy-operator | + kubectl -n pg-operator delete deployment percona-postgresql-operator --force --grace-period=0
    logger.go:42: 21:49:42 | cert-management-policy/0-deploy-operator | Warning: Immediate deletion does not wait for confirmation that the running resource has been terminated. The resource may continue to run on the cluster indefinitely.
    logger.go:42: 21:49:42 | cert-management-policy/0-deploy-operator | Error from server (NotFound): deployments.apps "percona-postgresql-operator" not found
    logger.go:42: 21:49:42 | cert-management-policy/0-deploy-operator | + true
    logger.go:42: 21:49:42 | cert-management-policy/0-deploy-operator | + [[ -n pg-operator ]]
    logger.go:42: 21:49:42 | cert-management-policy/0-deploy-operator | + kubectl delete namespace pg-operator --force --grace-period=0 --ignore-not-found
    logger.go:42: 21:49:42 | cert-management-policy/0-deploy-operator | Warning: Immediate deletion does not wait for confirmation that the running resource has been terminated. The resource may continue to run on the cluster indefinitely.
    logger.go:42: 21:49:43 | cert-management-policy/0-deploy-operator | + [[ -n pg-operator ]]
    logger.go:42: 21:49:43 | cert-management-policy/0-deploy-operator | + create_namespace pg-operator
    logger.go:42: 21:49:43 | cert-management-policy/0-deploy-operator | + local namespace=pg-operator
    logger.go:42: 21:49:43 | cert-management-policy/0-deploy-operator | + [[ gke == openshift ]]
    logger.go:42: 21:49:43 | cert-management-policy/0-deploy-operator | + kubectl delete namespace pg-operator --ignore-not-found
    logger.go:42: 21:49:43 | cert-management-policy/0-deploy-operator | + kubectl wait --for=delete namespace pg-operator
    logger.go:42: 21:49:44 | cert-management-policy/0-deploy-operator | + kubectl create namespace pg-operator
    logger.go:42: 21:49:44 | cert-management-policy/0-deploy-operator | namespace/pg-operator created
    logger.go:42: 21:49:44 | cert-management-policy/0-deploy-operator | + cw_prefix=cw-
    logger.go:42: 21:49:44 | cert-management-policy/0-deploy-operator | + kubectl -n pg-operator apply --server-side --force-conflicts -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy/crd.yaml
    logger.go:42: 21:49:45 | cert-management-policy/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/crunchybridgeclusters.upstream.pgv2.percona.com serverside-applied
    logger.go:42: 21:49:45 | cert-management-policy/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/perconapgbackups.pgv2.percona.com serverside-applied
    logger.go:42: 21:49:47 | cert-management-policy/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/perconapgclusters.pgv2.percona.com serverside-applied
    logger.go:42: 21:49:47 | cert-management-policy/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/perconapgrestores.pgv2.percona.com serverside-applied
    logger.go:42: 21:49:47 | cert-management-policy/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/perconapgupgrades.pgv2.percona.com serverside-applied
    logger.go:42: 21:49:48 | cert-management-policy/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/pgadmins.upstream.pgv2.percona.com serverside-applied
    logger.go:42: 21:49:48 | cert-management-policy/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/pgupgrades.upstream.pgv2.percona.com serverside-applied
    logger.go:42: 21:49:51 | cert-management-policy/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/postgresclusters.upstream.pgv2.percona.com serverside-applied
    logger.go:42: 21:49:51 | cert-management-policy/0-deploy-operator | + kubectl -n pg-operator apply --server-side --force-conflicts -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy/cw-rbac.yaml
    logger.go:42: 21:49:52 | cert-management-policy/0-deploy-operator | serviceaccount/percona-postgresql-operator serverside-applied
    logger.go:42: 21:49:52 | cert-management-policy/0-deploy-operator | clusterrole.rbac.authorization.k8s.io/percona-postgresql-operator serverside-applied
    logger.go:42: 21:49:52 | cert-management-policy/0-deploy-operator | clusterrolebinding.rbac.authorization.k8s.io/percona-postgresql-operator serverside-applied
    logger.go:42: 21:49:52 | cert-management-policy/0-deploy-operator | + local disable_telemetry=true
    logger.go:42: 21:49:52 | cert-management-policy/0-deploy-operator | + '[' cert-management-policy == telemetry-transfer ']'
    logger.go:42: 21:49:52 | cert-management-policy/0-deploy-operator | + yq eval '.spec.template.spec.containers[0].image = "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659"' /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy/cw-operator.yaml
    logger.go:42: 21:49:52 | cert-management-policy/0-deploy-operator | + yq eval '(.spec.template.spec.containers[] | select(.name=="operator") | .env[] | select(.name=="DISABLE_TELEMETRY") | .value) = "true"' -
    logger.go:42: 21:49:52 | cert-management-policy/0-deploy-operator | + yq eval '(.spec.template.spec.containers[] | select(.name=="operator") | .env[] | select(.name=="LOG_LEVEL") | .value) = "DEBUG"' -
    logger.go:42: 21:49:52 | cert-management-policy/0-deploy-operator | + yq eval '(.spec.template.spec.containers[] | select(.name=="operator") | .env[] | select(.name=="PGO_FEATURE_GATES") | .value) = ""' -
    logger.go:42: 21:49:52 | cert-management-policy/0-deploy-operator | + add_arch_to_podspecs -
    logger.go:42: 21:49:52 | cert-management-policy/0-deploy-operator | + arch_scheduling_enabled
    logger.go:42: 21:49:52 | cert-management-policy/0-deploy-operator | + [[ -n '' ]]
    logger.go:42: 21:49:52 | cert-management-policy/0-deploy-operator | + kubectl -n pg-operator apply -f -
    logger.go:42: 21:49:52 | cert-management-policy/0-deploy-operator | + cat -
    logger.go:42: 21:49:52 | cert-management-policy/0-deploy-operator | + return
    logger.go:42: 21:49:53 | cert-management-policy/0-deploy-operator | deployment.apps/percona-postgresql-operator created
    logger.go:42: 21:49:55 | cert-management-policy/0-deploy-operator | running command: [sh -c kubectl assert exist-enhanced deployment percona-postgresql-operator -n ${OPERATOR_NS:-$NAMESPACE} --field-selector status.readyReplicas=1]
    logger.go:42: 21:49:55 | cert-management-policy/0-deploy-operator | ASSERT deployment percona-postgresql-operator matching field criteria 'status.readyReplicas=1' should exist.
    logger.go:42: 21:49:56 | cert-management-policy/0-deploy-operator | ASSERT FAIL Resource(s) not found.
    logger.go:42: 21:49:58 | cert-management-policy/0-deploy-operator | running command: [sh -c kubectl assert exist-enhanced deployment percona-postgresql-operator -n ${OPERATOR_NS:-$NAMESPACE} --field-selector status.readyReplicas=1]
    logger.go:42: 21:49:58 | cert-management-policy/0-deploy-operator | ASSERT deployment percona-postgresql-operator matching field criteria 'status.readyReplicas=1' should exist.
    logger.go:42: 21:49:59 | cert-management-policy/0-deploy-operator | ASSERT FAIL Resource(s) not found.
    logger.go:42: 21:50:00 | cert-management-policy/0-deploy-operator | running command: [sh -c kubectl assert exist-enhanced deployment percona-postgresql-operator -n ${OPERATOR_NS:-$NAMESPACE} --field-selector status.readyReplicas=1]
    logger.go:42: 21:50:00 | cert-management-policy/0-deploy-operator | ASSERT deployment percona-postgresql-operator matching field criteria 'status.readyReplicas=1' should exist.
    logger.go:42: 21:50:01 | cert-management-policy/0-deploy-operator | INFO   Found 1 resource(s).
    logger.go:42: 21:50:01 | cert-management-policy/0-deploy-operator | NAME                          NAMESPACE     COL0
    logger.go:42: 21:50:01 | cert-management-policy/0-deploy-operator | percona-postgresql-operator   pg-operator   1
    logger.go:42: 21:50:01 | cert-management-policy/0-deploy-operator | ASSERT PASS
    logger.go:42: 21:50:01 | cert-management-policy/0-deploy-operator | test step completed 0-deploy-operator
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | starting test step 1-create-cluster
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | running command: [sh -c set -o errexit
        set -o xtrace
        
        source ../../functions
        
        get_cr "cert-management-policy" \
          | yq '.spec.tls.certManagementPolicy = "userProvidedOnly"' \
          | yq '.spec.proxy.pgBouncer.replicas = 1' \
          | yq '.spec.instances[].replicas = 3' \
          | kubectl -n "$NAMESPACE" apply -f -]
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | + source ../../functions
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ realpath ../../..
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | ++++ pwd
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | ++ test_name=cert-management-policy
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/vars.sh
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ export GIT_BRANCH=PR-1760
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ GIT_BRANCH=PR-1760
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ export VERSION=PR-1760-3b2c18659
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ VERSION=PR-1760-3b2c18659
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | +++ [[ -z '' ]]
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | ++++ detect_k8s_platform
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | ++++ local detected_platform
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | ++++ local xtrace_enabled=false
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | ++++ [[ -o xtrace ]]
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | ++++ xtrace_enabled=true
    logger.go:42: 21:50:01 | cert-management-policy/1-create-cluster | ++++ set +o xtrace
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ PLATFORM=gke
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export PLATFORM
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ ! -n '' ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ -n '' ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export PG_VER=18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ PG_VER=18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export ARCH=
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ ARCH=
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ -z '' ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++++ kubectl get nodes -o 'jsonpath={range .items[*]}{.metadata.labels.kubernetes\.io/arch}{"\n"}{end}'
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++++ sort -u
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ node_arches=amd64
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ amd64 == arm64 ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ PG_DISTRIBUTION=
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ '' == community ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export PGOV1_VER=14
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ PGOV1_VER=14
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ MINIO_VER=5.4.0
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ VAULT_VER=0.32.0
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++++ printenv
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++++ grep -E '^IMAGE'
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++++ awk -F= '{print $1}'
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == docker.io/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == percona/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == perconalab/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++++ eval 'echo $IMAGE_AWS_CLI'
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++++ echo docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ var_value=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ [[ docker.io/amazon/aws-cli:2.34.60 == docker.io/* ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ continue
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++++ which gdate
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++++ which date
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ date=/usr/sbin/date
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++++ which gsed
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++++ which sed
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | +++ sed=/usr/sbin/sed
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++ arch_scheduling_enabled
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | ++ [[ -n '' ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + get_cr cert-management-policy
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + local cr_name=cert-management-policy
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + yq '.spec.tls.certManagementPolicy = "userProvidedOnly"'
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + local repo_path=
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + local source_path=
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + local platform=gke
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + local cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf/cert-management-policy.yaml
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + local platform_cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf/cert-management-policy-gke.yaml
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + local spaces_cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf/cert-management-policy-spaces.yaml
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + [[ -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf/cert-management-policy-gke.yaml ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + [[ gke == doks ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + crs=('/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy/cr.yaml')
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + local crs
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + [[ -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf/cert-management-policy.yaml ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + yq '.spec.proxy.pgBouncer.replicas = 1'
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + yq eval-all $'\n\t\tselect(fileIndex == 0) * (select(fileIndex == 1) // {}) |\n\t\t.metadata.name = "cert-management-policy" |\n\t\t.metadata.labels = {"e2e":"cert-management-policy"} |\n\t\t.spec.postgresVersion = 18 |\n\t\t.spec.users += [{"name":"postgres","password":{"type":"AlphaNumeric"}}] |\n\t\t.spec.users += [{"name":"cert-management-policy","password":{"type":"AlphaNumeric"}}] |\n\t\t.spec.image = "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" |\n\t\t.spec.initContainer.image = "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659" |\n\t\t.spec.backups.pgbackrest.image = "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" |\n\t\t.spec.proxy.pgBouncer.image = "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" |\n\t\t.spec.logcollector.image = "docker.io/perconalab/fluentbit:main-logcollector" |\n\t\t.spec.pmm.image = "docker.io/perconalab/pmm-client:3-dev-latest" |\n\t\t.spec.pmm.secret = "cert-management-policy-pmm-secret" |\n\t\t.spec.pmm.customClusterName = "cert-management-policy-pmm-custom-name" |\n\t\t.spec.pmm.postgresParams = "--environment=dev-postgres"\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy/cr.yaml
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + yq '.spec.instances[].replicas = 3'
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + kubectl -n kuttl-test-superb-vulture apply -f -
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + /usr/sbin/sed -i 's|<repo-path>||g' /tmp/kuttl/pg/cert-management-policy/cr.yaml
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + /usr/sbin/sed -i 's|<source-path>||g' /tmp/kuttl/pg/cert-management-policy/cr.yaml
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + /usr/sbin/sed -i 's|<bucket>|pg-operator-testing|g' /tmp/kuttl/pg/cert-management-policy/cr.yaml
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + /usr/sbin/sed -i 's|<image>|docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659|g' /tmp/kuttl/pg/cert-management-policy/cr.yaml
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + [[ gke == openshift ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + arch_scheduling_enabled
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + [[ -n '' ]]
    logger.go:42: 21:50:03 | cert-management-policy/1-create-cluster | + cat /tmp/kuttl/pg/cert-management-policy/cr.yaml
    logger.go:42: 21:50:05 | cert-management-policy/1-create-cluster | perconapgcluster.pgv2.percona.com/cert-management-policy created
    logger.go:42: 21:50:06 | cert-management-policy/1-create-cluster | test step completed 1-create-cluster
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | starting test step 2-create-root-ca
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | running command: [sh -c set -o errexit
        set -o pipefail
        set -o xtrace
        
        source ../../functions
        
        cluster="cert-management-policy"
        
        issue_root_ca
        
        kubectl -n "$NAMESPACE" create secret generic "${cluster}-cluster-ca-cert" \
          --from-file=root.crt="$TEMP_DIR/root-ca.crt" \
          --from-file=root.key="$TEMP_DIR/root-ca.key" \
          --dry-run=client -o yaml \
          | kubectl label --local -f - -o yaml \
            postgres-operator.crunchydata.com/cluster="$cluster" \
          | kubectl -n "$NAMESPACE" apply -f -
        
        secret="${cluster}-cluster-ca-cert"
        checksum=$(kubectl -n "$NAMESPACE" get secret "$secret" -o json \
          | jq --compact-output --sort-keys '.data' \
          | sha256sum | awk '{print $1}')
        kubectl -n "$NAMESPACE" annotate secret "$secret" \
          e2e.percona.com/secret-checksum="$checksum" \
          --overwrite]
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | + source ../../functions
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ realpath ../../..
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | ++++ pwd
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | ++ test_name=cert-management-policy
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/vars.sh
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ export GIT_BRANCH=PR-1760
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ GIT_BRANCH=PR-1760
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ export VERSION=PR-1760-3b2c18659
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ VERSION=PR-1760-3b2c18659
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | +++ [[ -z '' ]]
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | ++++ detect_k8s_platform
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | ++++ local detected_platform
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | ++++ local xtrace_enabled=false
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | ++++ [[ -o xtrace ]]
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | ++++ xtrace_enabled=true
    logger.go:42: 21:50:06 | cert-management-policy/2-create-root-ca | ++++ set +o xtrace
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ PLATFORM=gke
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export PLATFORM
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ ! -n '' ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ -n '' ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export PG_VER=18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ PG_VER=18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export ARCH=
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ ARCH=
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ -z '' ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++++ kubectl get nodes -o 'jsonpath={range .items[*]}{.metadata.labels.kubernetes\.io/arch}{"\n"}{end}'
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++++ sort -u
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ node_arches=amd64
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ amd64 == arm64 ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ PG_DISTRIBUTION=
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ '' == community ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export PGOV1_VER=14
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ PGOV1_VER=14
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ MINIO_VER=5.4.0
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ VAULT_VER=0.32.0
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++++ printenv
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++++ grep -E '^IMAGE'
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++++ awk -F= '{print $1}'
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ var_value=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == docker.io/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == percona/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == perconalab/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++++ eval 'echo $IMAGE_AWS_CLI'
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++++ echo docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ var_value=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ [[ docker.io/amazon/aws-cli:2.34.60 == docker.io/* ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ continue
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++++ which gdate
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++++ which date
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ date=/usr/sbin/date
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++++ which gsed
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++++ which sed
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | +++ sed=/usr/sbin/sed
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++ arch_scheduling_enabled
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | ++ [[ -n '' ]]
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | + cluster=cert-management-policy
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | + issue_root_ca
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | + openssl ecparam -name prime256v1 -genkey -noout -out /tmp/kuttl/pg/cert-management-policy/root-ca.key
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | + openssl req -new -x509 -key /tmp/kuttl/pg/cert-management-policy/root-ca.key -days 3650 -sha384 -config /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf/tls-root-ca.conf -out /tmp/kuttl/pg/cert-management-policy/root-ca.crt
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | + openssl verify -CAfile /tmp/kuttl/pg/cert-management-policy/root-ca.crt /tmp/kuttl/pg/cert-management-policy/root-ca.crt
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | /tmp/kuttl/pg/cert-management-policy/root-ca.crt: OK
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | + kubectl -n kuttl-test-superb-vulture create secret generic cert-management-policy-cluster-ca-cert --from-file=root.crt=/tmp/kuttl/pg/cert-management-policy/root-ca.crt --from-file=root.key=/tmp/kuttl/pg/cert-management-policy/root-ca.key --dry-run=client -o yaml
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | + kubectl label --local -f - -o yaml postgres-operator.crunchydata.com/cluster=cert-management-policy
    logger.go:42: 21:50:08 | cert-management-policy/2-create-root-ca | + kubectl -n kuttl-test-superb-vulture apply -f -
    logger.go:42: 21:50:10 | cert-management-policy/2-create-root-ca | secret/cert-management-policy-cluster-ca-cert created
    logger.go:42: 21:50:10 | cert-management-policy/2-create-root-ca | + secret=cert-management-policy-cluster-ca-cert
    logger.go:42: 21:50:10 | cert-management-policy/2-create-root-ca | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-cluster-ca-cert -o json
    logger.go:42: 21:50:10 | cert-management-policy/2-create-root-ca | ++ jq --compact-output --sort-keys .data
    logger.go:42: 21:50:10 | cert-management-policy/2-create-root-ca | ++ sha256sum
    logger.go:42: 21:50:10 | cert-management-policy/2-create-root-ca | ++ awk '{print $1}'
    logger.go:42: 21:50:10 | cert-management-policy/2-create-root-ca | + checksum=dac92ede23f9ec89a8b26f0f15b1f925caaf05277fc4df2170c81c03db183734
    logger.go:42: 21:50:10 | cert-management-policy/2-create-root-ca | + kubectl -n kuttl-test-superb-vulture annotate secret cert-management-policy-cluster-ca-cert e2e.percona.com/secret-checksum=dac92ede23f9ec89a8b26f0f15b1f925caaf05277fc4df2170c81c03db183734 --overwrite
    logger.go:42: 21:50:11 | cert-management-policy/2-create-root-ca | secret/cert-management-policy-cluster-ca-cert annotated
    logger.go:42: 21:50:11 | cert-management-policy/2-create-root-ca | test step completed 2-create-root-ca
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | starting test step 3-create-postgres-certificate
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | running command: [sh -c set -o errexit
        set -o pipefail
        set -o xtrace
        
        source ../../functions
        
        cluster="cert-management-policy"
        
        primary="${cluster}-primary"
        replicas="${cluster}-replicas"
        primary_names=(
          "${primary}.${NAMESPACE}.svc.cluster.local"
          "${primary}.${NAMESPACE}.svc"
          "${primary}.${NAMESPACE}"
          "$primary"
        )
        replica_names=(
          "${replicas}.${NAMESPACE}.svc.cluster.local"
          "${replicas}.${NAMESPACE}.svc"
          "${replicas}.${NAMESPACE}"
          "$replicas"
        )
        issue_certificate postgres \
          "$primary" serverAuth \
          "${primary_names[@]}" "${replica_names[@]}"
        
        kubectl -n "$NAMESPACE" create secret generic "${cluster}-cluster-cert" \
          --from-file=tls.crt="$TEMP_DIR/postgres.crt" \
          --from-file=tls.key="$TEMP_DIR/postgres.key" \
          --from-file=ca.crt="$TEMP_DIR/root-ca.crt" \
          --dry-run=client -o yaml \
          | kubectl label --local -f - -o yaml \
            postgres-operator.crunchydata.com/cluster="$cluster" \
          | kubectl -n "$NAMESPACE" apply -f -
        
        secret="${cluster}-cluster-cert"
        checksum=$(kubectl -n "$NAMESPACE" get secret "$secret" -o json \
          | jq --compact-output --sort-keys '.data' \
          | sha256sum | awk '{print $1}')
        kubectl -n "$NAMESPACE" annotate secret "$secret" \
          e2e.percona.com/secret-checksum="$checksum" \
          --overwrite]
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | + source ../../functions
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ realpath ../../..
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | ++++ pwd
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | ++ test_name=cert-management-policy
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/vars.sh
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ export GIT_BRANCH=PR-1760
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ GIT_BRANCH=PR-1760
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ export VERSION=PR-1760-3b2c18659
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ VERSION=PR-1760-3b2c18659
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | +++ [[ -z '' ]]
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | ++++ detect_k8s_platform
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | ++++ local detected_platform
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | ++++ local xtrace_enabled=false
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | ++++ [[ -o xtrace ]]
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | ++++ xtrace_enabled=true
    logger.go:42: 21:50:11 | cert-management-policy/3-create-postgres-certificate | ++++ set +o xtrace
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ PLATFORM=gke
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export PLATFORM
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ ! -n '' ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ -n '' ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export PG_VER=18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ PG_VER=18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export ARCH=
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ ARCH=
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ -z '' ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++++ kubectl get nodes -o 'jsonpath={range .items[*]}{.metadata.labels.kubernetes\.io/arch}{"\n"}{end}'
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++++ sort -u
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ node_arches=amd64
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ amd64 == arm64 ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ PG_DISTRIBUTION=
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ '' == community ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export PGOV1_VER=14
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ PGOV1_VER=14
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ MINIO_VER=5.4.0
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ VAULT_VER=0.32.0
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++++ printenv
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++++ grep -E '^IMAGE'
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++++ awk -F= '{print $1}'
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ var_value=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == docker.io/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == percona/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == perconalab/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++++ eval 'echo $IMAGE_AWS_CLI'
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++++ echo docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ var_value=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ [[ docker.io/amazon/aws-cli:2.34.60 == docker.io/* ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ continue
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++++ which gdate
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++++ which date
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ date=/usr/sbin/date
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++++ which gsed
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++++ which sed
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | +++ sed=/usr/sbin/sed
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++ arch_scheduling_enabled
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | ++ [[ -n '' ]]
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + cluster=cert-management-policy
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + primary=cert-management-policy-primary
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + replicas=cert-management-policy-replicas
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + primary_names=("${primary}.${NAMESPACE}.svc.cluster.local" "${primary}.${NAMESPACE}.svc" "${primary}.${NAMESPACE}" "$primary")
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + replica_names=("${replicas}.${NAMESPACE}.svc.cluster.local" "${replicas}.${NAMESPACE}.svc" "${replicas}.${NAMESPACE}" "$replicas")
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + issue_certificate postgres cert-management-policy-primary serverAuth cert-management-policy-primary.kuttl-test-superb-vulture.svc.cluster.local cert-management-policy-primary.kuttl-test-superb-vulture.svc cert-management-policy-primary.kuttl-test-superb-vulture cert-management-policy-primary cert-management-policy-replicas.kuttl-test-superb-vulture.svc.cluster.local cert-management-policy-replicas.kuttl-test-superb-vulture.svc cert-management-policy-replicas.kuttl-test-superb-vulture cert-management-policy-replicas
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + local name=postgres
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + local common_name=cert-management-policy-primary
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + local purpose=serverAuth
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + shift 3
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + (( 30 > 64 ))
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + awk -v common_name=cert-management-policy-primary -v purpose=serverAuth $'\n\t\t{sub("<common-name>", common_name); sub("<purpose>", purpose); print}\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf/tls-certificate.conf
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + local index=1
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + local dns_name
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + printf 'DNS.%d = %s\n' 1 cert-management-policy-primary.kuttl-test-superb-vulture.svc.cluster.local
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + index=2
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + printf 'DNS.%d = %s\n' 2 cert-management-policy-primary.kuttl-test-superb-vulture.svc
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + index=3
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + printf 'DNS.%d = %s\n' 3 cert-management-policy-primary.kuttl-test-superb-vulture
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + index=4
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + printf 'DNS.%d = %s\n' 4 cert-management-policy-primary
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + index=5
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + printf 'DNS.%d = %s\n' 5 cert-management-policy-replicas.kuttl-test-superb-vulture.svc.cluster.local
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + index=6
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + printf 'DNS.%d = %s\n' 6 cert-management-policy-replicas.kuttl-test-superb-vulture.svc
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + index=7
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + printf 'DNS.%d = %s\n' 7 cert-management-policy-replicas.kuttl-test-superb-vulture
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + index=8
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + printf 'DNS.%d = %s\n' 8 cert-management-policy-replicas
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + index=9
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + openssl ecparam -name prime256v1 -genkey -noout -out /tmp/kuttl/pg/cert-management-policy/postgres.key
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + openssl req -new -key /tmp/kuttl/pg/cert-management-policy/postgres.key -out /tmp/kuttl/pg/cert-management-policy/postgres.csr -config /tmp/kuttl/pg/cert-management-policy/postgres.conf
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + openssl x509 -req -in /tmp/kuttl/pg/cert-management-policy/postgres.csr -CA /tmp/kuttl/pg/cert-management-policy/root-ca.crt -CAkey /tmp/kuttl/pg/cert-management-policy/root-ca.key -CAcreateserial -days 365 -sha384 -extensions extensions -extfile /tmp/kuttl/pg/cert-management-policy/postgres.conf -out /tmp/kuttl/pg/cert-management-policy/postgres.crt
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | Certificate request self-signature ok
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | subject=CN=cert-management-policy-primary
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + kubectl -n kuttl-test-superb-vulture create secret generic cert-management-policy-cluster-cert --from-file=tls.crt=/tmp/kuttl/pg/cert-management-policy/postgres.crt --from-file=tls.key=/tmp/kuttl/pg/cert-management-policy/postgres.key --from-file=ca.crt=/tmp/kuttl/pg/cert-management-policy/root-ca.crt --dry-run=client -o yaml
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + kubectl label --local -f - -o yaml postgres-operator.crunchydata.com/cluster=cert-management-policy
    logger.go:42: 21:50:13 | cert-management-policy/3-create-postgres-certificate | + kubectl -n kuttl-test-superb-vulture apply -f -
    logger.go:42: 21:50:15 | cert-management-policy/3-create-postgres-certificate | secret/cert-management-policy-cluster-cert created
    logger.go:42: 21:50:15 | cert-management-policy/3-create-postgres-certificate | + secret=cert-management-policy-cluster-cert
    logger.go:42: 21:50:15 | cert-management-policy/3-create-postgres-certificate | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-cluster-cert -o json
    logger.go:42: 21:50:15 | cert-management-policy/3-create-postgres-certificate | ++ jq --compact-output --sort-keys .data
    logger.go:42: 21:50:15 | cert-management-policy/3-create-postgres-certificate | ++ sha256sum
    logger.go:42: 21:50:15 | cert-management-policy/3-create-postgres-certificate | ++ awk '{print $1}'
    logger.go:42: 21:50:15 | cert-management-policy/3-create-postgres-certificate | + checksum=40f825e91f111646b3290b8d88864ce8fe24cae14f2af5b2358361daee174757
    logger.go:42: 21:50:15 | cert-management-policy/3-create-postgres-certificate | + kubectl -n kuttl-test-superb-vulture annotate secret cert-management-policy-cluster-cert e2e.percona.com/secret-checksum=40f825e91f111646b3290b8d88864ce8fe24cae14f2af5b2358361daee174757 --overwrite
    logger.go:42: 21:50:16 | cert-management-policy/3-create-postgres-certificate | secret/cert-management-policy-cluster-cert annotated
    logger.go:42: 21:50:16 | cert-management-policy/3-create-postgres-certificate | test step completed 3-create-postgres-certificate
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | starting test step 4-create-replication-certificate
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | running command: [sh -c set -o errexit
        set -o pipefail
        set -o xtrace
        
        source ../../functions
        
        cluster="cert-management-policy"
        
        issue_certificate replication _crunchyrepl clientAuth _crunchyrepl
        
        kubectl -n "$NAMESPACE" create secret generic "${cluster}-replication-cert" \
          --from-file=tls.crt="$TEMP_DIR/replication.crt" \
          --from-file=tls.key="$TEMP_DIR/replication.key" \
          --from-file=ca.crt="$TEMP_DIR/root-ca.crt" \
          --dry-run=client -o yaml \
          | kubectl label --local -f - -o yaml \
            postgres-operator.crunchydata.com/cluster="$cluster" \
          | kubectl -n "$NAMESPACE" apply -f -
        
        secret="${cluster}-replication-cert"
        checksum=$(kubectl -n "$NAMESPACE" get secret "$secret" -o json \
          | jq --compact-output --sort-keys '.data' \
          | sha256sum | awk '{print $1}')
        kubectl -n "$NAMESPACE" annotate secret "$secret" \
          e2e.percona.com/secret-checksum="$checksum" \
          --overwrite]
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | + source ../../functions
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ realpath ../../..
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | ++++ pwd
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | ++ test_name=cert-management-policy
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/vars.sh
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ export GIT_BRANCH=PR-1760
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ GIT_BRANCH=PR-1760
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ export VERSION=PR-1760-3b2c18659
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ VERSION=PR-1760-3b2c18659
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | +++ [[ -z '' ]]
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | ++++ detect_k8s_platform
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | ++++ local detected_platform
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | ++++ local xtrace_enabled=false
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | ++++ [[ -o xtrace ]]
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | ++++ xtrace_enabled=true
    logger.go:42: 21:50:16 | cert-management-policy/4-create-replication-certificate | ++++ set +o xtrace
    logger.go:42: 21:50:17 | cert-management-policy/4-create-replication-certificate | +++ PLATFORM=gke
    logger.go:42: 21:50:17 | cert-management-policy/4-create-replication-certificate | +++ export PLATFORM
    logger.go:42: 21:50:17 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:17 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:17 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:17 | cert-management-policy/4-create-replication-certificate | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:17 | cert-management-policy/4-create-replication-certificate | +++ [[ ! -n '' ]]
    logger.go:42: 21:50:17 | cert-management-policy/4-create-replication-certificate | +++ [[ -n '' ]]
    logger.go:42: 21:50:17 | cert-management-policy/4-create-replication-certificate | +++ export PG_VER=18
    logger.go:42: 21:50:17 | cert-management-policy/4-create-replication-certificate | +++ PG_VER=18
    logger.go:42: 21:50:17 | cert-management-policy/4-create-replication-certificate | +++ export ARCH=
    logger.go:42: 21:50:17 | cert-management-policy/4-create-replication-certificate | +++ ARCH=
    logger.go:42: 21:50:17 | cert-management-policy/4-create-replication-certificate | +++ [[ -z '' ]]
    logger.go:42: 21:50:17 | cert-management-policy/4-create-replication-certificate | ++++ kubectl get nodes -o 'jsonpath={range .items[*]}{.metadata.labels.kubernetes\.io/arch}{"\n"}{end}'
    logger.go:42: 21:50:17 | cert-management-policy/4-create-replication-certificate | ++++ sort -u
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ node_arches=amd64
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ amd64 == arm64 ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ PG_DISTRIBUTION=
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ '' == community ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export PGOV1_VER=14
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ PGOV1_VER=14
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ MINIO_VER=5.4.0
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ VAULT_VER=0.32.0
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | ++++ printenv
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | ++++ grep -E '^IMAGE'
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | ++++ awk -F= '{print $1}'
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ var_value=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == docker.io/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == percona/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == perconalab/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | ++++ eval 'echo $IMAGE_AWS_CLI'
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++++ echo docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ var_value=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ [[ docker.io/amazon/aws-cli:2.34.60 == docker.io/* ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ continue
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | ++++ which gdate
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | ++++ which date
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ date=/usr/sbin/date
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | ++++ which gsed
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | ++++ which sed
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | +++ sed=/usr/sbin/sed
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | ++ arch_scheduling_enabled
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | ++ [[ -n '' ]]
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | + cluster=cert-management-policy
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | + issue_certificate replication _crunchyrepl clientAuth _crunchyrepl
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | + local name=replication
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | + local common_name=_crunchyrepl
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | + local purpose=clientAuth
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | + shift 3
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | + (( 12 > 64 ))
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | + awk -v common_name=_crunchyrepl -v purpose=clientAuth $'\n\t\t{sub("<common-name>", common_name); sub("<purpose>", purpose); print}\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf/tls-certificate.conf
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | + local index=1
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | + local dns_name
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | + printf 'DNS.%d = %s\n' 1 _crunchyrepl
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | + index=2
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | + openssl ecparam -name prime256v1 -genkey -noout -out /tmp/kuttl/pg/cert-management-policy/replication.key
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | + openssl req -new -key /tmp/kuttl/pg/cert-management-policy/replication.key -out /tmp/kuttl/pg/cert-management-policy/replication.csr -config /tmp/kuttl/pg/cert-management-policy/replication.conf
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | + openssl x509 -req -in /tmp/kuttl/pg/cert-management-policy/replication.csr -CA /tmp/kuttl/pg/cert-management-policy/root-ca.crt -CAkey /tmp/kuttl/pg/cert-management-policy/root-ca.key -CAcreateserial -days 365 -sha384 -extensions extensions -extfile /tmp/kuttl/pg/cert-management-policy/replication.conf -out /tmp/kuttl/pg/cert-management-policy/replication.crt
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | Certificate request self-signature ok
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | subject=CN=_crunchyrepl
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | + kubectl -n kuttl-test-superb-vulture create secret generic cert-management-policy-replication-cert --from-file=tls.crt=/tmp/kuttl/pg/cert-management-policy/replication.crt --from-file=tls.key=/tmp/kuttl/pg/cert-management-policy/replication.key --from-file=ca.crt=/tmp/kuttl/pg/cert-management-policy/root-ca.crt --dry-run=client -o yaml
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | + kubectl label --local -f - -o yaml postgres-operator.crunchydata.com/cluster=cert-management-policy
    logger.go:42: 21:50:18 | cert-management-policy/4-create-replication-certificate | + kubectl -n kuttl-test-superb-vulture apply -f -
    logger.go:42: 21:50:20 | cert-management-policy/4-create-replication-certificate | secret/cert-management-policy-replication-cert created
    logger.go:42: 21:50:20 | cert-management-policy/4-create-replication-certificate | + secret=cert-management-policy-replication-cert
    logger.go:42: 21:50:20 | cert-management-policy/4-create-replication-certificate | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-replication-cert -o json
    logger.go:42: 21:50:20 | cert-management-policy/4-create-replication-certificate | ++ jq --compact-output --sort-keys .data
    logger.go:42: 21:50:20 | cert-management-policy/4-create-replication-certificate | ++ sha256sum
    logger.go:42: 21:50:20 | cert-management-policy/4-create-replication-certificate | ++ awk '{print $1}'
    logger.go:42: 21:50:20 | cert-management-policy/4-create-replication-certificate | + checksum=841374e4133f75f95480a0bafa66fb4b0b458207b1957c78bd209c97d9fd683b
    logger.go:42: 21:50:20 | cert-management-policy/4-create-replication-certificate | + kubectl -n kuttl-test-superb-vulture annotate secret cert-management-policy-replication-cert e2e.percona.com/secret-checksum=841374e4133f75f95480a0bafa66fb4b0b458207b1957c78bd209c97d9fd683b --overwrite
    logger.go:42: 21:50:21 | cert-management-policy/4-create-replication-certificate | secret/cert-management-policy-replication-cert annotated
    logger.go:42: 21:50:21 | cert-management-policy/4-create-replication-certificate | test step completed 4-create-replication-certificate
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | starting test step 5-create-pgbackrest-certificates
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | running command: [sh -c set -o errexit
        set -o pipefail
        set -o xtrace
        
        source ../../functions
        
        cluster="cert-management-policy"
        
        cluster_uid=$(kubectl -n "$NAMESPACE" get postgrescluster "$cluster" \
          -o jsonpath='{.metadata.uid}')
        pgbackrest_client="pgbackrest@${cluster_uid}"
        issue_certificate pgbackrest-client \
          "$pgbackrest_client" clientAuth "$pgbackrest_client"
        
        repo_name="${cluster}-repo-host-0.${cluster}-pods"
        issue_certificate pgbackrest-repo \
          "${cluster}-repo-host" serverAuth \
          "${repo_name}.${NAMESPACE}.svc.cluster.local" \
          "${repo_name}.${NAMESPACE}.svc" \
          "${repo_name}.${NAMESPACE}" \
          "$repo_name"
        
        kubectl -n "$NAMESPACE" create secret generic "${cluster}-pgbackrest" \
          --from-file=pgbackrest.ca-roots="$TEMP_DIR/root-ca.crt" \
          --from-file=pgbackrest-client.crt="$TEMP_DIR/pgbackrest-client.crt" \
          --from-file=pgbackrest-client.key="$TEMP_DIR/pgbackrest-client.key" \
          --from-file=pgbackrest-repo-host.crt="$TEMP_DIR/pgbackrest-repo.crt" \
          --from-file=pgbackrest-repo-host.key="$TEMP_DIR/pgbackrest-repo.key" \
          --dry-run=client -o yaml \
          | kubectl label --local -f - -o yaml \
            postgres-operator.crunchydata.com/cluster="$cluster" \
          | kubectl -n "$NAMESPACE" apply -f -
        
        secret="${cluster}-pgbackrest"
        checksum=$(kubectl -n "$NAMESPACE" get secret "$secret" -o json \
          | jq --compact-output --sort-keys '.data' \
          | sha256sum | awk '{print $1}')
        kubectl -n "$NAMESPACE" annotate secret "$secret" \
          e2e.percona.com/secret-checksum="$checksum" \
          --overwrite]
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | + source ../../functions
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ realpath ../../..
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | ++++ pwd
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | ++ test_name=cert-management-policy
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/vars.sh
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ export GIT_BRANCH=PR-1760
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ GIT_BRANCH=PR-1760
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ export VERSION=PR-1760-3b2c18659
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ VERSION=PR-1760-3b2c18659
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ -z '' ]]
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | ++++ detect_k8s_platform
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | ++++ local detected_platform
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | ++++ local xtrace_enabled=false
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | ++++ [[ -o xtrace ]]
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | ++++ xtrace_enabled=true
    logger.go:42: 21:50:21 | cert-management-policy/5-create-pgbackrest-certificates | ++++ set +o xtrace
    logger.go:42: 21:50:22 | cert-management-policy/5-create-pgbackrest-certificates | +++ PLATFORM=gke
    logger.go:42: 21:50:22 | cert-management-policy/5-create-pgbackrest-certificates | +++ export PLATFORM
    logger.go:42: 21:50:22 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:22 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:22 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:22 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:22 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ ! -n '' ]]
    logger.go:42: 21:50:22 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ -n '' ]]
    logger.go:42: 21:50:22 | cert-management-policy/5-create-pgbackrest-certificates | +++ export PG_VER=18
    logger.go:42: 21:50:22 | cert-management-policy/5-create-pgbackrest-certificates | +++ PG_VER=18
    logger.go:42: 21:50:22 | cert-management-policy/5-create-pgbackrest-certificates | +++ export ARCH=
    logger.go:42: 21:50:22 | cert-management-policy/5-create-pgbackrest-certificates | +++ ARCH=
    logger.go:42: 21:50:22 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ -z '' ]]
    logger.go:42: 21:50:22 | cert-management-policy/5-create-pgbackrest-certificates | ++++ kubectl get nodes -o 'jsonpath={range .items[*]}{.metadata.labels.kubernetes\.io/arch}{"\n"}{end}'
    logger.go:42: 21:50:22 | cert-management-policy/5-create-pgbackrest-certificates | ++++ sort -u
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ node_arches=amd64
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ amd64 == arm64 ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ PG_DISTRIBUTION=
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ '' == community ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export PGOV1_VER=14
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ PGOV1_VER=14
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ MINIO_VER=5.4.0
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ VAULT_VER=0.32.0
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++++ printenv
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++++ grep -E '^IMAGE'
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++++ awk -F= '{print $1}'
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ var_value=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == docker.io/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == percona/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == perconalab/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++++ eval 'echo $IMAGE_AWS_CLI'
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++++ echo docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ var_value=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ docker.io/amazon/aws-cli:2.34.60 == docker.io/* ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ continue
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++++ which gdate
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++++ which date
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ date=/usr/sbin/date
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++++ which gsed
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++++ which sed
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | +++ sed=/usr/sbin/sed
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++ arch_scheduling_enabled
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++ [[ -n '' ]]
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | + cluster=cert-management-policy
    logger.go:42: 21:50:23 | cert-management-policy/5-create-pgbackrest-certificates | ++ kubectl -n kuttl-test-superb-vulture get postgrescluster cert-management-policy -o 'jsonpath={.metadata.uid}'
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + cluster_uid=ed2b1aa2-6e06-43f2-8628-ca6ade38534b
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + pgbackrest_client=pgbackrest@ed2b1aa2-6e06-43f2-8628-ca6ade38534b
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + issue_certificate pgbackrest-client pgbackrest@ed2b1aa2-6e06-43f2-8628-ca6ade38534b clientAuth pgbackrest@ed2b1aa2-6e06-43f2-8628-ca6ade38534b
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + local name=pgbackrest-client
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + local common_name=pgbackrest@ed2b1aa2-6e06-43f2-8628-ca6ade38534b
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + local purpose=clientAuth
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + shift 3
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + (( 47 > 64 ))
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + awk -v common_name=pgbackrest@ed2b1aa2-6e06-43f2-8628-ca6ade38534b -v purpose=clientAuth $'\n\t\t{sub("<common-name>", common_name); sub("<purpose>", purpose); print}\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf/tls-certificate.conf
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + local index=1
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + local dns_name
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + for dns_name in "$@"
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + printf 'DNS.%d = %s\n' 1 pgbackrest@ed2b1aa2-6e06-43f2-8628-ca6ade38534b
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + index=2
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + openssl ecparam -name prime256v1 -genkey -noout -out /tmp/kuttl/pg/cert-management-policy/pgbackrest-client.key
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + openssl req -new -key /tmp/kuttl/pg/cert-management-policy/pgbackrest-client.key -out /tmp/kuttl/pg/cert-management-policy/pgbackrest-client.csr -config /tmp/kuttl/pg/cert-management-policy/pgbackrest-client.conf
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + openssl x509 -req -in /tmp/kuttl/pg/cert-management-policy/pgbackrest-client.csr -CA /tmp/kuttl/pg/cert-management-policy/root-ca.crt -CAkey /tmp/kuttl/pg/cert-management-policy/root-ca.key -CAcreateserial -days 365 -sha384 -extensions extensions -extfile /tmp/kuttl/pg/cert-management-policy/pgbackrest-client.conf -out /tmp/kuttl/pg/cert-management-policy/pgbackrest-client.crt
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | Certificate request self-signature ok
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | subject=CN=pgbackrest@ed2b1aa2-6e06-43f2-8628-ca6ade38534b
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + repo_name=cert-management-policy-repo-host-0.cert-management-policy-pods
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + issue_certificate pgbackrest-repo cert-management-policy-repo-host serverAuth cert-management-policy-repo-host-0.cert-management-policy-pods.kuttl-test-superb-vulture.svc.cluster.local cert-management-policy-repo-host-0.cert-management-policy-pods.kuttl-test-superb-vulture.svc cert-management-policy-repo-host-0.cert-management-policy-pods.kuttl-test-superb-vulture cert-management-policy-repo-host-0.cert-management-policy-pods
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + local name=pgbackrest-repo
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + local common_name=cert-management-policy-repo-host
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + local purpose=serverAuth
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + shift 3
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + (( 32 > 64 ))
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + awk -v common_name=cert-management-policy-repo-host -v purpose=serverAuth $'\n\t\t{sub("<common-name>", common_name); sub("<purpose>", purpose); print}\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf/tls-certificate.conf
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + local index=1
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + local dns_name
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + for dns_name in "$@"
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + printf 'DNS.%d = %s\n' 1 cert-management-policy-repo-host-0.cert-management-policy-pods.kuttl-test-superb-vulture.svc.cluster.local
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + index=2
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + for dns_name in "$@"
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + printf 'DNS.%d = %s\n' 2 cert-management-policy-repo-host-0.cert-management-policy-pods.kuttl-test-superb-vulture.svc
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + index=3
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + for dns_name in "$@"
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + printf 'DNS.%d = %s\n' 3 cert-management-policy-repo-host-0.cert-management-policy-pods.kuttl-test-superb-vulture
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + index=4
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + for dns_name in "$@"
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + printf 'DNS.%d = %s\n' 4 cert-management-policy-repo-host-0.cert-management-policy-pods
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + index=5
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + openssl ecparam -name prime256v1 -genkey -noout -out /tmp/kuttl/pg/cert-management-policy/pgbackrest-repo.key
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + openssl req -new -key /tmp/kuttl/pg/cert-management-policy/pgbackrest-repo.key -out /tmp/kuttl/pg/cert-management-policy/pgbackrest-repo.csr -config /tmp/kuttl/pg/cert-management-policy/pgbackrest-repo.conf
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + openssl x509 -req -in /tmp/kuttl/pg/cert-management-policy/pgbackrest-repo.csr -CA /tmp/kuttl/pg/cert-management-policy/root-ca.crt -CAkey /tmp/kuttl/pg/cert-management-policy/root-ca.key -CAcreateserial -days 365 -sha384 -extensions extensions -extfile /tmp/kuttl/pg/cert-management-policy/pgbackrest-repo.conf -out /tmp/kuttl/pg/cert-management-policy/pgbackrest-repo.crt
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | Certificate request self-signature ok
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | subject=CN=cert-management-policy-repo-host
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + kubectl label --local -f - -o yaml postgres-operator.crunchydata.com/cluster=cert-management-policy
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + kubectl -n kuttl-test-superb-vulture create secret generic cert-management-policy-pgbackrest --from-file=pgbackrest.ca-roots=/tmp/kuttl/pg/cert-management-policy/root-ca.crt --from-file=pgbackrest-client.crt=/tmp/kuttl/pg/cert-management-policy/pgbackrest-client.crt --from-file=pgbackrest-client.key=/tmp/kuttl/pg/cert-management-policy/pgbackrest-client.key --from-file=pgbackrest-repo-host.crt=/tmp/kuttl/pg/cert-management-policy/pgbackrest-repo.crt --from-file=pgbackrest-repo-host.key=/tmp/kuttl/pg/cert-management-policy/pgbackrest-repo.key --dry-run=client -o yaml
    logger.go:42: 21:50:24 | cert-management-policy/5-create-pgbackrest-certificates | + kubectl -n kuttl-test-superb-vulture apply -f -
    logger.go:42: 21:50:25 | cert-management-policy/5-create-pgbackrest-certificates | secret/cert-management-policy-pgbackrest created
    logger.go:42: 21:50:25 | cert-management-policy/5-create-pgbackrest-certificates | + secret=cert-management-policy-pgbackrest
    logger.go:42: 21:50:25 | cert-management-policy/5-create-pgbackrest-certificates | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbackrest -o json
    logger.go:42: 21:50:25 | cert-management-policy/5-create-pgbackrest-certificates | ++ jq --compact-output --sort-keys .data
    logger.go:42: 21:50:25 | cert-management-policy/5-create-pgbackrest-certificates | ++ sha256sum
    logger.go:42: 21:50:25 | cert-management-policy/5-create-pgbackrest-certificates | ++ awk '{print $1}'
    logger.go:42: 21:50:25 | cert-management-policy/5-create-pgbackrest-certificates | + checksum=c0b1142b0cdd918e8a918151249df9c62733a09fbd1a55aabdefc801a1319079
    logger.go:42: 21:50:25 | cert-management-policy/5-create-pgbackrest-certificates | + kubectl -n kuttl-test-superb-vulture annotate secret cert-management-policy-pgbackrest e2e.percona.com/secret-checksum=c0b1142b0cdd918e8a918151249df9c62733a09fbd1a55aabdefc801a1319079 --overwrite
    logger.go:42: 21:50:26 | cert-management-policy/5-create-pgbackrest-certificates | secret/cert-management-policy-pgbackrest annotated
    logger.go:42: 21:50:26 | cert-management-policy/5-create-pgbackrest-certificates | test step completed 5-create-pgbackrest-certificates
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | starting test step 6-create-pgbouncer-certificate
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | running command: [sh -c set -o errexit
        set -o pipefail
        set -o xtrace
        
        source ../../functions
        
        cluster="cert-management-policy"
        
        pgbouncer="${cluster}-pgbouncer"
        pgbouncer_names=(
          "${pgbouncer}.${NAMESPACE}.svc.cluster.local"
          "${pgbouncer}.${NAMESPACE}.svc"
          "${pgbouncer}.${NAMESPACE}"
          "$pgbouncer"
        )
        issue_certificate pgbouncer \
          "$pgbouncer" serverAuth "${pgbouncer_names[@]}"
        
        kubectl -n "$NAMESPACE" create secret generic "${cluster}-pgbouncer" \
          --from-file=pgbouncer-frontend.ca-roots="$TEMP_DIR/root-ca.crt" \
          --from-file=pgbouncer-frontend.crt="$TEMP_DIR/pgbouncer.crt" \
          --from-file=pgbouncer-frontend.key="$TEMP_DIR/pgbouncer.key" \
          --dry-run=client -o yaml \
          | kubectl label --local -f - -o yaml \
            postgres-operator.crunchydata.com/cluster="$cluster" \
          | kubectl -n "$NAMESPACE" apply -f -
        
        secret="${cluster}-pgbouncer"
        checksum=$(kubectl -n "$NAMESPACE" get secret "$secret" -o json \
          | jq --compact-output --sort-keys \
            '.data | with_entries(select(.key | startswith("pgbouncer-frontend.")))' \
          | sha256sum | awk '{print $1}')
        kubectl -n "$NAMESPACE" annotate secret "$secret" \
          e2e.percona.com/secret-checksum="$checksum" \
          --overwrite]
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | + source ../../functions
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ realpath ../../..
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | ++++ pwd
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | ++ test_name=cert-management-policy
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/vars.sh
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ export GIT_BRANCH=PR-1760
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ GIT_BRANCH=PR-1760
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ export VERSION=PR-1760-3b2c18659
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ VERSION=PR-1760-3b2c18659
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ -z '' ]]
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | ++++ detect_k8s_platform
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | ++++ local detected_platform
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | ++++ local xtrace_enabled=false
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | ++++ [[ -o xtrace ]]
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | ++++ xtrace_enabled=true
    logger.go:42: 21:50:26 | cert-management-policy/6-create-pgbouncer-certificate | ++++ set +o xtrace
    logger.go:42: 21:50:28 | cert-management-policy/6-create-pgbouncer-certificate | +++ PLATFORM=gke
    logger.go:42: 21:50:28 | cert-management-policy/6-create-pgbouncer-certificate | +++ export PLATFORM
    logger.go:42: 21:50:28 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:28 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:28 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:28 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:28 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ ! -n '' ]]
    logger.go:42: 21:50:28 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ -n '' ]]
    logger.go:42: 21:50:28 | cert-management-policy/6-create-pgbouncer-certificate | +++ export PG_VER=18
    logger.go:42: 21:50:28 | cert-management-policy/6-create-pgbouncer-certificate | +++ PG_VER=18
    logger.go:42: 21:50:28 | cert-management-policy/6-create-pgbouncer-certificate | +++ export ARCH=
    logger.go:42: 21:50:28 | cert-management-policy/6-create-pgbouncer-certificate | +++ ARCH=
    logger.go:42: 21:50:28 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ -z '' ]]
    logger.go:42: 21:50:28 | cert-management-policy/6-create-pgbouncer-certificate | ++++ kubectl get nodes -o 'jsonpath={range .items[*]}{.metadata.labels.kubernetes\.io/arch}{"\n"}{end}'
    logger.go:42: 21:50:28 | cert-management-policy/6-create-pgbouncer-certificate | ++++ sort -u
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ node_arches=amd64
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ amd64 == arm64 ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ PG_DISTRIBUTION=
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ '' == community ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export PGOV1_VER=14
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ PGOV1_VER=14
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ MINIO_VER=5.4.0
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ VAULT_VER=0.32.0
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | ++++ printenv
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | ++++ grep -E '^IMAGE'
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | ++++ awk -F= '{print $1}'
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ var_value=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == docker.io/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == percona/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == perconalab/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | ++++ eval 'echo $IMAGE_AWS_CLI'
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++++ echo docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ var_value=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ docker.io/amazon/aws-cli:2.34.60 == docker.io/* ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ continue
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | ++++ which gdate
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | ++++ which date
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ date=/usr/sbin/date
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | ++++ which gsed
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | ++++ which sed
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | +++ sed=/usr/sbin/sed
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | ++ arch_scheduling_enabled
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | ++ [[ -n '' ]]
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + cluster=cert-management-policy
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + pgbouncer=cert-management-policy-pgbouncer
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + pgbouncer_names=("${pgbouncer}.${NAMESPACE}.svc.cluster.local" "${pgbouncer}.${NAMESPACE}.svc" "${pgbouncer}.${NAMESPACE}" "$pgbouncer")
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + issue_certificate pgbouncer cert-management-policy-pgbouncer serverAuth cert-management-policy-pgbouncer.kuttl-test-superb-vulture.svc.cluster.local cert-management-policy-pgbouncer.kuttl-test-superb-vulture.svc cert-management-policy-pgbouncer.kuttl-test-superb-vulture cert-management-policy-pgbouncer
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + local name=pgbouncer
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + local common_name=cert-management-policy-pgbouncer
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + local purpose=serverAuth
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + shift 3
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + (( 32 > 64 ))
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + awk -v common_name=cert-management-policy-pgbouncer -v purpose=serverAuth $'\n\t\t{sub("<common-name>", common_name); sub("<purpose>", purpose); print}\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf/tls-certificate.conf
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + local index=1
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + local dns_name
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + printf 'DNS.%d = %s\n' 1 cert-management-policy-pgbouncer.kuttl-test-superb-vulture.svc.cluster.local
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + index=2
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + printf 'DNS.%d = %s\n' 2 cert-management-policy-pgbouncer.kuttl-test-superb-vulture.svc
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + index=3
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + printf 'DNS.%d = %s\n' 3 cert-management-policy-pgbouncer.kuttl-test-superb-vulture
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + index=4
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + printf 'DNS.%d = %s\n' 4 cert-management-policy-pgbouncer
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + index=5
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + openssl ecparam -name prime256v1 -genkey -noout -out /tmp/kuttl/pg/cert-management-policy/pgbouncer.key
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + openssl req -new -key /tmp/kuttl/pg/cert-management-policy/pgbouncer.key -out /tmp/kuttl/pg/cert-management-policy/pgbouncer.csr -config /tmp/kuttl/pg/cert-management-policy/pgbouncer.conf
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + openssl x509 -req -in /tmp/kuttl/pg/cert-management-policy/pgbouncer.csr -CA /tmp/kuttl/pg/cert-management-policy/root-ca.crt -CAkey /tmp/kuttl/pg/cert-management-policy/root-ca.key -CAcreateserial -days 365 -sha384 -extensions extensions -extfile /tmp/kuttl/pg/cert-management-policy/pgbouncer.conf -out /tmp/kuttl/pg/cert-management-policy/pgbouncer.crt
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | Certificate request self-signature ok
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | subject=CN=cert-management-policy-pgbouncer
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + kubectl label --local -f - -o yaml postgres-operator.crunchydata.com/cluster=cert-management-policy
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + kubectl -n kuttl-test-superb-vulture create secret generic cert-management-policy-pgbouncer --from-file=pgbouncer-frontend.ca-roots=/tmp/kuttl/pg/cert-management-policy/root-ca.crt --from-file=pgbouncer-frontend.crt=/tmp/kuttl/pg/cert-management-policy/pgbouncer.crt --from-file=pgbouncer-frontend.key=/tmp/kuttl/pg/cert-management-policy/pgbouncer.key --dry-run=client -o yaml
    logger.go:42: 21:50:29 | cert-management-policy/6-create-pgbouncer-certificate | + kubectl -n kuttl-test-superb-vulture apply -f -
    logger.go:42: 21:50:30 | cert-management-policy/6-create-pgbouncer-certificate | secret/cert-management-policy-pgbouncer created
    logger.go:42: 21:50:30 | cert-management-policy/6-create-pgbouncer-certificate | + secret=cert-management-policy-pgbouncer
    logger.go:42: 21:50:30 | cert-management-policy/6-create-pgbouncer-certificate | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:50:30 | cert-management-policy/6-create-pgbouncer-certificate | ++ jq --compact-output --sort-keys '.data | with_entries(select(.key | startswith("pgbouncer-frontend.")))'
    logger.go:42: 21:50:30 | cert-management-policy/6-create-pgbouncer-certificate | ++ sha256sum
    logger.go:42: 21:50:30 | cert-management-policy/6-create-pgbouncer-certificate | ++ awk '{print $1}'
    logger.go:42: 21:50:30 | cert-management-policy/6-create-pgbouncer-certificate | + checksum=c9851513d6ca1eaf86889a0d6029ff2125403267df04b0d441ba5139012dd1cd
    logger.go:42: 21:50:30 | cert-management-policy/6-create-pgbouncer-certificate | + kubectl -n kuttl-test-superb-vulture annotate secret cert-management-policy-pgbouncer e2e.percona.com/secret-checksum=c9851513d6ca1eaf86889a0d6029ff2125403267df04b0d441ba5139012dd1cd --overwrite
    logger.go:42: 21:50:31 | cert-management-policy/6-create-pgbouncer-certificate | secret/cert-management-policy-pgbouncer annotated
    logger.go:42: 21:50:31 | cert-management-policy/6-create-pgbouncer-certificate | test step completed 6-create-pgbouncer-certificate
    logger.go:42: 21:50:31 | cert-management-policy/7- | starting test step 7-
    logger.go:42: 21:50:34 | cert-management-policy/7- | test step completed 7-
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | starting test step 8-create-instance-certificate
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | running command: [sh -c set -o errexit
        set -o pipefail
        set -o xtrace
        
        source ../../functions
        
        cluster="cert-management-policy"
        statefulsets=$(kubectl -n "$NAMESPACE" get statefulset \
          -l postgres-operator.crunchydata.com/cluster="$cluster",postgres-operator.crunchydata.com/data=postgres \
          -o json)
        jq -e '.items | length == 3' <<<"$statefulsets" >/dev/null
        instances=$(jq -r '.items[].metadata.name' <<<"$statefulsets" | sort)
        
        for instance in $instances; do
          instance_service=$(kubectl -n "$NAMESPACE" get statefulset "$instance" \
            -o jsonpath='{.spec.serviceName}')
          instance_name="${instance}-0.${instance_service}"
          instance_names=(
            "${instance_name}.${NAMESPACE}.svc.cluster.local"
            "${instance_name}.${NAMESPACE}.svc"
            "${instance_name}.${NAMESPACE}"
            "$instance_name"
          )
        
          issue_certificate "$instance" \
            "${instance}-0" serverAuth \
            "${instance_names[@]}"
          cp "$TEMP_DIR/${instance}.key" "$TEMP_DIR/${instance}.patroni.crt-combined"
          cat "$TEMP_DIR/${instance}.crt" >>"$TEMP_DIR/${instance}.patroni.crt-combined"
        
          kubectl -n "$NAMESPACE" create secret generic "${instance}-certs" \
            --from-file=dns.crt="$TEMP_DIR/${instance}.crt" \
            --from-file=dns.key="$TEMP_DIR/${instance}.key" \
            --from-file=patroni.ca-roots="$TEMP_DIR/root-ca.crt" \
            --from-file=patroni.crt-combined="$TEMP_DIR/${instance}.patroni.crt-combined" \
            --from-file=pgbackrest-server.crt="$TEMP_DIR/${instance}.crt" \
            --from-file=pgbackrest-server.key="$TEMP_DIR/${instance}.key" \
            --dry-run=client -o yaml \
            | kubectl label --local -f - -o yaml \
              postgres-operator.crunchydata.com/cluster="$cluster" \
              postgres-operator.crunchydata.com/instance="$instance" \
              postgres-operator.crunchydata.com/instance-set=instance1 \
            | kubectl -n "$NAMESPACE" apply -f -
        
          secret="${instance}-certs"
          checksum=$(kubectl -n "$NAMESPACE" get secret "$secret" -o json \
            | jq --compact-output --sort-keys '.data' \
            | sha256sum | awk '{print $1}')
          kubectl -n "$NAMESPACE" annotate secret "$secret" \
            e2e.percona.com/secret-checksum="$checksum" \
            --overwrite
        done]
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | + source ../../functions
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ realpath ../../..
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | ++++ pwd
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | ++ test_name=cert-management-policy
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/vars.sh
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ export GIT_BRANCH=PR-1760
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ GIT_BRANCH=PR-1760
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ export VERSION=PR-1760-3b2c18659
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ VERSION=PR-1760-3b2c18659
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | +++ [[ -z '' ]]
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | ++++ detect_k8s_platform
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | ++++ local detected_platform
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | ++++ local xtrace_enabled=false
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | ++++ [[ -o xtrace ]]
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | ++++ xtrace_enabled=true
    logger.go:42: 21:50:34 | cert-management-policy/8-create-instance-certificate | ++++ set +o xtrace
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ PLATFORM=gke
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export PLATFORM
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ ! -n '' ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ -n '' ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export PG_VER=18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ PG_VER=18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export ARCH=
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ ARCH=
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ -z '' ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++++ kubectl get nodes -o 'jsonpath={range .items[*]}{.metadata.labels.kubernetes\.io/arch}{"\n"}{end}'
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++++ sort -u
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ node_arches=amd64
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ amd64 == arm64 ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ PG_DISTRIBUTION=
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ '' == community ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export PGOV1_VER=14
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ PGOV1_VER=14
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ MINIO_VER=5.4.0
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ VAULT_VER=0.32.0
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++++ printenv
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++++ grep -E '^IMAGE'
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++++ awk -F= '{print $1}'
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ var_value=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == docker.io/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == percona/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == perconalab/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++++ eval 'echo $IMAGE_AWS_CLI'
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++++ echo docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ var_value=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ [[ docker.io/amazon/aws-cli:2.34.60 == docker.io/* ]]
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ continue
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++++ which gdate
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++++ which date
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ date=/usr/sbin/date
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++++ which gsed
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++++ which sed
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | +++ sed=/usr/sbin/sed
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++ arch_scheduling_enabled
    logger.go:42: 21:50:36 | cert-management-policy/8-create-instance-certificate | ++ [[ -n '' ]]
    logger.go:42: 21:50:37 | cert-management-policy/8-create-instance-certificate | + cluster=cert-management-policy
    logger.go:42: 21:50:37 | cert-management-policy/8-create-instance-certificate | ++ kubectl -n kuttl-test-superb-vulture get statefulset -l postgres-operator.crunchydata.com/cluster=cert-management-policy,postgres-operator.crunchydata.com/data=postgres -o json
    logger.go:42: 21:50:37 | cert-management-policy/8-create-instance-certificate | + statefulsets=$'{\n    "apiVersion": "v1",\n    "items": [\n        {\n            "apiVersion": "apps/v1",\n            "kind": "StatefulSet",\n            "metadata": {\n                "annotations": {\n                    "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n                },\n                "creationTimestamp": "2026-09-08T21:50:31Z",\n                "generation": 1,\n                "labels": {\n                    "app.kubernetes.io/component": "pg",\n                    "app.kubernetes.io/instance": "cert-management-policy",\n                    "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n                    "app.kubernetes.io/name": "percona-postgresql",\n                    "app.kubernetes.io/part-of": "percona-postgresql",\n                    "pgv2.percona.com/version": "3.1.0",\n                    "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n                    "postgres-operator.crunchydata.com/data": "postgres",\n                    "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-j92z",\n                    "postgres-operator.crunchydata.com/instance-set": "instance1"\n                },\n                "name": "cert-management-policy-instance1-j92z",\n                "namespace": "kuttl-test-superb-vulture",\n                "ownerReferences": [\n                    {\n                        "apiVersion": "upstream.pgv2.percona.com/v1beta1",\n                        "blockOwnerDeletion": true,\n                        "controller": true,\n                        "kind": "PostgresCluster",\n                        "name": "cert-management-policy",\n                        "uid": "ed2b1aa2-6e06-43f2-8628-ca6ade38534b"\n                    }\n                ],\n                "resourceVersion": "1788904232204911001",\n                "uid": "649227b5-cb2f-4e38-9d76-76cf20e9e7b6"\n            },\n            "spec": {\n                "persistentVolumeClaimRetentionPolicy": {\n                    "whenDeleted": "Retain",\n                    "whenScaled": "Retain"\n                },\n                "podManagementPolicy": "OrderedReady",\n                "replicas": 1,\n                "revisionHistoryLimit": 0,\n                "selector": {\n                    "matchLabels": {\n                        "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n                        "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-j92z",\n                        "postgres-operator.crunchydata.com/instance-set": "instance1"\n                    }\n                },\n                "serviceName": "cert-management-policy-pods",\n                "template": {\n                    "metadata": {\n                        "annotations": {\n                            "kubectl.kubernetes.io/default-container": "database",\n                            "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n                        },\n                        "labels": {\n                            "app.kubernetes.io/component": "pg",\n                            "app.kubernetes.io/instance": "cert-management-policy",\n                            "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n                            "app.kubernetes.io/name": "percona-postgresql",\n                            "app.kubernetes.io/part-of": "percona-postgresql",\n                            "pgv2.percona.com/version": "3.1.0",\n                            "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n                            "postgres-operator.crunchydata.com/data": "postgres",\n                            "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-j92z",\n                            "postgres-operator.crunchydata.com/instance-set": "instance1",\n                            "postgres-operator.crunchydata.com/patroni": "cert-management-policy-ha"\n                        }\n                    },\n                    "spec": {\n                        "affinity": {\n                            "podAntiAffinity": {\n                                "preferredDuringSchedulingIgnoredDuringExecution": [\n                                    {\n                                        "podAffinityTerm": {\n                                            "labelSelector": {\n                                                "matchLabels": {\n                                                    "postgres-operator.crunchydata.com/data": "postgres"\n                                                }\n                                            },\n                                            "topologyKey": "kubernetes.io/hostname"\n                                        },\n                                        "weight": 1\n                                    }\n                                ]\n                            }\n                        },\n                        "containers": [\n                            {\n                                "command": [\n                                    "/opt/crunchy/bin/postgres-entrypoint.sh",\n                                    "patroni",\n                                    "/etc/patroni"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "PGDATA",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PGHOST",\n                                        "value": "/tmp/postgres"\n                                    },\n                                    {\n                                        "name": "PGPORT",\n                                        "value": "5432"\n                                    },\n                                    {\n                                        "name": "KRB5_CONFIG",\n                                        "value": "/etc/postgres/krb5.conf"\n                                    },\n                                    {\n                                        "name": "KRB5RCACHEDIR",\n                                        "value": "/tmp"\n                                    },\n                                    {\n                                        "name": "LDAPTLS_CACERT",\n                                        "value": "/etc/postgres/ldap/ca.crt"\n                                    },\n                                    {\n                                        "name": "LC_ALL",\n                                        "value": "en_US.utf-8"\n                                    },\n                                    {\n                                        "name": "LANG",\n                                        "value": "en_US.utf-8"\n                                    },\n                                    {\n                                        "name": "PATRONI_NAME",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.name"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "PATRONI_KUBERNETES_POD_IP",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "status.podIP"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "PATRONI_KUBERNETES_PORTS",\n                                        "value": "- name: postgres\\n  port: 5432\\n  protocol: TCP\\n"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_CONNECT_ADDRESS",\n                                        "value": "$(PATRONI_NAME).cert-management-policy-pods:5432"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_LISTEN",\n                                        "value": "*:5432"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_CONFIG_DIR",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_DATA_DIR",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PATRONI_RESTAPI_CONNECT_ADDRESS",\n                                        "value": "$(PATRONI_NAME).cert-management-policy-pods:8008"\n                                    },\n                                    {\n                                        "name": "PATRONI_RESTAPI_LISTEN",\n                                        "value": "*:8008"\n                                    },\n                                    {\n                                        "name": "PATRONICTL_CONFIG_FILE",\n                                        "value": "/etc/patroni"\n                                    },\n                                    {\n                                        "name": "LD_PRELOAD",\n                                        "value": "/usr/lib64/libnss_wrapper.so"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_PASSWD",\n                                        "value": "/tmp/nss_wrapper/postgres/passwd"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_GROUP",\n                                        "value": "/tmp/nss_wrapper/postgres/group"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "livenessProbe": {\n                                    "exec": {\n                                        "command": [\n                                            "bash",\n                                            "-c",\n                                            "/opt/crunchy/bin/postgres-liveness-check.sh"\n                                        ]\n                                    },\n                                    "failureThreshold": 3,\n                                    "initialDelaySeconds": 3,\n                                    "periodSeconds": 10,\n                                    "successThreshold": 1,\n                                    "timeoutSeconds": 5\n                                },\n                                "name": "database",\n                                "ports": [\n                                    {\n                                        "containerPort": 5432,\n                                        "name": "postgres",\n                                        "protocol": "TCP"\n                                    }\n                                ],\n                                "readinessProbe": {\n                                    "exec": {\n                                        "command": [\n                                            "bash",\n                                            "-c",\n                                            "/opt/crunchy/bin/postgres-readiness-check.sh"\n                                        ]\n                                    },\n                                    "failureThreshold": 3,\n                                    "initialDelaySeconds": 3,\n                                    "periodSeconds": 10,\n                                    "successThreshold": 1,\n                                    "timeoutSeconds": 5\n                                },\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgconf/tls",\n                                        "name": "cert-volume",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/etc/database-containerinfo",\n                                        "name": "database-containerinfo",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/etc/pgbackrest/conf.d",\n                                        "name": "pgbackrest-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/etc/patroni",\n                                        "name": "patroni-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    },\n                                    {\n                                        "mountPath": "/dev/shm",\n                                        "name": "dshm"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-ceu",\n                                    "--",\n                                    "monitor() {\\n# Parameters for curl when managing autogrow annotation.\\nAPISERVER=\\"https://kubernetes.default.svc\\"\\nSERVICEACCOUNT=\\"/var/run/secrets/kubernetes.io/serviceaccount\\"\\nNAMESPACE=$(cat ${SERVICEACCOUNT}/namespace)\\nTOKEN=$(cat ${SERVICEACCOUNT}/token)\\nCACERT=${SERVICEACCOUNT}/ca.crt\\n\\ndeclare -r directory=\\"/pgconf/tls\\"\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nwhile read -r -t 5 -u \\"${fd}\\" ||:; do\\n  # Manage replication certificate.\\n  if [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n    install -D --mode=0600 -t \\"/tmp/replication\\" \\"${directory}\\"/{replication/tls.crt,replication/tls.key,replication/ca.crt} \\u0026\\u0026\\n    pkill -HUP --exact --parent=1 postgres\\n  then\\n    exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n    stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n  fi\\n\\ndone\\n}; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n                                    "replication-cert-copy"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "replication-cert-copy",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgconf/tls",\n                                        "name": "cert-volume",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "args": [\n                                    "fluent-bit"\n                                ],\n                                "command": [\n                                    "/opt/crunchy/logcollector/entrypoint.sh"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "PG_LOG_DIR",\n                                        "value": "/pgdata/pg18/log"\n                                    },\n                                    {\n                                        "name": "PGBACKREST_LOG_DIR",\n                                        "value": "/pgdata/pgbackrest/log"\n                                    },\n                                    {\n                                        "name": "POD_NAMESPACE",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.namespace"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "POD_NAME",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.name"\n                                            }\n                                        }\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/fluentbit:main-logcollector",\n                                "imagePullPolicy": "IfNotPresent",\n                                "name": "logs",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "runAsGroup": 26,\n                                    "runAsNonRoot": true,\n                                    "runAsUser": 26,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "args": [\n                                    "logrotate"\n                                ],\n                                "command": [\n                                    "/opt/crunchy/logcollector/entrypoint.sh"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "POD_NAMESPACE",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.namespace"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "POD_NAME",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.name"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "LOGROTATE_SCHEDULE",\n                                        "value": "0 0 * * *"\n                                    },\n                                    {\n                                        "name": "LD_PRELOAD",\n                                        "value": "/tmp/nss_wrapper/libnss_wrapper.so"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_PASSWD",\n                                        "value": "/tmp/nss_wrapper/postgres/passwd"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_GROUP",\n                                        "value": "/tmp/nss_wrapper/postgres/group"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/fluentbit:main-logcollector",\n                                "imagePullPolicy": "IfNotPresent",\n                                "name": "logrotate",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "runAsGroup": 26,\n                                    "runAsNonRoot": true,\n                                    "runAsUser": 26,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "pgbackrest",\n                                    "server"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "LD_PRELOAD",\n                                        "value": "/usr/lib64/libnss_wrapper.so"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_PASSWD",\n                                        "value": "/tmp/nss_wrapper/postgres/passwd"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_GROUP",\n                                        "value": "/tmp/nss_wrapper/postgres/group"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n                                "imagePullPolicy": "Always",\n                                "livenessProbe": {\n                                    "exec": {\n                                        "command": [\n                                            "pgbackrest",\n                                            "server-ping"\n                                        ]\n                                    },\n                                    "failureThreshold": 3,\n                                    "periodSeconds": 10,\n                                    "successThreshold": 1,\n                                    "timeoutSeconds": 1\n                                },\n                                "name": "pgbackrest",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/etc/pgbackrest/server",\n                                        "name": "pgbackrest-server",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/etc/pgbackrest/conf.d",\n                                        "name": "pgbackrest-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-ceu",\n                                    "--",\n                                    "monitor() {\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nuntil read -r -t 5 -u \\"${fd}\\"; do\\n  if\\n    [[ \\"${filename}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n    pkill -HUP --exact --parent=0 pgbackrest\\n  then\\n    exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n    stat --dereference --format=\'Loaded configuration dated %y\' \\"${filename}\\"\\n  elif\\n    { [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] ||\\n      [[ \\"${authority}\\" -nt \\"/proc/self/fd/${fd}\\" ]]\\n    } \\u0026\\u0026\\n    pkill -HUP --exact --parent=0 pgbackrest\\n  then\\n    exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n    stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n  fi\\ndone\\n}; export directory=\\"$1\\" authority=\\"$2\\" filename=\\"$3\\"; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n                                    "pgbackrest-config",\n                                    "/etc/pgbackrest/server",\n                                    "/etc/pgbackrest/conf.d/~postgres-operator/tls-ca.crt",\n                                    "/etc/pgbackrest/conf.d/~postgres-operator_server.conf"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n                                "imagePullPolicy": "Always",\n                                "name": "pgbackrest-config",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/etc/pgbackrest/server",\n                                        "name": "pgbackrest-server",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/etc/pgbackrest/conf.d",\n                                        "name": "pgbackrest-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            }\n                        ],\n                        "dnsPolicy": "ClusterFirst",\n                        "enableServiceLinks": false,\n                        "initContainers": [\n                            {\n                                "command": [\n                                    "/usr/local/bin/init-entrypoint.sh"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659",\n                                "imagePullPolicy": "Always",\n                                "name": "database-init",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-ceu",\n                                    "--",\n                                    "declare -r expected_major_version=\\"$1\\" pgwal_directory=\\"$2\\" pgbrLog_directory=\\"$3\\"\\npermissions() { while [[ -n \\"$1\\" ]]; do set \\"${1%/*}\\" \\"$@\\"; done; shift; stat -Lc \'%A %4u %4g %n\' \\"$@\\"; }\\nhalt() { local rc=$?; \\u003e\\u00262 echo \\"$@\\"; exit \\"${rc/#0/1}\\"; }\\nresults() { printf \'::postgres-operator: %s::%s\\\\n\' \\"$@\\"; }\\nrecreate() (\\n  local tmp; tmp=$(mktemp -d -p \\"${1%/*}\\"); GLOBIGNORE=\'.:..\'; set -x\\n  chmod \\"$2\\" \\"${tmp}\\"; mv \\"$1\\"/* \\"${tmp}\\"; rmdir \\"$1\\"; mv \\"${tmp}\\" \\"$1\\"\\n)\\nsafelink() (\\n  local desired=\\"$1\\" name=\\"$2\\" current\\n  current=$(realpath \\"${name}\\")\\n  if [[ \\"${current}\\" == \\"${desired}\\" ]]; then return; fi\\n  set -x; mv --no-target-directory \\"${current}\\" \\"${desired}\\"\\n  ln --no-dereference --force --symbolic \\"${desired}\\" \\"${name}\\"\\n)\\necho Initializing ...\\nresults \'uid\' \\"$(id -u ||:)\\" \'gid\' \\"$(id -G ||:)\\"\\nif [[ \\"${pgwal_directory}\\" == *\\"pgwal/\\"* ]] \\u0026\\u0026 [[ ! -d \\"/pgwal/pgbackrest-spool\\" ]];then rm -rf \\"/pgdata/pgbackrest-spool\\" \\u0026\\u0026 mkdir -p \\"/pgwal/pgbackrest-spool\\" \\u0026\\u0026 ln --force --symbolic \\"/pgwal/pgbackrest-spool\\" \\"/pgdata/pgbackrest-spool\\";fi\\nif [[ ! -e \\"/pgdata/pgbackrest-spool\\" ]];then rm -rf /pgdata/pgbackrest-spool;fi\\nresults \'postgres path\' \\"$(command -v postgres ||:)\\"\\nresults \'postgres version\' \\"${postgres_version:=$(postgres --version ||:)}\\"\\n[[ \\"${postgres_version}\\" =~ \\") ${expected_major_version}\\"($|[^0-9]) ]] ||\\nhalt Expected PostgreSQL version \\"${expected_major_version}\\"\\nresults \'config directory\' \\"${PGDATA:?}\\"\\npostgres_data_directory=$([[ -d \\"${PGDATA}\\" ]] \\u0026\\u0026 postgres -C data_directory || echo \\"${PGDATA}\\")\\nresults \'data directory\' \\"${postgres_data_directory}\\"\\n[[ \\"${postgres_data_directory}\\" == \\"${PGDATA}\\" ]] ||\\nhalt Expected matching config and data directories\\nbootstrap_dir=\\"${postgres_data_directory}_bootstrap\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 results \'bootstrap directory\' \\"${bootstrap_dir}\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 postgres_data_directory=\\"${bootstrap_dir}\\"\\nif [[ ! -e \\"${postgres_data_directory}\\" || -O \\"${postgres_data_directory}\\" ]]; then\\ninstall --directory --mode=0700 \\"${postgres_data_directory}\\"\\nelif [[ -w \\"${postgres_data_directory}\\" \\u0026\\u0026 -g \\"${postgres_data_directory}\\" ]]; then\\nrecreate \\"${postgres_data_directory}\\" \'0700\'\\nelse (halt Permissions!); fi ||\\nhalt \\"$(permissions \\"${postgres_data_directory}\\" ||:)\\"\\nresults \'pgBackRest log directory\' \\"${pgbrLog_directory}\\"\\ninstall --directory --mode=0775 \\"${pgbrLog_directory}\\" ||\\nhalt \\"$(permissions \\"${pgbrLog_directory}\\" ||:)\\"\\ninstall -D --mode=0600 -t \\"/tmp/replication\\" \\"/pgconf/tls/replication\\"/{tls.crt,tls.key,ca.crt}\\n\\n[[ -f \\"${postgres_data_directory}/PG_VERSION\\" ]] || exit 0\\nresults \'data version\' \\"${postgres_data_version:=$(\\u003c \\"${postgres_data_directory}/PG_VERSION\\")}\\"\\n[[ \\"${postgres_data_version}\\" == \\"${expected_major_version}\\" ]] ||\\nhalt Expected PostgreSQL data version \\"${expected_major_version}\\"\\n[[ ! -f \\"${postgres_data_directory}/postgresql.conf\\" ]] \\u0026\\u0026\\ntouch \\"${postgres_data_directory}/postgresql.conf\\"\\nsafelink \\"${pgwal_directory}\\" \\"${postgres_data_directory}/pg_wal\\"\\nresults \'wal directory\' \\"$(realpath \\"${postgres_data_directory}/pg_wal\\" ||:)\\"\\nrm -f \\"${postgres_data_directory}/recovery.signal\\"",\n                                    "startup",\n                                    "18",\n                                    "/pgdata/pg18_wal",\n                                    "/pgdata/pgbackrest/log"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "PGDATA",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PGHOST",\n                                        "value": "/tmp/postgres"\n                                    },\n                                    {\n                                        "name": "PGPORT",\n                                        "value": "5432"\n                                    },\n                                    {\n                                        "name": "KRB5_CONFIG",\n                                        "value": "/etc/postgres/krb5.conf"\n                                    },\n                                    {\n                                        "name": "KRB5RCACHEDIR",\n                                        "value": "/tmp"\n                                    },\n                                    {\n                                        "name": "LDAPTLS_CACERT",\n                                        "value": "/etc/postgres/ldap/ca.crt"\n                                    },\n                                    {\n                                        "name": "LC_ALL",\n                                        "value": "en_US.utf-8"\n                                    },\n                                    {\n                                        "name": "LANG",\n                                        "value": "en_US.utf-8"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "postgres-startup",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgconf/tls",\n                                        "name": "cert-volume",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-c",\n                                    "mkdir -p /tmp/nss_wrapper \\u0026\\u0026 { [[ -f /tmp/nss_wrapper/libnss_wrapper.so ]] || cp /usr/lib64/libnss_wrapper.so /tmp/nss_wrapper/libnss_wrapper.so; }"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "nss-wrapper-init-logcollector",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "runAsGroup": 26,\n                                    "runAsNonRoot": true,\n                                    "runAsUser": 26,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-c",\n                                    "export NSS_WRAPPER_SUBDIR=postgres CRUNCHY_NSS_USERNAME=postgres CRUNCHY_NSS_USER_DESC=\\"postgres\\" \\n# Define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper.  The\\n# nss_wrapper_env.sh script (which also sets these vars) isn\'t sourced here since the nss_wrapper\\n# has not yet been setup, and we therefore don\'t yet want the nss_wrapper vars in the environment.\\nmkdir -p /tmp/nss_wrapper\\nchmod g+rwx /tmp/nss_wrapper\\n\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\n# create the nss_wrapper directory\\nmkdir -p \\"${NSS_WRAPPER_DIR}\\"\\n\\n# grab the current user ID and group ID\\nUSER_ID=$(id -u)\\nexport USER_ID\\nGROUP_ID=$(id -g)\\nexport GROUP_ID\\n\\n# get copies of the passwd and group files\\n[[ -f \\"${NSS_WRAPPER_PASSWD}\\" ]] || cp \\"/etc/passwd\\" \\"${NSS_WRAPPER_PASSWD}\\"\\n[[ -f \\"${NSS_WRAPPER_GROUP}\\" ]] || cp \\"/etc/group\\" \\"${NSS_WRAPPER_GROUP}\\"\\n\\n# if the username is missing from the passwd file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_PASSWD}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n    echo \\"nss_wrapper: adding user\\"\\n    passwd_tmp=\\"${NSS_WRAPPER_DIR}/passwd_tmp\\"\\n    cp \\"${NSS_WRAPPER_PASSWD}\\" \\"${passwd_tmp}\\"\\n    sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${passwd_tmp}\\"\\n    # needed for OCP 4.x because crio updates /etc/passwd with an entry for USER_ID\\n    sed -i \\"/${USER_ID}:x:/d\\" \\"${passwd_tmp}\\"\\n    printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${GROUP_ID}:${CRUNCHY_NSS_USER_DESC}:${HOME}:/bin/bash\\\\n\' \\u003e\\u003e \\"${passwd_tmp}\\"\\n    envsubst \\u003c \\"${passwd_tmp}\\" \\u003e \\"${NSS_WRAPPER_PASSWD}\\"\\n    rm \\"${passwd_tmp}\\"\\nelse\\n    echo \\"nss_wrapper: user exists\\"\\nfi\\n\\n# if the username (which will be the same as the group name) is missing from group file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_GROUP}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n    echo \\"nss_wrapper: adding group\\"\\n    group_tmp=\\"${NSS_WRAPPER_DIR}/group_tmp\\"\\n    cp \\"${NSS_WRAPPER_GROUP}\\" \\"${group_tmp}\\"\\n    sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${group_tmp}\\"\\n    printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${CRUNCHY_NSS_USERNAME}\\\\n\' \\u003e\\u003e \\"${group_tmp}\\"\\n    envsubst \\u003c \\"${group_tmp}\\" \\u003e \\"${NSS_WRAPPER_GROUP}\\"\\n    rm \\"${group_tmp}\\"\\nelse\\n    echo \\"nss_wrapper: group exists\\"\\nfi\\n\\n# export the nss_wrapper env vars\\n# define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\nexport LD_PRELOAD=/usr/lib64/libnss_wrapper.so\\nexport NSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_PASSWD}\\"\\nexport NSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_GROUP}\\"\\n\\necho \\"nss_wrapper: environment configured\\"\\n"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "nss-wrapper-init",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            }\n                        ],\n                        "restartPolicy": "Always",\n                        "schedulerName": "default-scheduler",\n                        "securityContext": {\n                            "fsGroup": 26,\n                            "fsGroupChangePolicy": "OnRootMismatch"\n                        },\n                        "serviceAccount": "cert-management-policy-instance",\n                        "serviceAccountName": "cert-management-policy-instance",\n                        "shareProcessNamespace": true,\n                        "terminationGracePeriodSeconds": 30,\n                        "topologySpreadConstraints": [\n                            {\n                                "labelSelector": {\n                                    "matchExpressions": [\n                                        {\n                                            "key": "postgres-operator.crunchydata.com/data",\n                                            "operator": "In",\n                                            "values": [\n                                                "postgres",\n                                                "pgbackrest"\n                                            ]\n                                        }\n                                    ],\n                                    "matchLabels": {\n                                        "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n                                    }\n                                },\n                                "maxSkew": 1,\n                                "topologyKey": "kubernetes.io/hostname",\n                                "whenUnsatisfiable": "ScheduleAnyway"\n                            },\n                            {\n                                "labelSelector": {\n                                    "matchExpressions": [\n                                        {\n                                            "key": "postgres-operator.crunchydata.com/data",\n                                            "operator": "In",\n                                            "values": [\n                                                "postgres",\n                                                "pgbackrest"\n                                            ]\n                                        }\n                                    ],\n                                    "matchLabels": {\n                                        "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n                                    }\n                                },\n                                "maxSkew": 1,\n                                "topologyKey": "topology.kubernetes.io/zone",\n                                "whenUnsatisfiable": "ScheduleAnyway"\n                            }\n                        ],\n                        "volumes": [\n                            {\n                                "name": "cert-volume",\n                                "projected": {\n                                    "defaultMode": 384,\n                                    "sources": [\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "tls.crt",\n                                                        "path": "tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "tls.key",\n                                                        "path": "tls.key"\n                                                    },\n                                                    {\n                                                        "key": "ca.crt",\n                                                        "path": "ca.crt"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-cluster-cert"\n                                            }\n                                        },\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "tls.crt",\n                                                        "path": "replication/tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "tls.key",\n                                                        "path": "replication/tls.key"\n                                                    },\n                                                    {\n                                                        "key": "ca.crt",\n                                                        "path": "replication/ca.crt"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-replication-cert"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "name": "postgres-data",\n                                "persistentVolumeClaim": {\n                                    "claimName": "cert-management-policy-instance1-j92z-pgdata"\n                                }\n                            },\n                            {\n                                "downwardAPI": {\n                                    "defaultMode": 420,\n                                    "items": [\n                                        {\n                                            "path": "cpu_limit",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1m",\n                                                "resource": "limits.cpu"\n                                            }\n                                        },\n                                        {\n                                            "path": "cpu_request",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1m",\n                                                "resource": "requests.cpu"\n                                            }\n                                        },\n                                        {\n                                            "path": "mem_limit",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1Mi",\n                                                "resource": "limits.memory"\n                                            }\n                                        },\n                                        {\n                                            "path": "mem_request",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1Mi",\n                                                "resource": "requests.memory"\n                                            }\n                                        },\n                                        {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.labels"\n                                            },\n                                            "path": "labels"\n                                        },\n                                        {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.annotations"\n                                            },\n                                            "path": "annotations"\n                                        }\n                                    ]\n                                },\n                                "name": "database-containerinfo"\n                            },\n                            {\n                                "name": "pgbackrest-server",\n                                "projected": {\n                                    "defaultMode": 420,\n                                    "sources": [\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "pgbackrest-server.crt",\n                                                        "path": "server-tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-server.key",\n                                                        "mode": 384,\n                                                        "path": "server-tls.key"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-instance1-j92z-certs"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "name": "pgbackrest-config",\n                                "projected": {\n                                    "defaultMode": 420,\n                                    "sources": [\n                                        {\n                                            "configMap": {\n                                                "items": [\n                                                    {\n                                                        "key": "pgbackrest_instance.conf",\n                                                        "path": "pgbackrest_instance.conf"\n                                                    },\n                                                    {\n                                                        "key": "config-hash",\n                                                        "path": "config-hash"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-server.conf",\n                                                        "path": "~postgres-operator_server.conf"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-pgbackrest-config"\n                                            }\n                                        },\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "pgbackrest.ca-roots",\n                                                        "path": "~postgres-operator/tls-ca.crt"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-client.crt",\n                                                        "path": "~postgres-operator/client-tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-client.key",\n                                                        "mode": 384,\n                                                        "path": "~postgres-operator/client-tls.key"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-pgbackrest"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "name": "patroni-config",\n                                "projected": {\n                                    "defaultMode": 420,\n                                    "sources": [\n                                        {\n                                            "configMap": {\n                                                "items": [\n                                                    {\n                                                        "key": "patroni.yaml",\n                                                        "path": "~postgres-operator_cluster.yaml"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-config"\n                                            }\n                                        },\n                                        {\n                                            "configMap": {\n                                                "items": [\n                                                    {\n                                                        "key": "patroni.yaml",\n                                                        "path": "~postgres-operator_instance.yaml"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-instance1-j92z-config"\n                                            }\n                                        },\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "patroni.ca-roots",\n                                                        "path": "~postgres-operator/patroni.ca-roots"\n                                                    },\n                                                    {\n                                                        "key": "patroni.crt-combined",\n                                                        "path": "~postgres-operator/patroni.crt+key"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-instance1-j92z-certs"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "emptyDir": {},\n                                "name": "crunchy-bin"\n                            },\n                            {\n                                "emptyDir": {\n                                    "sizeLimit": "2Gi"\n                                },\n                                "name": "tmp"\n                            },\n                            {\n                                "emptyDir": {\n                                    "medium": "Memory"\n                                },\n                                "name": "dshm"\n                            }\n                        ]\n                    }\n                },\n                "updateStrategy": {\n                    "type": "OnDelete"\n                }\n            },\n            "status": {\n                "availableReplicas": 0,\n                "collisionCount": 0,\n                "currentReplicas": 1,\n                "currentRevision": "cert-management-policy-instance1-j92z-79dfbb9dd5",\n                "observedGeneration": 1,\n                "replicas": 1,\n                "updateRevision": "cert-management-policy-instance1-j92z-79dfbb9dd5",\n                "updatedReplicas": 1\n            }\n        },\n        {\n            "apiVersion": "apps/v1",\n            "kind": "StatefulSet",\n            "metadata": {\n                "annotations": {\n                    "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n                },\n                "creationTimestamp": "2026-09-08T21:50:31Z",\n                "generation": 1,\n                "labels": {\n                    "app.kubernetes.io/component": "pg",\n                    "app.kubernetes.io/instance": "cert-management-policy",\n                    "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n                    "app.kubernetes.io/name": "percona-postgresql",\n                    "app.kubernetes.io/part-of": "percona-postgresql",\n                    "pgv2.percona.com/version": "3.1.0",\n                    "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n                    "postgres-operator.crunchydata.com/data": "postgres",\n                    "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-wpcx",\n                    "postgres-operator.crunchydata.com/instance-set": "instance1"\n                },\n                "name": "cert-management-policy-instance1-wpcx",\n                "namespace": "kuttl-test-superb-vulture",\n                "ownerReferences": [\n                    {\n                        "apiVersion": "upstream.pgv2.percona.com/v1beta1",\n                        "blockOwnerDeletion": true,\n                        "controller": true,\n                        "kind": "PostgresCluster",\n                        "name": "cert-management-policy",\n                        "uid": "ed2b1aa2-6e06-43f2-8628-ca6ade38534b"\n                    }\n                ],\n                "resourceVersion": "1788904231883375002",\n                "uid": "74b1b66b-6d0c-4721-b225-01985faf5e82"\n            },\n            "spec": {\n                "persistentVolumeClaimRetentionPolicy": {\n                    "whenDeleted": "Retain",\n                    "whenScaled": "Retain"\n                },\n                "podManagementPolicy": "OrderedReady",\n                "replicas": 1,\n                "revisionHistoryLimit": 0,\n                "selector": {\n                    "matchLabels": {\n                        "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n                        "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-wpcx",\n                        "postgres-operator.crunchydata.com/instance-set": "instance1"\n                    }\n                },\n                "serviceName": "cert-management-policy-pods",\n                "template": {\n                    "metadata": {\n                        "annotations": {\n                            "kubectl.kubernetes.io/default-container": "database",\n                            "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n                        },\n                        "labels": {\n                            "app.kubernetes.io/component": "pg",\n                            "app.kubernetes.io/instance": "cert-management-policy",\n                            "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n                            "app.kubernetes.io/name": "percona-postgresql",\n                            "app.kubernetes.io/part-of": "percona-postgresql",\n                            "pgv2.percona.com/version": "3.1.0",\n                            "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n                            "postgres-operator.crunchydata.com/data": "postgres",\n                            "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-wpcx",\n                            "postgres-operator.crunchydata.com/instance-set": "instance1",\n                            "postgres-operator.crunchydata.com/patroni": "cert-management-policy-ha"\n                        }\n                    },\n                    "spec": {\n                        "affinity": {\n                            "podAntiAffinity": {\n                                "preferredDuringSchedulingIgnoredDuringExecution": [\n                                    {\n                                        "podAffinityTerm": {\n                                            "labelSelector": {\n                                                "matchLabels": {\n                                                    "postgres-operator.crunchydata.com/data": "postgres"\n                                                }\n                                            },\n                                            "topologyKey": "kubernetes.io/hostname"\n                                        },\n                                        "weight": 1\n                                    }\n                                ]\n                            }\n                        },\n                        "containers": [\n                            {\n                                "command": [\n                                    "/opt/crunchy/bin/postgres-entrypoint.sh",\n                                    "patroni",\n                                    "/etc/patroni"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "PGDATA",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PGHOST",\n                                        "value": "/tmp/postgres"\n                                    },\n                                    {\n                                        "name": "PGPORT",\n                                        "value": "5432"\n                                    },\n                                    {\n                                        "name": "KRB5_CONFIG",\n                                        "value": "/etc/postgres/krb5.conf"\n                                    },\n                                    {\n                                        "name": "KRB5RCACHEDIR",\n                                        "value": "/tmp"\n                                    },\n                                    {\n                                        "name": "LDAPTLS_CACERT",\n                                        "value": "/etc/postgres/ldap/ca.crt"\n                                    },\n                                    {\n                                        "name": "LC_ALL",\n                                        "value": "en_US.utf-8"\n                                    },\n                                    {\n                                        "name": "LANG",\n                                        "value": "en_US.utf-8"\n                                    },\n                                    {\n                                        "name": "PATRONI_NAME",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.name"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "PATRONI_KUBERNETES_POD_IP",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "status.podIP"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "PATRONI_KUBERNETES_PORTS",\n                                        "value": "- name: postgres\\n  port: 5432\\n  protocol: TCP\\n"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_CONNECT_ADDRESS",\n                                        "value": "$(PATRONI_NAME).cert-management-policy-pods:5432"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_LISTEN",\n                                        "value": "*:5432"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_CONFIG_DIR",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_DATA_DIR",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PATRONI_RESTAPI_CONNECT_ADDRESS",\n                                        "value": "$(PATRONI_NAME).cert-management-policy-pods:8008"\n                                    },\n                                    {\n                                        "name": "PATRONI_RESTAPI_LISTEN",\n                                        "value": "*:8008"\n                                    },\n                                    {\n                                        "name": "PATRONICTL_CONFIG_FILE",\n                                        "value": "/etc/patroni"\n                                    },\n                                    {\n                                        "name": "LD_PRELOAD",\n                                        "value": "/usr/lib64/libnss_wrapper.so"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_PASSWD",\n                                        "value": "/tmp/nss_wrapper/postgres/passwd"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_GROUP",\n                                        "value": "/tmp/nss_wrapper/postgres/group"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "livenessProbe": {\n                                    "exec": {\n                                        "command": [\n                                            "bash",\n                                            "-c",\n                                            "/opt/crunchy/bin/postgres-liveness-check.sh"\n                                        ]\n                                    },\n                                    "failureThreshold": 3,\n                                    "initialDelaySeconds": 3,\n                                    "periodSeconds": 10,\n                                    "successThreshold": 1,\n                                    "timeoutSeconds": 5\n                                },\n                                "name": "database",\n                                "ports": [\n                                    {\n                                        "containerPort": 5432,\n                                        "name": "postgres",\n                                        "protocol": "TCP"\n                                    }\n                                ],\n                                "readinessProbe": {\n                                    "exec": {\n                                        "command": [\n                                            "bash",\n                                            "-c",\n                                            "/opt/crunchy/bin/postgres-readiness-check.sh"\n                                        ]\n                                    },\n                                    "failureThreshold": 3,\n                                    "initialDelaySeconds": 3,\n                                    "periodSeconds": 10,\n                                    "successThreshold": 1,\n                                    "timeoutSeconds": 5\n                                },\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgconf/tls",\n                                        "name": "cert-volume",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/etc/database-containerinfo",\n                                        "name": "database-containerinfo",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/etc/pgbackrest/conf.d",\n                                        "name": "pgbackrest-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/etc/patroni",\n                                        "name": "patroni-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    },\n                                    {\n                                        "mountPath": "/dev/shm",\n                                        "name": "dshm"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-ceu",\n                                    "--",\n                                    "monitor() {\\n# Parameters for curl when managing autogrow annotation.\\nAPISERVER=\\"https://kubernetes.default.svc\\"\\nSERVICEACCOUNT=\\"/var/run/secrets/kubernetes.io/serviceaccount\\"\\nNAMESPACE=$(cat ${SERVICEACCOUNT}/namespace)\\nTOKEN=$(cat ${SERVICEACCOUNT}/token)\\nCACERT=${SERVICEACCOUNT}/ca.crt\\n\\ndeclare -r directory=\\"/pgconf/tls\\"\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nwhile read -r -t 5 -u \\"${fd}\\" ||:; do\\n  # Manage replication certificate.\\n  if [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n    install -D --mode=0600 -t \\"/tmp/replication\\" \\"${directory}\\"/{replication/tls.crt,replication/tls.key,replication/ca.crt} \\u0026\\u0026\\n    pkill -HUP --exact --parent=1 postgres\\n  then\\n    exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n    stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n  fi\\n\\ndone\\n}; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n                                    "replication-cert-copy"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "replication-cert-copy",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgconf/tls",\n                                        "name": "cert-volume",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "args": [\n                                    "fluent-bit"\n                                ],\n                                "command": [\n                                    "/opt/crunchy/logcollector/entrypoint.sh"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "PG_LOG_DIR",\n                                        "value": "/pgdata/pg18/log"\n                                    },\n                                    {\n                                        "name": "PGBACKREST_LOG_DIR",\n                                        "value": "/pgdata/pgbackrest/log"\n                                    },\n                                    {\n                                        "name": "POD_NAMESPACE",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.namespace"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "POD_NAME",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.name"\n                                            }\n                                        }\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/fluentbit:main-logcollector",\n                                "imagePullPolicy": "IfNotPresent",\n                                "name": "logs",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "runAsGroup": 26,\n                                    "runAsNonRoot": true,\n                                    "runAsUser": 26,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "args": [\n                                    "logrotate"\n                                ],\n                                "command": [\n                                    "/opt/crunchy/logcollector/entrypoint.sh"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "POD_NAMESPACE",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.namespace"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "POD_NAME",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.name"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "LOGROTATE_SCHEDULE",\n                                        "value": "0 0 * * *"\n                                    },\n                                    {\n                                        "name": "LD_PRELOAD",\n                                        "value": "/tmp/nss_wrapper/libnss_wrapper.so"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_PASSWD",\n                                        "value": "/tmp/nss_wrapper/postgres/passwd"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_GROUP",\n                                        "value": "/tmp/nss_wrapper/postgres/group"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/fluentbit:main-logcollector",\n                                "imagePullPolicy": "IfNotPresent",\n                                "name": "logrotate",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "runAsGroup": 26,\n                                    "runAsNonRoot": true,\n                                    "runAsUser": 26,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "pgbackrest",\n                                    "server"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "LD_PRELOAD",\n                                        "value": "/usr/lib64/libnss_wrapper.so"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_PASSWD",\n                                        "value": "/tmp/nss_wrapper/postgres/passwd"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_GROUP",\n                                        "value": "/tmp/nss_wrapper/postgres/group"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n                                "imagePullPolicy": "Always",\n                                "livenessProbe": {\n                                    "exec": {\n                                        "command": [\n                                            "pgbackrest",\n                                            "server-ping"\n                                        ]\n                                    },\n                                    "failureThreshold": 3,\n                                    "periodSeconds": 10,\n                                    "successThreshold": 1,\n                                    "timeoutSeconds": 1\n                                },\n                                "name": "pgbackrest",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/etc/pgbackrest/server",\n                                        "name": "pgbackrest-server",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/etc/pgbackrest/conf.d",\n                                        "name": "pgbackrest-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-ceu",\n                                    "--",\n                                    "monitor() {\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nuntil read -r -t 5 -u \\"${fd}\\"; do\\n  if\\n    [[ \\"${filename}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n    pkill -HUP --exact --parent=0 pgbackrest\\n  then\\n    exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n    stat --dereference --format=\'Loaded configuration dated %y\' \\"${filename}\\"\\n  elif\\n    { [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] ||\\n      [[ \\"${authority}\\" -nt \\"/proc/self/fd/${fd}\\" ]]\\n    } \\u0026\\u0026\\n    pkill -HUP --exact --parent=0 pgbackrest\\n  then\\n    exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n    stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n  fi\\ndone\\n}; export directory=\\"$1\\" authority=\\"$2\\" filename=\\"$3\\"; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n                                    "pgbackrest-config",\n                                    "/etc/pgbackrest/server",\n                                    "/etc/pgbackrest/conf.d/~postgres-operator/tls-ca.crt",\n                                    "/etc/pgbackrest/conf.d/~postgres-operator_server.conf"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n                                "imagePullPolicy": "Always",\n                                "name": "pgbackrest-config",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/etc/pgbackrest/server",\n                                        "name": "pgbackrest-server",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/etc/pgbackrest/conf.d",\n                                        "name": "pgbackrest-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            }\n                        ],\n                        "dnsPolicy": "ClusterFirst",\n                        "enableServiceLinks": false,\n                        "initContainers": [\n                            {\n                                "command": [\n                                    "/usr/local/bin/init-entrypoint.sh"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659",\n                                "imagePullPolicy": "Always",\n                                "name": "database-init",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-ceu",\n                                    "--",\n                                    "declare -r expected_major_version=\\"$1\\" pgwal_directory=\\"$2\\" pgbrLog_directory=\\"$3\\"\\npermissions() { while [[ -n \\"$1\\" ]]; do set \\"${1%/*}\\" \\"$@\\"; done; shift; stat -Lc \'%A %4u %4g %n\' \\"$@\\"; }\\nhalt() { local rc=$?; \\u003e\\u00262 echo \\"$@\\"; exit \\"${rc/#0/1}\\"; }\\nresults() { printf \'::postgres-operator: %s::%s\\\\n\' \\"$@\\"; }\\nrecreate() (\\n  local tmp; tmp=$(mktemp -d -p \\"${1%/*}\\"); GLOBIGNORE=\'.:..\'; set -x\\n  chmod \\"$2\\" \\"${tmp}\\"; mv \\"$1\\"/* \\"${tmp}\\"; rmdir \\"$1\\"; mv \\"${tmp}\\" \\"$1\\"\\n)\\nsafelink() (\\n  local desired=\\"$1\\" name=\\"$2\\" current\\n  current=$(realpath \\"${name}\\")\\n  if [[ \\"${current}\\" == \\"${desired}\\" ]]; then return; fi\\n  set -x; mv --no-target-directory \\"${current}\\" \\"${desired}\\"\\n  ln --no-dereference --force --symbolic \\"${desired}\\" \\"${name}\\"\\n)\\necho Initializing ...\\nresults \'uid\' \\"$(id -u ||:)\\" \'gid\' \\"$(id -G ||:)\\"\\nif [[ \\"${pgwal_directory}\\" == *\\"pgwal/\\"* ]] \\u0026\\u0026 [[ ! -d \\"/pgwal/pgbackrest-spool\\" ]];then rm -rf \\"/pgdata/pgbackrest-spool\\" \\u0026\\u0026 mkdir -p \\"/pgwal/pgbackrest-spool\\" \\u0026\\u0026 ln --force --symbolic \\"/pgwal/pgbackrest-spool\\" \\"/pgdata/pgbackrest-spool\\";fi\\nif [[ ! -e \\"/pgdata/pgbackrest-spool\\" ]];then rm -rf /pgdata/pgbackrest-spool;fi\\nresults \'postgres path\' \\"$(command -v postgres ||:)\\"\\nresults \'postgres version\' \\"${postgres_version:=$(postgres --version ||:)}\\"\\n[[ \\"${postgres_version}\\" =~ \\") ${expected_major_version}\\"($|[^0-9]) ]] ||\\nhalt Expected PostgreSQL version \\"${expected_major_version}\\"\\nresults \'config directory\' \\"${PGDATA:?}\\"\\npostgres_data_directory=$([[ -d \\"${PGDATA}\\" ]] \\u0026\\u0026 postgres -C data_directory || echo \\"${PGDATA}\\")\\nresults \'data directory\' \\"${postgres_data_directory}\\"\\n[[ \\"${postgres_data_directory}\\" == \\"${PGDATA}\\" ]] ||\\nhalt Expected matching config and data directories\\nbootstrap_dir=\\"${postgres_data_directory}_bootstrap\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 results \'bootstrap directory\' \\"${bootstrap_dir}\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 postgres_data_directory=\\"${bootstrap_dir}\\"\\nif [[ ! -e \\"${postgres_data_directory}\\" || -O \\"${postgres_data_directory}\\" ]]; then\\ninstall --directory --mode=0700 \\"${postgres_data_directory}\\"\\nelif [[ -w \\"${postgres_data_directory}\\" \\u0026\\u0026 -g \\"${postgres_data_directory}\\" ]]; then\\nrecreate \\"${postgres_data_directory}\\" \'0700\'\\nelse (halt Permissions!); fi ||\\nhalt \\"$(permissions \\"${postgres_data_directory}\\" ||:)\\"\\nresults \'pgBackRest log directory\' \\"${pgbrLog_directory}\\"\\ninstall --directory --mode=0775 \\"${pgbrLog_directory}\\" ||\\nhalt \\"$(permissions \\"${pgbrLog_directory}\\" ||:)\\"\\ninstall -D --mode=0600 -t \\"/tmp/replication\\" \\"/pgconf/tls/replication\\"/{tls.crt,tls.key,ca.crt}\\n\\n[[ -f \\"${postgres_data_directory}/PG_VERSION\\" ]] || exit 0\\nresults \'data version\' \\"${postgres_data_version:=$(\\u003c \\"${postgres_data_directory}/PG_VERSION\\")}\\"\\n[[ \\"${postgres_data_version}\\" == \\"${expected_major_version}\\" ]] ||\\nhalt Expected PostgreSQL data version \\"${expected_major_version}\\"\\n[[ ! -f \\"${postgres_data_directory}/postgresql.conf\\" ]] \\u0026\\u0026\\ntouch \\"${postgres_data_directory}/postgresql.conf\\"\\nsafelink \\"${pgwal_directory}\\" \\"${postgres_data_directory}/pg_wal\\"\\nresults \'wal directory\' \\"$(realpath \\"${postgres_data_directory}/pg_wal\\" ||:)\\"\\nrm -f \\"${postgres_data_directory}/recovery.signal\\"",\n                                    "startup",\n                                    "18",\n                                    "/pgdata/pg18_wal",\n                                    "/pgdata/pgbackrest/log"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "PGDATA",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PGHOST",\n                                        "value": "/tmp/postgres"\n                                    },\n                                    {\n                                        "name": "PGPORT",\n                                        "value": "5432"\n                                    },\n                                    {\n                                        "name": "KRB5_CONFIG",\n                                        "value": "/etc/postgres/krb5.conf"\n                                    },\n                                    {\n                                        "name": "KRB5RCACHEDIR",\n                                        "value": "/tmp"\n                                    },\n                                    {\n                                        "name": "LDAPTLS_CACERT",\n                                        "value": "/etc/postgres/ldap/ca.crt"\n                                    },\n                                    {\n                                        "name": "LC_ALL",\n                                        "value": "en_US.utf-8"\n                                    },\n                                    {\n                                        "name": "LANG",\n                                        "value": "en_US.utf-8"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "postgres-startup",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgconf/tls",\n                                        "name": "cert-volume",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-c",\n                                    "mkdir -p /tmp/nss_wrapper \\u0026\\u0026 { [[ -f /tmp/nss_wrapper/libnss_wrapper.so ]] || cp /usr/lib64/libnss_wrapper.so /tmp/nss_wrapper/libnss_wrapper.so; }"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "nss-wrapper-init-logcollector",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "runAsGroup": 26,\n                                    "runAsNonRoot": true,\n                                    "runAsUser": 26,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-c",\n                                    "export NSS_WRAPPER_SUBDIR=postgres CRUNCHY_NSS_USERNAME=postgres CRUNCHY_NSS_USER_DESC=\\"postgres\\" \\n# Define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper.  The\\n# nss_wrapper_env.sh script (which also sets these vars) isn\'t sourced here since the nss_wrapper\\n# has not yet been setup, and we therefore don\'t yet want the nss_wrapper vars in the environment.\\nmkdir -p /tmp/nss_wrapper\\nchmod g+rwx /tmp/nss_wrapper\\n\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\n# create the nss_wrapper directory\\nmkdir -p \\"${NSS_WRAPPER_DIR}\\"\\n\\n# grab the current user ID and group ID\\nUSER_ID=$(id -u)\\nexport USER_ID\\nGROUP_ID=$(id -g)\\nexport GROUP_ID\\n\\n# get copies of the passwd and group files\\n[[ -f \\"${NSS_WRAPPER_PASSWD}\\" ]] || cp \\"/etc/passwd\\" \\"${NSS_WRAPPER_PASSWD}\\"\\n[[ -f \\"${NSS_WRAPPER_GROUP}\\" ]] || cp \\"/etc/group\\" \\"${NSS_WRAPPER_GROUP}\\"\\n\\n# if the username is missing from the passwd file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_PASSWD}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n    echo \\"nss_wrapper: adding user\\"\\n    passwd_tmp=\\"${NSS_WRAPPER_DIR}/passwd_tmp\\"\\n    cp \\"${NSS_WRAPPER_PASSWD}\\" \\"${passwd_tmp}\\"\\n    sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${passwd_tmp}\\"\\n    # needed for OCP 4.x because crio updates /etc/passwd with an entry for USER_ID\\n    sed -i \\"/${USER_ID}:x:/d\\" \\"${passwd_tmp}\\"\\n    printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${GROUP_ID}:${CRUNCHY_NSS_USER_DESC}:${HOME}:/bin/bash\\\\n\' \\u003e\\u003e \\"${passwd_tmp}\\"\\n    envsubst \\u003c \\"${passwd_tmp}\\" \\u003e \\"${NSS_WRAPPER_PASSWD}\\"\\n    rm \\"${passwd_tmp}\\"\\nelse\\n    echo \\"nss_wrapper: user exists\\"\\nfi\\n\\n# if the username (which will be the same as the group name) is missing from group file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_GROUP}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n    echo \\"nss_wrapper: adding group\\"\\n    group_tmp=\\"${NSS_WRAPPER_DIR}/group_tmp\\"\\n    cp \\"${NSS_WRAPPER_GROUP}\\" \\"${group_tmp}\\"\\n    sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${group_tmp}\\"\\n    printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${CRUNCHY_NSS_USERNAME}\\\\n\' \\u003e\\u003e \\"${group_tmp}\\"\\n    envsubst \\u003c \\"${group_tmp}\\" \\u003e \\"${NSS_WRAPPER_GROUP}\\"\\n    rm \\"${group_tmp}\\"\\nelse\\n    echo \\"nss_wrapper: group exists\\"\\nfi\\n\\n# export the nss_wrapper env vars\\n# define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\nexport LD_PRELOAD=/usr/lib64/libnss_wrapper.so\\nexport NSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_PASSWD}\\"\\nexport NSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_GROUP}\\"\\n\\necho \\"nss_wrapper: environment configured\\"\\n"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "nss-wrapper-init",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            }\n                        ],\n                        "restartPolicy": "Always",\n                        "schedulerName": "default-scheduler",\n                        "securityContext": {\n                            "fsGroup": 26,\n                            "fsGroupChangePolicy": "OnRootMismatch"\n                        },\n                        "serviceAccount": "cert-management-policy-instance",\n                        "serviceAccountName": "cert-management-policy-instance",\n                        "shareProcessNamespace": true,\n                        "terminationGracePeriodSeconds": 30,\n                        "topologySpreadConstraints": [\n                            {\n                                "labelSelector": {\n                                    "matchExpressions": [\n                                        {\n                                            "key": "postgres-operator.crunchydata.com/data",\n                                            "operator": "In",\n                                            "values": [\n                                                "postgres",\n                                                "pgbackrest"\n                                            ]\n                                        }\n                                    ],\n                                    "matchLabels": {\n                                        "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n                                    }\n                                },\n                                "maxSkew": 1,\n                                "topologyKey": "kubernetes.io/hostname",\n                                "whenUnsatisfiable": "ScheduleAnyway"\n                            },\n                            {\n                                "labelSelector": {\n                                    "matchExpressions": [\n                                        {\n                                            "key": "postgres-operator.crunchydata.com/data",\n                                            "operator": "In",\n                                            "values": [\n                                                "postgres",\n                                                "pgbackrest"\n                                            ]\n                                        }\n                                    ],\n                                    "matchLabels": {\n                                        "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n                                    }\n                                },\n                                "maxSkew": 1,\n                                "topologyKey": "topology.kubernetes.io/zone",\n                                "whenUnsatisfiable": "ScheduleAnyway"\n                            }\n                        ],\n                        "volumes": [\n                            {\n                                "name": "cert-volume",\n                                "projected": {\n                                    "defaultMode": 384,\n                                    "sources": [\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "tls.crt",\n                                                        "path": "tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "tls.key",\n                                                        "path": "tls.key"\n                                                    },\n                                                    {\n                                                        "key": "ca.crt",\n                                                        "path": "ca.crt"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-cluster-cert"\n                                            }\n                                        },\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "tls.crt",\n                                                        "path": "replication/tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "tls.key",\n                                                        "path": "replication/tls.key"\n                                                    },\n                                                    {\n                                                        "key": "ca.crt",\n                                                        "path": "replication/ca.crt"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-replication-cert"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "name": "postgres-data",\n                                "persistentVolumeClaim": {\n                                    "claimName": "cert-management-policy-instance1-wpcx-pgdata"\n                                }\n                            },\n                            {\n                                "downwardAPI": {\n                                    "defaultMode": 420,\n                                    "items": [\n                                        {\n                                            "path": "cpu_limit",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1m",\n                                                "resource": "limits.cpu"\n                                            }\n                                        },\n                                        {\n                                            "path": "cpu_request",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1m",\n                                                "resource": "requests.cpu"\n                                            }\n                                        },\n                                        {\n                                            "path": "mem_limit",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1Mi",\n                                                "resource": "limits.memory"\n                                            }\n                                        },\n                                        {\n                                            "path": "mem_request",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1Mi",\n                                                "resource": "requests.memory"\n                                            }\n                                        },\n                                        {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.labels"\n                                            },\n                                            "path": "labels"\n                                        },\n                                        {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.annotations"\n                                            },\n                                            "path": "annotations"\n                                        }\n                                    ]\n                                },\n                                "name": "database-containerinfo"\n                            },\n                            {\n                                "name": "pgbackrest-server",\n                                "projected": {\n                                    "defaultMode": 420,\n                                    "sources": [\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "pgbackrest-server.crt",\n                                                        "path": "server-tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-server.key",\n                                                        "mode": 384,\n                                                        "path": "server-tls.key"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-instance1-wpcx-certs"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "name": "pgbackrest-config",\n                                "projected": {\n                                    "defaultMode": 420,\n                                    "sources": [\n                                        {\n                                            "configMap": {\n                                                "items": [\n                                                    {\n                                                        "key": "pgbackrest_instance.conf",\n                                                        "path": "pgbackrest_instance.conf"\n                                                    },\n                                                    {\n                                                        "key": "config-hash",\n                                                        "path": "config-hash"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-server.conf",\n                                                        "path": "~postgres-operator_server.conf"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-pgbackrest-config"\n                                            }\n                                        },\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "pgbackrest.ca-roots",\n                                                        "path": "~postgres-operator/tls-ca.crt"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-client.crt",\n                                                        "path": "~postgres-operator/client-tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-client.key",\n                                                        "mode": 384,\n                                                        "path": "~postgres-operator/client-tls.key"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-pgbackrest"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "name": "patroni-config",\n                                "projected": {\n                                    "defaultMode": 420,\n                                    "sources": [\n                                        {\n                                            "configMap": {\n                                                "items": [\n                                                    {\n                                                        "key": "patroni.yaml",\n                                                        "path": "~postgres-operator_cluster.yaml"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-config"\n                                            }\n                                        },\n                                        {\n                                            "configMap": {\n                                                "items": [\n                                                    {\n                                                        "key": "patroni.yaml",\n                                                        "path": "~postgres-operator_instance.yaml"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-instance1-wpcx-config"\n                                            }\n                                        },\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "patroni.ca-roots",\n                                                        "path": "~postgres-operator/patroni.ca-roots"\n                                                    },\n                                                    {\n                                                        "key": "patroni.crt-combined",\n                                                        "path": "~postgres-operator/patroni.crt+key"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-instance1-wpcx-certs"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "emptyDir": {},\n                                "name": "crunchy-bin"\n                            },\n                            {\n                                "emptyDir": {\n                                    "sizeLimit": "2Gi"\n                                },\n                                "name": "tmp"\n                            },\n                            {\n                                "emptyDir": {\n                                    "medium": "Memory"\n                                },\n                                "name": "dshm"\n                            }\n                        ]\n                    }\n                },\n                "updateStrategy": {\n                    "type": "OnDelete"\n                }\n            },\n            "status": {\n                "availableReplicas": 0,\n                "collisionCount": 0,\n                "currentReplicas": 1,\n                "currentRevision": "cert-management-policy-instance1-wpcx-5555c7fcc4",\n                "observedGeneration": 1,\n                "replicas": 1,\n                "updateRevision": "cert-management-policy-instance1-wpcx-5555c7fcc4",\n                "updatedReplicas": 1\n            }\n        },\n        {\n            "apiVersion": "apps/v1",\n            "kind": "StatefulSet",\n            "metadata": {\n                "annotations": {\n                    "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n                },\n                "creationTimestamp": "2026-09-08T21:50:31Z",\n                "generation": 1,\n                "labels": {\n                    "app.kubernetes.io/component": "pg",\n                    "app.kubernetes.io/instance": "cert-management-policy",\n                    "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n                    "app.kubernetes.io/name": "percona-postgresql",\n                    "app.kubernetes.io/part-of": "percona-postgresql",\n                    "pgv2.percona.com/version": "3.1.0",\n                    "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n                    "postgres-operator.crunchydata.com/data": "postgres",\n                    "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-zltj",\n                    "postgres-operator.crunchydata.com/instance-set": "instance1"\n                },\n                "name": "cert-management-policy-instance1-zltj",\n                "namespace": "kuttl-test-superb-vulture",\n                "ownerReferences": [\n                    {\n                        "apiVersion": "upstream.pgv2.percona.com/v1beta1",\n                        "blockOwnerDeletion": true,\n                        "controller": true,\n                        "kind": "PostgresCluster",\n                        "name": "cert-management-policy",\n                        "uid": "ed2b1aa2-6e06-43f2-8628-ca6ade38534b"\n                    }\n                ],\n                "resourceVersion": "1788904231649135016",\n                "uid": "c722e148-ec7f-4871-81d7-c81c7570ce9b"\n            },\n            "spec": {\n                "persistentVolumeClaimRetentionPolicy": {\n                    "whenDeleted": "Retain",\n                    "whenScaled": "Retain"\n                },\n                "podManagementPolicy": "OrderedReady",\n                "replicas": 1,\n                "revisionHistoryLimit": 0,\n                "selector": {\n                    "matchLabels": {\n                        "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n                        "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-zltj",\n                        "postgres-operator.crunchydata.com/instance-set": "instance1"\n                    }\n                },\n                "serviceName": "cert-management-policy-pods",\n                "template": {\n                    "metadata": {\n                        "annotations": {\n                            "kubectl.kubernetes.io/default-container": "database",\n                            "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n                        },\n                        "labels": {\n                            "app.kubernetes.io/component": "pg",\n                            "app.kubernetes.io/instance": "cert-management-policy",\n                            "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n                            "app.kubernetes.io/name": "percona-postgresql",\n                            "app.kubernetes.io/part-of": "percona-postgresql",\n                            "pgv2.percona.com/version": "3.1.0",\n                            "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n                            "postgres-operator.crunchydata.com/data": "postgres",\n                            "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-zltj",\n                            "postgres-operator.crunchydata.com/instance-set": "instance1",\n                            "postgres-operator.crunchydata.com/patroni": "cert-management-policy-ha"\n                        }\n                    },\n                    "spec": {\n                        "affinity": {\n                            "podAntiAffinity": {\n                                "preferredDuringSchedulingIgnoredDuringExecution": [\n                                    {\n                                        "podAffinityTerm": {\n                                            "labelSelector": {\n                                                "matchLabels": {\n                                                    "postgres-operator.crunchydata.com/data": "postgres"\n                                                }\n                                            },\n                                            "topologyKey": "kubernetes.io/hostname"\n                                        },\n                                        "weight": 1\n                                    }\n                                ]\n                            }\n                        },\n                        "containers": [\n                            {\n                                "command": [\n                                    "/opt/crunchy/bin/postgres-entrypoint.sh",\n                                    "patroni",\n                                    "/etc/patroni"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "PGDATA",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PGHOST",\n                                        "value": "/tmp/postgres"\n                                    },\n                                    {\n                                        "name": "PGPORT",\n                                        "value": "5432"\n                                    },\n                                    {\n                                        "name": "KRB5_CONFIG",\n                                        "value": "/etc/postgres/krb5.conf"\n                                    },\n                                    {\n                                        "name": "KRB5RCACHEDIR",\n                                        "value": "/tmp"\n                                    },\n                                    {\n                                        "name": "LDAPTLS_CACERT",\n                                        "value": "/etc/postgres/ldap/ca.crt"\n                                    },\n                                    {\n                                        "name": "LC_ALL",\n                                        "value": "en_US.utf-8"\n                                    },\n                                    {\n                                        "name": "LANG",\n                                        "value": "en_US.utf-8"\n                                    },\n                                    {\n                                        "name": "PATRONI_NAME",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.name"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "PATRONI_KUBERNETES_POD_IP",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "status.podIP"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "PATRONI_KUBERNETES_PORTS",\n                                        "value": "- name: postgres\\n  port: 5432\\n  protocol: TCP\\n"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_CONNECT_ADDRESS",\n                                        "value": "$(PATRONI_NAME).cert-management-policy-pods:5432"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_LISTEN",\n                                        "value": "*:5432"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_CONFIG_DIR",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_DATA_DIR",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PATRONI_RESTAPI_CONNECT_ADDRESS",\n                                        "value": "$(PATRONI_NAME).cert-management-policy-pods:8008"\n                                    },\n                                    {\n                                        "name": "PATRONI_RESTAPI_LISTEN",\n                                        "value": "*:8008"\n                                    },\n                                    {\n                                        "name": "PATRONICTL_CONFIG_FILE",\n                                        "value": "/etc/patroni"\n                                    },\n                                    {\n                                        "name": "LD_PRELOAD",\n                                        "value": "/usr/lib64/libnss_wrapper.so"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_PASSWD",\n                                        "value": "/tmp/nss_wrapper/postgres/passwd"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_GROUP",\n                                        "value": "/tmp/nss_wrapper/postgres/group"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "livenessProbe": {\n                                    "exec": {\n                                        "command": [\n                                            "bash",\n                                            "-c",\n                                            "/opt/crunchy/bin/postgres-liveness-check.sh"\n                                        ]\n                                    },\n                                    "failureThreshold": 3,\n                                    "initialDelaySeconds": 3,\n                                    "periodSeconds": 10,\n                                    "successThreshold": 1,\n                                    "timeoutSeconds": 5\n                                },\n                                "name": "database",\n                                "ports": [\n                                    {\n                                        "containerPort": 5432,\n                                        "name": "postgres",\n                                        "protocol": "TCP"\n                                    }\n                                ],\n                                "readinessProbe": {\n                                    "exec": {\n                                        "command": [\n                                            "bash",\n                                            "-c",\n                                            "/opt/crunchy/bin/postgres-readiness-check.sh"\n                                        ]\n                                    },\n                                    "failureThreshold": 3,\n                                    "initialDelaySeconds": 3,\n                                    "periodSeconds": 10,\n                                    "successThreshold": 1,\n                                    "timeoutSeconds": 5\n                                },\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgconf/tls",\n                                        "name": "cert-volume",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/etc/database-containerinfo",\n                                        "name": "database-containerinfo",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/etc/pgbackrest/conf.d",\n                                        "name": "pgbackrest-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/etc/patroni",\n                                        "name": "patroni-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    },\n                                    {\n                                        "mountPath": "/dev/shm",\n                                        "name": "dshm"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-ceu",\n                                    "--",\n                                    "monitor() {\\n# Parameters for curl when managing autogrow annotation.\\nAPISERVER=\\"https://kubernetes.default.svc\\"\\nSERVICEACCOUNT=\\"/var/run/secrets/kubernetes.io/serviceaccount\\"\\nNAMESPACE=$(cat ${SERVICEACCOUNT}/namespace)\\nTOKEN=$(cat ${SERVICEACCOUNT}/token)\\nCACERT=${SERVICEACCOUNT}/ca.crt\\n\\ndeclare -r directory=\\"/pgconf/tls\\"\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nwhile read -r -t 5 -u \\"${fd}\\" ||:; do\\n  # Manage replication certificate.\\n  if [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n    install -D --mode=0600 -t \\"/tmp/replication\\" \\"${directory}\\"/{replication/tls.crt,replication/tls.key,replication/ca.crt} \\u0026\\u0026\\n    pkill -HUP --exact --parent=1 postgres\\n  then\\n    exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n    stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n  fi\\n\\ndone\\n}; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n                                    "replication-cert-copy"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "replication-cert-copy",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgconf/tls",\n                                        "name": "cert-volume",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "args": [\n                                    "fluent-bit"\n                                ],\n                                "command": [\n                                    "/opt/crunchy/logcollector/entrypoint.sh"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "PG_LOG_DIR",\n                                        "value": "/pgdata/pg18/log"\n                                    },\n                                    {\n                                        "name": "PGBACKREST_LOG_DIR",\n                                        "value": "/pgdata/pgbackrest/log"\n                                    },\n                                    {\n                                        "name": "POD_NAMESPACE",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.namespace"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "POD_NAME",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.name"\n                                            }\n                                        }\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/fluentbit:main-logcollector",\n                                "imagePullPolicy": "IfNotPresent",\n                                "name": "logs",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "runAsGroup": 26,\n                                    "runAsNonRoot": true,\n                                    "runAsUser": 26,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "args": [\n                                    "logrotate"\n                                ],\n                                "command": [\n                                    "/opt/crunchy/logcollector/entrypoint.sh"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "POD_NAMESPACE",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.namespace"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "POD_NAME",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.name"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "LOGROTATE_SCHEDULE",\n                                        "value": "0 0 * * *"\n                                    },\n                                    {\n                                        "name": "LD_PRELOAD",\n                                        "value": "/tmp/nss_wrapper/libnss_wrapper.so"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_PASSWD",\n                                        "value": "/tmp/nss_wrapper/postgres/passwd"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_GROUP",\n                                        "value": "/tmp/nss_wrapper/postgres/group"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/fluentbit:main-logcollector",\n                                "imagePullPolicy": "IfNotPresent",\n                                "name": "logrotate",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "runAsGroup": 26,\n                                    "runAsNonRoot": true,\n                                    "runAsUser": 26,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "pgbackrest",\n                                    "server"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "LD_PRELOAD",\n                                        "value": "/usr/lib64/libnss_wrapper.so"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_PASSWD",\n                                        "value": "/tmp/nss_wrapper/postgres/passwd"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_GROUP",\n                                        "value": "/tmp/nss_wrapper/postgres/group"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n                                "imagePullPolicy": "Always",\n                                "livenessProbe": {\n                                    "exec": {\n                                        "command": [\n                                            "pgbackrest",\n                                            "server-ping"\n                                        ]\n                                    },\n                                    "failureThreshold": 3,\n                                    "periodSeconds": 10,\n                                    "successThreshold": 1,\n                                    "timeoutSeconds": 1\n                                },\n                                "name": "pgbackrest",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/etc/pgbackrest/server",\n                                        "name": "pgbackrest-server",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/etc/pgbackrest/conf.d",\n                                        "name": "pgbackrest-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-ceu",\n                                    "--",\n                                    "monitor() {\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nuntil read -r -t 5 -u \\"${fd}\\"; do\\n  if\\n    [[ \\"${filename}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n    pkill -HUP --exact --parent=0 pgbackrest\\n  then\\n    exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n    stat --dereference --format=\'Loaded configuration dated %y\' \\"${filename}\\"\\n  elif\\n    { [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] ||\\n      [[ \\"${authority}\\" -nt \\"/proc/self/fd/${fd}\\" ]]\\n    } \\u0026\\u0026\\n    pkill -HUP --exact --parent=0 pgbackrest\\n  then\\n    exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n    stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n  fi\\ndone\\n}; export directory=\\"$1\\" authority=\\"$2\\" filename=\\"$3\\"; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n                                    "pgbackrest-config",\n                                    "/etc/pgbackrest/server",\n                                    "/etc/pgbackrest/conf.d/~postgres-operator/tls-ca.crt",\n                                    "/etc/pgbackrest/conf.d/~postgres-operator_server.conf"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n                                "imagePullPolicy": "Always",\n                                "name": "pgbackrest-config",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/etc/pgbackrest/server",\n                                        "name": "pgbackrest-server",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/etc/pgbackrest/conf.d",\n                                        "name": "pgbackrest-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            }\n                        ],\n                        "dnsPolicy": "ClusterFirst",\n                        "enableServiceLinks": false,\n                        "initContainers": [\n                            {\n                                "command": [\n                                    "/usr/local/bin/init-entrypoint.sh"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659",\n                                "imagePullPolicy": "Always",\n                                "name": "database-init",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-ceu",\n                                    "--",\n                                    "declare -r expected_major_version=\\"$1\\" pgwal_directory=\\"$2\\" pgbrLog_directory=\\"$3\\"\\npermissions() { while [[ -n \\"$1\\" ]]; do set \\"${1%/*}\\" \\"$@\\"; done; shift; stat -Lc \'%A %4u %4g %n\' \\"$@\\"; }\\nhalt() { local rc=$?; \\u003e\\u00262 echo \\"$@\\"; exit \\"${rc/#0/1}\\"; }\\nresults() { printf \'::postgres-operator: %s::%s\\\\n\' \\"$@\\"; }\\nrecreate() (\\n  local tmp; tmp=$(mktemp -d -p \\"${1%/*}\\"); GLOBIGNORE=\'.:..\'; set -x\\n  chmod \\"$2\\" \\"${tmp}\\"; mv \\"$1\\"/* \\"${tmp}\\"; rmdir \\"$1\\"; mv \\"${tmp}\\" \\"$1\\"\\n)\\nsafelink() (\\n  local desired=\\"$1\\" name=\\"$2\\" current\\n  current=$(realpath \\"${name}\\")\\n  if [[ \\"${current}\\" == \\"${desired}\\" ]]; then return; fi\\n  set -x; mv --no-target-directory \\"${current}\\" \\"${desired}\\"\\n  ln --no-dereference --force --symbolic \\"${desired}\\" \\"${name}\\"\\n)\\necho Initializing ...\\nresults \'uid\' \\"$(id -u ||:)\\" \'gid\' \\"$(id -G ||:)\\"\\nif [[ \\"${pgwal_directory}\\" == *\\"pgwal/\\"* ]] \\u0026\\u0026 [[ ! -d \\"/pgwal/pgbackrest-spool\\" ]];then rm -rf \\"/pgdata/pgbackrest-spool\\" \\u0026\\u0026 mkdir -p \\"/pgwal/pgbackrest-spool\\" \\u0026\\u0026 ln --force --symbolic \\"/pgwal/pgbackrest-spool\\" \\"/pgdata/pgbackrest-spool\\";fi\\nif [[ ! -e \\"/pgdata/pgbackrest-spool\\" ]];then rm -rf /pgdata/pgbackrest-spool;fi\\nresults \'postgres path\' \\"$(command -v postgres ||:)\\"\\nresults \'postgres version\' \\"${postgres_version:=$(postgres --version ||:)}\\"\\n[[ \\"${postgres_version}\\" =~ \\") ${expected_major_version}\\"($|[^0-9]) ]] ||\\nhalt Expected PostgreSQL version \\"${expected_major_version}\\"\\nresults \'config directory\' \\"${PGDATA:?}\\"\\npostgres_data_directory=$([[ -d \\"${PGDATA}\\" ]] \\u0026\\u0026 postgres -C data_directory || echo \\"${PGDATA}\\")\\nresults \'data directory\' \\"${postgres_data_directory}\\"\\n[[ \\"${postgres_data_directory}\\" == \\"${PGDATA}\\" ]] ||\\nhalt Expected matching config and data directories\\nbootstrap_dir=\\"${postgres_data_directory}_bootstrap\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 results \'bootstrap directory\' \\"${bootstrap_dir}\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 postgres_data_directory=\\"${bootstrap_dir}\\"\\nif [[ ! -e \\"${postgres_data_directory}\\" || -O \\"${postgres_data_directory}\\" ]]; then\\ninstall --directory --mode=0700 \\"${postgres_data_directory}\\"\\nelif [[ -w \\"${postgres_data_directory}\\" \\u0026\\u0026 -g \\"${postgres_data_directory}\\" ]]; then\\nrecreate \\"${postgres_data_directory}\\" \'0700\'\\nelse (halt Permissions!); fi ||\\nhalt \\"$(permissions \\"${postgres_data_directory}\\" ||:)\\"\\nresults \'pgBackRest log directory\' \\"${pgbrLog_directory}\\"\\ninstall --directory --mode=0775 \\"${pgbrLog_directory}\\" ||\\nhalt \\"$(permissions \\"${pgbrLog_directory}\\" ||:)\\"\\ninstall -D --mode=0600 -t \\"/tmp/replication\\" \\"/pgconf/tls/replication\\"/{tls.crt,tls.key,ca.crt}\\n\\n[[ -f \\"${postgres_data_directory}/PG_VERSION\\" ]] || exit 0\\nresults \'data version\' \\"${postgres_data_version:=$(\\u003c \\"${postgres_data_directory}/PG_VERSION\\")}\\"\\n[[ \\"${postgres_data_version}\\" == \\"${expected_major_version}\\" ]] ||\\nhalt Expected PostgreSQL data version \\"${expected_major_version}\\"\\n[[ ! -f \\"${postgres_data_directory}/postgresql.conf\\" ]] \\u0026\\u0026\\ntouch \\"${postgres_data_directory}/postgresql.conf\\"\\nsafelink \\"${pgwal_directory}\\" \\"${postgres_data_directory}/pg_wal\\"\\nresults \'wal directory\' \\"$(realpath \\"${postgres_data_directory}/pg_wal\\" ||:)\\"\\nrm -f \\"${postgres_data_directory}/recovery.signal\\"",\n                                    "startup",\n                                    "18",\n                                    "/pgdata/pg18_wal",\n                                    "/pgdata/pgbackrest/log"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "PGDATA",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PGHOST",\n                                        "value": "/tmp/postgres"\n                                    },\n                                    {\n                                        "name": "PGPORT",\n                                        "value": "5432"\n                                    },\n                                    {\n                                        "name": "KRB5_CONFIG",\n                                        "value": "/etc/postgres/krb5.conf"\n                                    },\n                                    {\n                                        "name": "KRB5RCACHEDIR",\n                                        "value": "/tmp"\n                                    },\n                                    {\n                                        "name": "LDAPTLS_CACERT",\n                                        "value": "/etc/postgres/ldap/ca.crt"\n                                    },\n                                    {\n                                        "name": "LC_ALL",\n                                        "value": "en_US.utf-8"\n                                    },\n                                    {\n                                        "name": "LANG",\n                                        "value": "en_US.utf-8"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "postgres-startup",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgconf/tls",\n                                        "name": "cert-volume",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-c",\n                                    "mkdir -p /tmp/nss_wrapper \\u0026\\u0026 { [[ -f /tmp/nss_wrapper/libnss_wrapper.so ]] || cp /usr/lib64/libnss_wrapper.so /tmp/nss_wrapper/libnss_wrapper.so; }"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "nss-wrapper-init-logcollector",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "runAsGroup": 26,\n                                    "runAsNonRoot": true,\n                                    "runAsUser": 26,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-c",\n                                    "export NSS_WRAPPER_SUBDIR=postgres CRUNCHY_NSS_USERNAME=postgres CRUNCHY_NSS_USER_DESC=\\"postgres\\" \\n# Define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper.  The\\n# nss_wrapper_env.sh script (which also sets these vars) isn\'t sourced here since the nss_wrapper\\n# has not yet been setup, and we therefore don\'t yet want the nss_wrapper vars in the environment.\\nmkdir -p /tmp/nss_wrapper\\nchmod g+rwx /tmp/nss_wrapper\\n\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\n# create the nss_wrapper directory\\nmkdir -p \\"${NSS_WRAPPER_DIR}\\"\\n\\n# grab the current user ID and group ID\\nUSER_ID=$(id -u)\\nexport USER_ID\\nGROUP_ID=$(id -g)\\nexport GROUP_ID\\n\\n# get copies of the passwd and group files\\n[[ -f \\"${NSS_WRAPPER_PASSWD}\\" ]] || cp \\"/etc/passwd\\" \\"${NSS_WRAPPER_PASSWD}\\"\\n[[ -f \\"${NSS_WRAPPER_GROUP}\\" ]] || cp \\"/etc/group\\" \\"${NSS_WRAPPER_GROUP}\\"\\n\\n# if the username is missing from the passwd file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_PASSWD}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n    echo \\"nss_wrapper: adding user\\"\\n    passwd_tmp=\\"${NSS_WRAPPER_DIR}/passwd_tmp\\"\\n    cp \\"${NSS_WRAPPER_PASSWD}\\" \\"${passwd_tmp}\\"\\n    sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${passwd_tmp}\\"\\n    # needed for OCP 4.x because crio updates /etc/passwd with an entry for USER_ID\\n    sed -i \\"/${USER_ID}:x:/d\\" \\"${passwd_tmp}\\"\\n    printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${GROUP_ID}:${CRUNCHY_NSS_USER_DESC}:${HOME}:/bin/bash\\\\n\' \\u003e\\u003e \\"${passwd_tmp}\\"\\n    envsubst \\u003c \\"${passwd_tmp}\\" \\u003e \\"${NSS_WRAPPER_PASSWD}\\"\\n    rm \\"${passwd_tmp}\\"\\nelse\\n    echo \\"nss_wrapper: user exists\\"\\nfi\\n\\n# if the username (which will be the same as the group name) is missing from group file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_GROUP}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n    echo \\"nss_wrapper: adding group\\"\\n    group_tmp=\\"${NSS_WRAPPER_DIR}/group_tmp\\"\\n    cp \\"${NSS_WRAPPER_GROUP}\\" \\"${group_tmp}\\"\\n    sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${group_tmp}\\"\\n    printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${CRUNCHY_NSS_USERNAME}\\\\n\' \\u003e\\u003e \\"${group_tmp}\\"\\n    envsubst \\u003c \\"${group_tmp}\\" \\u003e \\"${NSS_WRAPPER_GROUP}\\"\\n    rm \\"${group_tmp}\\"\\nelse\\n    echo \\"nss_wrapper: group exists\\"\\nfi\\n\\n# export the nss_wrapper env vars\\n# define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\nexport LD_PRELOAD=/usr/lib64/libnss_wrapper.so\\nexport NSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_PASSWD}\\"\\nexport NSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_GROUP}\\"\\n\\necho \\"nss_wrapper: environment configured\\"\\n"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "nss-wrapper-init",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            }\n                        ],\n                        "restartPolicy": "Always",\n                        "schedulerName": "default-scheduler",\n                        "securityContext": {\n                            "fsGroup": 26,\n                            "fsGroupChangePolicy": "OnRootMismatch"\n                        },\n                        "serviceAccount": "cert-management-policy-instance",\n                        "serviceAccountName": "cert-management-policy-instance",\n                        "shareProcessNamespace": true,\n                        "terminationGracePeriodSeconds": 30,\n                        "topologySpreadConstraints": [\n                            {\n                                "labelSelector": {\n                                    "matchExpressions": [\n                                        {\n                                            "key": "postgres-operator.crunchydata.com/data",\n                                            "operator": "In",\n                                            "values": [\n                                                "postgres",\n                                                "pgbackrest"\n                                            ]\n                                        }\n                                    ],\n                                    "matchLabels": {\n                                        "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n                                    }\n                                },\n                                "maxSkew": 1,\n                                "topologyKey": "kubernetes.io/hostname",\n                                "whenUnsatisfiable": "ScheduleAnyway"\n                            },\n                            {\n                                "labelSelector": {\n                                    "matchExpressions": [\n                                        {\n                                            "key": "postgres-operator.crunchydata.com/data",\n                                            "operator": "In",\n                                            "values": [\n                                                "postgres",\n                                                "pgbackrest"\n                                            ]\n                                        }\n                                    ],\n                                    "matchLabels": {\n                                        "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n                                    }\n                                },\n                                "maxSkew": 1,\n                                "topologyKey": "topology.kubernetes.io/zone",\n                                "whenUnsatisfiable": "ScheduleAnyway"\n                            }\n                        ],\n                        "volumes": [\n                            {\n                                "name": "cert-volume",\n                                "projected": {\n                                    "defaultMode": 384,\n                                    "sources": [\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "tls.crt",\n                                                        "path": "tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "tls.key",\n                                                        "path": "tls.key"\n                                                    },\n                                                    {\n                                                        "key": "ca.crt",\n                                                        "path": "ca.crt"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-cluster-cert"\n                                            }\n                                        },\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "tls.crt",\n                                                        "path": "replication/tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "tls.key",\n                                                        "path": "replication/tls.key"\n                                                    },\n                                                    {\n                                                        "key": "ca.crt",\n                                                        "path": "replication/ca.crt"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-replication-cert"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "name": "postgres-data",\n                                "persistentVolumeClaim": {\n                                    "claimName": "cert-management-policy-instance1-zltj-pgdata"\n                                }\n                            },\n                            {\n                                "downwardAPI": {\n                                    "defaultMode": 420,\n                                    "items": [\n                                        {\n                                            "path": "cpu_limit",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1m",\n                                                "resource": "limits.cpu"\n                                            }\n                                        },\n                                        {\n                                            "path": "cpu_request",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1m",\n                                                "resource": "requests.cpu"\n                                            }\n                                        },\n                                        {\n                                            "path": "mem_limit",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1Mi",\n                                                "resource": "limits.memory"\n                                            }\n                                        },\n                                        {\n                                            "path": "mem_request",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1Mi",\n                                                "resource": "requests.memory"\n                                            }\n                                        },\n                                        {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.labels"\n                                            },\n                                            "path": "labels"\n                                        },\n                                        {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.annotations"\n                                            },\n                                            "path": "annotations"\n                                        }\n                                    ]\n                                },\n                                "name": "database-containerinfo"\n                            },\n                            {\n                                "name": "pgbackrest-server",\n                                "projected": {\n                                    "defaultMode": 420,\n                                    "sources": [\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "pgbackrest-server.crt",\n                                                        "path": "server-tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-server.key",\n                                                        "mode": 384,\n                                                        "path": "server-tls.key"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-instance1-zltj-certs"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "name": "pgbackrest-config",\n                                "projected": {\n                                    "defaultMode": 420,\n                                    "sources": [\n                                        {\n                                            "configMap": {\n                                                "items": [\n                                                    {\n                                                        "key": "pgbackrest_instance.conf",\n                                                        "path": "pgbackrest_instance.conf"\n                                                    },\n                                                    {\n                                                        "key": "config-hash",\n                                                        "path": "config-hash"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-server.conf",\n                                                        "path": "~postgres-operator_server.conf"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-pgbackrest-config"\n                                            }\n                                        },\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "pgbackrest.ca-roots",\n                                                        "path": "~postgres-operator/tls-ca.crt"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-client.crt",\n                                                        "path": "~postgres-operator/client-tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-client.key",\n                                                        "mode": 384,\n                                                        "path": "~postgres-operator/client-tls.key"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-pgbackrest"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "name": "patroni-config",\n                                "projected": {\n                                    "defaultMode": 420,\n                                    "sources": [\n                                        {\n                                            "configMap": {\n                                                "items": [\n                                                    {\n                                                        "key": "patroni.yaml",\n                                                        "path": "~postgres-operator_cluster.yaml"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-config"\n                                            }\n                                        },\n                                        {\n                                            "configMap": {\n                                                "items": [\n                                                    {\n                                                        "key": "patroni.yaml",\n                                                        "path": "~postgres-operator_instance.yaml"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-instance1-zltj-config"\n                                            }\n                                        },\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "patroni.ca-roots",\n                                                        "path": "~postgres-operator/patroni.ca-roots"\n                                                    },\n                                                    {\n                                                        "key": "patroni.crt-combined",\n                                                        "path": "~postgres-operator/patroni.crt+key"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-instance1-zltj-certs"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "emptyDir": {},\n                                "name": "crunchy-bin"\n                            },\n                            {\n                                "emptyDir": {\n                                    "sizeLimit": "2Gi"\n                                },\n                                "name": "tmp"\n                            },\n                            {\n                                "emptyDir": {\n                                    "medium": "Memory"\n                                },\n                                "name": "dshm"\n                            }\n                        ]\n                    }\n                },\n                "updateStrategy": {\n                    "type": "OnDelete"\n                }\n            },\n            "status": {\n                "availableReplicas": 0,\n                "collisionCount": 0,\n                "currentReplicas": 1,\n                "currentRevision": "cert-management-policy-instance1-zltj-c769f565d",\n                "observedGeneration": 1,\n                "replicas": 1,\n                "updateRevision": "cert-management-policy-instance1-zltj-c769f565d",\n                "updatedReplicas": 1\n            }\n        }\n    ],\n    "kind": "List",\n    "metadata": {\n        "resourceVersion": ""\n    }\n}'
    logger.go:42: 21:50:37 | cert-management-policy/8-create-instance-certificate | + jq -e '.items | length == 3'
    logger.go:42: 21:50:37 | cert-management-policy/8-create-instance-certificate | ++ jq -r '.items[].metadata.name'
    logger.go:42: 21:50:37 | cert-management-policy/8-create-instance-certificate | ++ sort
    logger.go:42: 21:50:37 | cert-management-policy/8-create-instance-certificate | + instances=$'cert-management-policy-instance1-j92z\ncert-management-policy-instance1-wpcx\ncert-management-policy-instance1-zltj'
    logger.go:42: 21:50:37 | cert-management-policy/8-create-instance-certificate | + for instance in $instances
    logger.go:42: 21:50:37 | cert-management-policy/8-create-instance-certificate | ++ kubectl -n kuttl-test-superb-vulture get statefulset cert-management-policy-instance1-j92z -o 'jsonpath={.spec.serviceName}'
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + instance_service=cert-management-policy-pods
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + instance_name=cert-management-policy-instance1-j92z-0.cert-management-policy-pods
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + instance_names=("${instance_name}.${NAMESPACE}.svc.cluster.local" "${instance_name}.${NAMESPACE}.svc" "${instance_name}.${NAMESPACE}" "$instance_name")
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + issue_certificate cert-management-policy-instance1-j92z cert-management-policy-instance1-j92z-0 serverAuth cert-management-policy-instance1-j92z-0.cert-management-policy-pods.kuttl-test-superb-vulture.svc.cluster.local cert-management-policy-instance1-j92z-0.cert-management-policy-pods.kuttl-test-superb-vulture.svc cert-management-policy-instance1-j92z-0.cert-management-policy-pods.kuttl-test-superb-vulture cert-management-policy-instance1-j92z-0.cert-management-policy-pods
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + local name=cert-management-policy-instance1-j92z
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + local common_name=cert-management-policy-instance1-j92z-0
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + local purpose=serverAuth
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + shift 3
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + (( 39 > 64 ))
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + awk -v common_name=cert-management-policy-instance1-j92z-0 -v purpose=serverAuth $'\n\t\t{sub("<common-name>", common_name); sub("<purpose>", purpose); print}\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf/tls-certificate.conf
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + local index=1
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + local dns_name
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 1 cert-management-policy-instance1-j92z-0.cert-management-policy-pods.kuttl-test-superb-vulture.svc.cluster.local
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + index=2
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 2 cert-management-policy-instance1-j92z-0.cert-management-policy-pods.kuttl-test-superb-vulture.svc
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + index=3
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 3 cert-management-policy-instance1-j92z-0.cert-management-policy-pods.kuttl-test-superb-vulture
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + index=4
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 4 cert-management-policy-instance1-j92z-0.cert-management-policy-pods
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + index=5
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + openssl ecparam -name prime256v1 -genkey -noout -out /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-j92z.key
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + openssl req -new -key /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-j92z.key -out /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-j92z.csr -config /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-j92z.conf
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + openssl x509 -req -in /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-j92z.csr -CA /tmp/kuttl/pg/cert-management-policy/root-ca.crt -CAkey /tmp/kuttl/pg/cert-management-policy/root-ca.key -CAcreateserial -days 365 -sha384 -extensions extensions -extfile /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-j92z.conf -out /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-j92z.crt
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | Certificate request self-signature ok
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | subject=CN=cert-management-policy-instance1-j92z-0
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + cp /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-j92z.key /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-j92z.patroni.crt-combined
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + cat /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-j92z.crt
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + kubectl -n kuttl-test-superb-vulture create secret generic cert-management-policy-instance1-j92z-certs --from-file=dns.crt=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-j92z.crt --from-file=dns.key=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-j92z.key --from-file=patroni.ca-roots=/tmp/kuttl/pg/cert-management-policy/root-ca.crt --from-file=patroni.crt-combined=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-j92z.patroni.crt-combined --from-file=pgbackrest-server.crt=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-j92z.crt --from-file=pgbackrest-server.key=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-j92z.key --dry-run=client -o yaml
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + kubectl label --local -f - -o yaml postgres-operator.crunchydata.com/cluster=cert-management-policy postgres-operator.crunchydata.com/instance=cert-management-policy-instance1-j92z postgres-operator.crunchydata.com/instance-set=instance1
    logger.go:42: 21:50:38 | cert-management-policy/8-create-instance-certificate | + kubectl -n kuttl-test-superb-vulture apply -f -
    logger.go:42: 21:50:40 | cert-management-policy/8-create-instance-certificate | secret/cert-management-policy-instance1-j92z-certs created
    logger.go:42: 21:50:40 | cert-management-policy/8-create-instance-certificate | + secret=cert-management-policy-instance1-j92z-certs
    logger.go:42: 21:50:40 | cert-management-policy/8-create-instance-certificate | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-instance1-j92z-certs -o json
    logger.go:42: 21:50:40 | cert-management-policy/8-create-instance-certificate | ++ jq --compact-output --sort-keys .data
    logger.go:42: 21:50:40 | cert-management-policy/8-create-instance-certificate | ++ sha256sum
    logger.go:42: 21:50:40 | cert-management-policy/8-create-instance-certificate | ++ awk '{print $1}'
    logger.go:42: 21:50:40 | cert-management-policy/8-create-instance-certificate | + checksum=922bd4e8e4e6c1372d422a7b818ca5e29766441577adb7b0cf4c3b6d8171da47
    logger.go:42: 21:50:40 | cert-management-policy/8-create-instance-certificate | + kubectl -n kuttl-test-superb-vulture annotate secret cert-management-policy-instance1-j92z-certs e2e.percona.com/secret-checksum=922bd4e8e4e6c1372d422a7b818ca5e29766441577adb7b0cf4c3b6d8171da47 --overwrite
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | secret/cert-management-policy-instance1-j92z-certs annotated
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + for instance in $instances
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | ++ kubectl -n kuttl-test-superb-vulture get statefulset cert-management-policy-instance1-wpcx -o 'jsonpath={.spec.serviceName}'
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + instance_service=cert-management-policy-pods
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + instance_name=cert-management-policy-instance1-wpcx-0.cert-management-policy-pods
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + instance_names=("${instance_name}.${NAMESPACE}.svc.cluster.local" "${instance_name}.${NAMESPACE}.svc" "${instance_name}.${NAMESPACE}" "$instance_name")
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + issue_certificate cert-management-policy-instance1-wpcx cert-management-policy-instance1-wpcx-0 serverAuth cert-management-policy-instance1-wpcx-0.cert-management-policy-pods.kuttl-test-superb-vulture.svc.cluster.local cert-management-policy-instance1-wpcx-0.cert-management-policy-pods.kuttl-test-superb-vulture.svc cert-management-policy-instance1-wpcx-0.cert-management-policy-pods.kuttl-test-superb-vulture cert-management-policy-instance1-wpcx-0.cert-management-policy-pods
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + local name=cert-management-policy-instance1-wpcx
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + local common_name=cert-management-policy-instance1-wpcx-0
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + local purpose=serverAuth
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + shift 3
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + (( 39 > 64 ))
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + awk -v common_name=cert-management-policy-instance1-wpcx-0 -v purpose=serverAuth $'\n\t\t{sub("<common-name>", common_name); sub("<purpose>", purpose); print}\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf/tls-certificate.conf
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + local index=1
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + local dns_name
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 1 cert-management-policy-instance1-wpcx-0.cert-management-policy-pods.kuttl-test-superb-vulture.svc.cluster.local
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + index=2
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 2 cert-management-policy-instance1-wpcx-0.cert-management-policy-pods.kuttl-test-superb-vulture.svc
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + index=3
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 3 cert-management-policy-instance1-wpcx-0.cert-management-policy-pods.kuttl-test-superb-vulture
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + index=4
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 4 cert-management-policy-instance1-wpcx-0.cert-management-policy-pods
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + index=5
    logger.go:42: 21:50:41 | cert-management-policy/8-create-instance-certificate | + openssl ecparam -name prime256v1 -genkey -noout -out /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-wpcx.key
    logger.go:42: 21:50:42 | cert-management-policy/8-create-instance-certificate | + openssl req -new -key /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-wpcx.key -out /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-wpcx.csr -config /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-wpcx.conf
    logger.go:42: 21:50:42 | cert-management-policy/8-create-instance-certificate | + openssl x509 -req -in /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-wpcx.csr -CA /tmp/kuttl/pg/cert-management-policy/root-ca.crt -CAkey /tmp/kuttl/pg/cert-management-policy/root-ca.key -CAcreateserial -days 365 -sha384 -extensions extensions -extfile /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-wpcx.conf -out /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-wpcx.crt
    logger.go:42: 21:50:42 | cert-management-policy/8-create-instance-certificate | Certificate request self-signature ok
    logger.go:42: 21:50:42 | cert-management-policy/8-create-instance-certificate | subject=CN=cert-management-policy-instance1-wpcx-0
    logger.go:42: 21:50:42 | cert-management-policy/8-create-instance-certificate | + cp /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-wpcx.key /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-wpcx.patroni.crt-combined
    logger.go:42: 21:50:42 | cert-management-policy/8-create-instance-certificate | + cat /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-wpcx.crt
    logger.go:42: 21:50:42 | cert-management-policy/8-create-instance-certificate | + kubectl -n kuttl-test-superb-vulture create secret generic cert-management-policy-instance1-wpcx-certs --from-file=dns.crt=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-wpcx.crt --from-file=dns.key=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-wpcx.key --from-file=patroni.ca-roots=/tmp/kuttl/pg/cert-management-policy/root-ca.crt --from-file=patroni.crt-combined=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-wpcx.patroni.crt-combined --from-file=pgbackrest-server.crt=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-wpcx.crt --from-file=pgbackrest-server.key=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-wpcx.key --dry-run=client -o yaml
    logger.go:42: 21:50:42 | cert-management-policy/8-create-instance-certificate | + kubectl label --local -f - -o yaml postgres-operator.crunchydata.com/cluster=cert-management-policy postgres-operator.crunchydata.com/instance=cert-management-policy-instance1-wpcx postgres-operator.crunchydata.com/instance-set=instance1
    logger.go:42: 21:50:42 | cert-management-policy/8-create-instance-certificate | + kubectl -n kuttl-test-superb-vulture apply -f -
    logger.go:42: 21:50:43 | cert-management-policy/8-create-instance-certificate | secret/cert-management-policy-instance1-wpcx-certs created
    logger.go:42: 21:50:43 | cert-management-policy/8-create-instance-certificate | + secret=cert-management-policy-instance1-wpcx-certs
    logger.go:42: 21:50:43 | cert-management-policy/8-create-instance-certificate | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-instance1-wpcx-certs -o json
    logger.go:42: 21:50:43 | cert-management-policy/8-create-instance-certificate | ++ jq --compact-output --sort-keys .data
    logger.go:42: 21:50:43 | cert-management-policy/8-create-instance-certificate | ++ sha256sum
    logger.go:42: 21:50:43 | cert-management-policy/8-create-instance-certificate | ++ awk '{print $1}'
    logger.go:42: 21:50:44 | cert-management-policy/8-create-instance-certificate | + checksum=d2356fd3095f356ca49a997a78702465c241ae61a27b9c396eac8b07778e4e83
    logger.go:42: 21:50:44 | cert-management-policy/8-create-instance-certificate | + kubectl -n kuttl-test-superb-vulture annotate secret cert-management-policy-instance1-wpcx-certs e2e.percona.com/secret-checksum=d2356fd3095f356ca49a997a78702465c241ae61a27b9c396eac8b07778e4e83 --overwrite
    logger.go:42: 21:50:44 | cert-management-policy/8-create-instance-certificate | secret/cert-management-policy-instance1-wpcx-certs annotated
    logger.go:42: 21:50:44 | cert-management-policy/8-create-instance-certificate | + for instance in $instances
    logger.go:42: 21:50:44 | cert-management-policy/8-create-instance-certificate | ++ kubectl -n kuttl-test-superb-vulture get statefulset cert-management-policy-instance1-zltj -o 'jsonpath={.spec.serviceName}'
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + instance_service=cert-management-policy-pods
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + instance_name=cert-management-policy-instance1-zltj-0.cert-management-policy-pods
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + instance_names=("${instance_name}.${NAMESPACE}.svc.cluster.local" "${instance_name}.${NAMESPACE}.svc" "${instance_name}.${NAMESPACE}" "$instance_name")
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + issue_certificate cert-management-policy-instance1-zltj cert-management-policy-instance1-zltj-0 serverAuth cert-management-policy-instance1-zltj-0.cert-management-policy-pods.kuttl-test-superb-vulture.svc.cluster.local cert-management-policy-instance1-zltj-0.cert-management-policy-pods.kuttl-test-superb-vulture.svc cert-management-policy-instance1-zltj-0.cert-management-policy-pods.kuttl-test-superb-vulture cert-management-policy-instance1-zltj-0.cert-management-policy-pods
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + local name=cert-management-policy-instance1-zltj
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + local common_name=cert-management-policy-instance1-zltj-0
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + local purpose=serverAuth
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + shift 3
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + (( 39 > 64 ))
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + awk -v common_name=cert-management-policy-instance1-zltj-0 -v purpose=serverAuth $'\n\t\t{sub("<common-name>", common_name); sub("<purpose>", purpose); print}\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf/tls-certificate.conf
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + local index=1
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + local dns_name
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 1 cert-management-policy-instance1-zltj-0.cert-management-policy-pods.kuttl-test-superb-vulture.svc.cluster.local
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + index=2
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 2 cert-management-policy-instance1-zltj-0.cert-management-policy-pods.kuttl-test-superb-vulture.svc
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + index=3
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 3 cert-management-policy-instance1-zltj-0.cert-management-policy-pods.kuttl-test-superb-vulture
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + index=4
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@"
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 4 cert-management-policy-instance1-zltj-0.cert-management-policy-pods
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + index=5
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + openssl ecparam -name prime256v1 -genkey -noout -out /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-zltj.key
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + openssl req -new -key /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-zltj.key -out /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-zltj.csr -config /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-zltj.conf
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + openssl x509 -req -in /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-zltj.csr -CA /tmp/kuttl/pg/cert-management-policy/root-ca.crt -CAkey /tmp/kuttl/pg/cert-management-policy/root-ca.key -CAcreateserial -days 365 -sha384 -extensions extensions -extfile /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-zltj.conf -out /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-zltj.crt
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | Certificate request self-signature ok
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | subject=CN=cert-management-policy-instance1-zltj-0
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + cp /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-zltj.key /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-zltj.patroni.crt-combined
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + cat /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-zltj.crt
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + kubectl -n kuttl-test-superb-vulture create secret generic cert-management-policy-instance1-zltj-certs --from-file=dns.crt=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-zltj.crt --from-file=dns.key=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-zltj.key --from-file=patroni.ca-roots=/tmp/kuttl/pg/cert-management-policy/root-ca.crt --from-file=patroni.crt-combined=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-zltj.patroni.crt-combined --from-file=pgbackrest-server.crt=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-zltj.crt --from-file=pgbackrest-server.key=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-zltj.key --dry-run=client -o yaml
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + kubectl label --local -f - -o yaml postgres-operator.crunchydata.com/cluster=cert-management-policy postgres-operator.crunchydata.com/instance=cert-management-policy-instance1-zltj postgres-operator.crunchydata.com/instance-set=instance1
    logger.go:42: 21:50:45 | cert-management-policy/8-create-instance-certificate | + kubectl -n kuttl-test-superb-vulture apply -f -
    logger.go:42: 21:50:46 | cert-management-policy/8-create-instance-certificate | secret/cert-management-policy-instance1-zltj-certs created
    logger.go:42: 21:50:47 | cert-management-policy/8-create-instance-certificate | + secret=cert-management-policy-instance1-zltj-certs
    logger.go:42: 21:50:47 | cert-management-policy/8-create-instance-certificate | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-instance1-zltj-certs -o json
    logger.go:42: 21:50:47 | cert-management-policy/8-create-instance-certificate | ++ jq --compact-output --sort-keys .data
    logger.go:42: 21:50:47 | cert-management-policy/8-create-instance-certificate | ++ sha256sum
    logger.go:42: 21:50:47 | cert-management-policy/8-create-instance-certificate | ++ awk '{print $1}'
    logger.go:42: 21:50:47 | cert-management-policy/8-create-instance-certificate | + checksum=c3006d75d5e108f20193b51740bfb82fe4932aec5fb04ea03dabefd8e8f4a1f7
    logger.go:42: 21:50:47 | cert-management-policy/8-create-instance-certificate | + kubectl -n kuttl-test-superb-vulture annotate secret cert-management-policy-instance1-zltj-certs e2e.percona.com/secret-checksum=c3006d75d5e108f20193b51740bfb82fe4932aec5fb04ea03dabefd8e8f4a1f7 --overwrite
    logger.go:42: 21:50:48 | cert-management-policy/8-create-instance-certificate | secret/cert-management-policy-instance1-zltj-certs annotated
    logger.go:42: 21:50:48 | cert-management-policy/8-create-instance-certificate | test step completed 8-create-instance-certificate
    logger.go:42: 21:50:48 | cert-management-policy/9- | starting test step 9-
    logger.go:42: 21:50:50 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:50:50 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:50:50 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:50:50 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:50:50 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:50:50 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:50:51 | cert-management-policy/9- | false
    logger.go:42: 21:50:53 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:50:53 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:50:53 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:50:53 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:50:53 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:50:53 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:50:54 | cert-management-policy/9- | false
    logger.go:42: 21:50:56 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:50:56 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:50:56 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:50:56 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:50:56 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:50:56 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:50:57 | cert-management-policy/9- | false
    logger.go:42: 21:50:59 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:50:59 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:50:59 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:50:59 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:50:59 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:50:59 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:00 | cert-management-policy/9- | false
    logger.go:42: 21:51:02 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:02 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:02 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:02 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:02 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:02 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:03 | cert-management-policy/9- | true
    logger.go:42: 21:51:05 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:05 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:05 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:05 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:05 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:05 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:06 | cert-management-policy/9- | true
    logger.go:42: 21:51:08 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:08 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:08 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:08 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:08 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:08 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:09 | cert-management-policy/9- | true
    logger.go:42: 21:51:11 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:11 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:11 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:11 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:11 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:11 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:12 | cert-management-policy/9- | true
    logger.go:42: 21:51:14 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:14 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:14 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:14 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:14 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:14 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:15 | cert-management-policy/9- | true
    logger.go:42: 21:51:17 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:17 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:17 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:17 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:17 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:17 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:18 | cert-management-policy/9- | true
    logger.go:42: 21:51:20 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:20 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:20 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:20 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:20 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:20 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:21 | cert-management-policy/9- | true
    logger.go:42: 21:51:23 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:23 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:23 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:23 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:23 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:23 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:24 | cert-management-policy/9- | true
    logger.go:42: 21:51:26 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:26 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:26 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:26 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:26 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:26 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:26 | cert-management-policy/9- | true
    logger.go:42: 21:51:28 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:28 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:29 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:29 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:29 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:29 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:29 | cert-management-policy/9- | true
    logger.go:42: 21:51:31 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:31 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:32 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:32 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:32 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:32 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:32 | cert-management-policy/9- | true
    logger.go:42: 21:51:34 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:34 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:35 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:35 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:35 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:35 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:35 | cert-management-policy/9- | true
    logger.go:42: 21:51:37 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:37 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:38 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:38 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:38 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:38 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:38 | cert-management-policy/9- | true
    logger.go:42: 21:51:40 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:40 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:41 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:41 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:41 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:41 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:41 | cert-management-policy/9- | true
    logger.go:42: 21:51:43 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:43 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:44 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:44 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:44 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:44 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:44 | cert-management-policy/9- | true
    logger.go:42: 21:51:46 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:46 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:47 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:47 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:47 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:47 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:47 | cert-management-policy/9- | true
    logger.go:42: 21:51:49 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:49 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:50 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:50 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:50 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:50 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:50 | cert-management-policy/9- | true
    logger.go:42: 21:51:52 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:52 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:53 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:53 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:53 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:53 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:53 | cert-management-policy/9- | true
    logger.go:42: 21:51:55 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:55 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:56 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:56 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:56 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:56 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:56 | cert-management-policy/9- | true
    logger.go:42: 21:51:58 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:51:58 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:51:59 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:51:59 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:51:59 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:51:59 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:51:59 | cert-management-policy/9- | true
    logger.go:42: 21:52:01 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:01 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:02 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:02 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:02 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:02 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:02 | cert-management-policy/9- | true
    logger.go:42: 21:52:04 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:04 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:05 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:05 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:05 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:05 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:05 | cert-management-policy/9- | true
    logger.go:42: 21:52:07 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:07 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:08 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:08 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:08 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:08 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:08 | cert-management-policy/9- | true
    logger.go:42: 21:52:10 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:10 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:11 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:11 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:11 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:11 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:11 | cert-management-policy/9- | true
    logger.go:42: 21:52:13 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:13 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:14 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:14 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:14 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:14 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:14 | cert-management-policy/9- | true
    logger.go:42: 21:52:16 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:16 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:17 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:17 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:17 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:17 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:17 | cert-management-policy/9- | true
    logger.go:42: 21:52:19 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:20 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:20 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:20 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:20 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:20 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:20 | cert-management-policy/9- | true
    logger.go:42: 21:52:22 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:22 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:23 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:23 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:23 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:23 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:23 | cert-management-policy/9- | true
    logger.go:42: 21:52:25 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:25 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:26 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:26 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:26 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:26 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:26 | cert-management-policy/9- | true
    logger.go:42: 21:52:28 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:28 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:29 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:29 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:29 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:29 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:29 | cert-management-policy/9- | true
    logger.go:42: 21:52:31 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:31 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:32 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:32 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:32 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:32 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:32 | cert-management-policy/9- | true
    logger.go:42: 21:52:34 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:34 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:35 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:35 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:35 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:35 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:35 | cert-management-policy/9- | true
    logger.go:42: 21:52:37 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:37 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:38 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:38 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:38 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:38 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:38 | cert-management-policy/9- | true
    logger.go:42: 21:52:40 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:40 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:41 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:41 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:41 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:41 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:41 | cert-management-policy/9- | true
    logger.go:42: 21:52:43 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:43 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:44 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:44 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:44 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:44 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:44 | cert-management-policy/9- | true
    logger.go:42: 21:52:46 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:46 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:46 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:46 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:46 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:46 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:47 | cert-management-policy/9- | true
    logger.go:42: 21:52:49 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:49 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:49 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:49 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:49 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:49 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:50 | cert-management-policy/9- | true
    logger.go:42: 21:52:52 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:52 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:52 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:52 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:52 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:52 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:53 | cert-management-policy/9- | true
    logger.go:42: 21:52:55 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:55 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:55 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:55 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:55 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:55 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:56 | cert-management-policy/9- | true
    logger.go:42: 21:52:58 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:52:58 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:52:58 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:52:58 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:52:58 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:52:58 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:52:59 | cert-management-policy/9- | true
    logger.go:42: 21:53:01 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:53:01 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:53:01 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:53:01 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:53:01 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:53:01 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:53:02 | cert-management-policy/9- | true
    logger.go:42: 21:53:04 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:53:04 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:53:04 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:53:04 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:53:04 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:53:04 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:53:05 | cert-management-policy/9- | true
    logger.go:42: 21:53:07 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:53:07 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:53:07 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:53:07 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:53:07 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:53:07 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:53:08 | cert-management-policy/9- | true
    logger.go:42: 21:53:10 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:53:10 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:53:10 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:53:10 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:53:10 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:53:10 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:53:10 | cert-management-policy/9- | true
    logger.go:42: 21:53:12 | cert-management-policy/9- | running command: [sh -c set -o errexit
        set -o xtrace
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \
          | jq -e '
            .data."pgbouncer-password" != null and
            .data."pgbouncer-verifier" != null and
            .data."pgbouncer-admin-password" != null and
            .data."pgbouncer-users.txt" != null
          ']
    logger.go:42: 21:53:12 | cert-management-policy/9- | ++ kubectl -n kuttl-test-superb-vulture get certificate -o name
    logger.go:42: 21:53:13 | cert-management-policy/9- | + certificates=
    logger.go:42: 21:53:13 | cert-management-policy/9- | + [[ -n '' ]]
    logger.go:42: 21:53:13 | cert-management-policy/9- | + kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:53:13 | cert-management-policy/9- | + jq -e $'\n    .data."pgbouncer-password" != null and\n    .data."pgbouncer-verifier" != null and\n    .data."pgbouncer-admin-password" != null and\n    .data."pgbouncer-users.txt" != null\n  '
    logger.go:42: 21:53:13 | cert-management-policy/9- | true
    logger.go:42: 21:53:14 | cert-management-policy/9- | test step completed 9-
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | starting test step 10-verify-served-certificates
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | running command: [sh -c set -o errexit
        set -o pipefail
        set -o xtrace
        
        source ../../functions
        
        cluster="cert-management-policy"
        primary=$(kubectl -n "$NAMESPACE" get pod \
          -l postgres-operator.crunchydata.com/cluster="$cluster",postgres-operator.crunchydata.com/role=primary \
          -o jsonpath='{.items[0].metadata.name}')
        [[ -n "$primary" ]]
        
        postgres_secret_fingerprint=$(kubectl -n "$NAMESPACE" get secret \
          "${cluster}-cluster-cert" -o jsonpath='{.data.tls\.crt}' \
          | base64 -d \
          | openssl x509 -noout -fingerprint -sha256 \
          | sed 's/.*=//' \
          | tr -d ':[:space:]')
        postgres_served_fingerprint=$(kubectl -n "$NAMESPACE" exec "$primary" -c database -- \
          bash -c "timeout 20 openssl s_client -connect ${cluster}-primary:5432 -starttls postgres </dev/null 2>/dev/null | openssl x509 -noout -fingerprint -sha256 | sed 's/.*=//'" \
          | tr -d ':[:space:]')
        
        if [[ "$postgres_served_fingerprint" != "$postgres_secret_fingerprint" ]]; then
          echo "PostgreSQL is not serving the user-provided certificate" >&2
          echo "Secret: $postgres_secret_fingerprint" >&2
          echo "Served: $postgres_served_fingerprint" >&2
          exit 1
        fi
        
        pgbouncer_secret_fingerprint=$(kubectl -n "$NAMESPACE" get secret \
          "${cluster}-pgbouncer" -o jsonpath='{.data.pgbouncer-frontend\.crt}' \
          | base64 -d \
          | openssl x509 -noout -fingerprint -sha256 \
          | sed 's/.*=//' \
          | tr -d ':[:space:]')
        pgbouncer_served_fingerprint=$(kubectl -n "$NAMESPACE" exec "$primary" -c database -- \
          bash -c "timeout 20 openssl s_client -connect ${cluster}-pgbouncer:5432 -starttls postgres </dev/null 2>/dev/null | openssl x509 -noout -fingerprint -sha256 | sed 's/.*=//'" \
          | tr -d ':[:space:]')
        
        if [[ "$pgbouncer_served_fingerprint" != "$pgbouncer_secret_fingerprint" ]]; then
          echo "PgBouncer is not serving the user-provided frontend certificate" >&2
          echo "Secret: $pgbouncer_secret_fingerprint" >&2
          echo "Served: $pgbouncer_served_fingerprint" >&2
          exit 1
        fi
        
        replication_connections=$(kubectl -n "$NAMESPACE" exec "$primary" -c database -- \
          psql -d postgres -Atqc \
          "SELECT count(*) FROM pg_stat_ssl s JOIN pg_stat_replication r ON s.pid = r.pid WHERE s.ssl = true AND s.client_dn LIKE '%CN=_crunchyrepl%';")
        replication_connections=$(tr -d '[:space:]' <<<"$replication_connections")
        if [[ "$replication_connections" != "2" ]]; then
          echo "Expected two SSL replication connections using the user-provided _crunchyrepl identity, got: $replication_connections" >&2
          exit 1
        fi]
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | + source ../../functions
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ realpath ../../..
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | ++++ pwd
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | ++ test_name=cert-management-policy
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/vars.sh
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ export GIT_BRANCH=PR-1760
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ GIT_BRANCH=PR-1760
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ export VERSION=PR-1760-3b2c18659
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ VERSION=PR-1760-3b2c18659
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | +++ [[ -z '' ]]
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | ++++ detect_k8s_platform
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | ++++ local detected_platform
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | ++++ local xtrace_enabled=false
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | ++++ [[ -o xtrace ]]
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | ++++ xtrace_enabled=true
    logger.go:42: 21:53:14 | cert-management-policy/10-verify-served-certificates | ++++ set +o xtrace
    logger.go:42: 21:53:15 | cert-management-policy/10-verify-served-certificates | +++ PLATFORM=gke
    logger.go:42: 21:53:15 | cert-management-policy/10-verify-served-certificates | +++ export PLATFORM
    logger.go:42: 21:53:15 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:53:15 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:53:15 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:15 | cert-management-policy/10-verify-served-certificates | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:15 | cert-management-policy/10-verify-served-certificates | +++ [[ ! -n '' ]]
    logger.go:42: 21:53:15 | cert-management-policy/10-verify-served-certificates | +++ [[ -n '' ]]
    logger.go:42: 21:53:15 | cert-management-policy/10-verify-served-certificates | +++ export PG_VER=18
    logger.go:42: 21:53:15 | cert-management-policy/10-verify-served-certificates | +++ PG_VER=18
    logger.go:42: 21:53:15 | cert-management-policy/10-verify-served-certificates | +++ export ARCH=
    logger.go:42: 21:53:15 | cert-management-policy/10-verify-served-certificates | +++ ARCH=
    logger.go:42: 21:53:15 | cert-management-policy/10-verify-served-certificates | +++ [[ -z '' ]]
    logger.go:42: 21:53:15 | cert-management-policy/10-verify-served-certificates | ++++ kubectl get nodes -o 'jsonpath={range .items[*]}{.metadata.labels.kubernetes\.io/arch}{"\n"}{end}'
    logger.go:42: 21:53:15 | cert-management-policy/10-verify-served-certificates | ++++ sort -u
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ node_arches=amd64
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ amd64 == arm64 ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ PG_DISTRIBUTION=
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ '' == community ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export PGOV1_VER=14
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ PGOV1_VER=14
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ MINIO_VER=5.4.0
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ VAULT_VER=0.32.0
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++++ printenv
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++++ grep -E '^IMAGE'
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++++ awk -F= '{print $1}'
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ var_value=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == docker.io/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == percona/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == perconalab/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++++ eval 'echo $IMAGE_AWS_CLI'
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++++ echo docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ var_value=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ [[ docker.io/amazon/aws-cli:2.34.60 == docker.io/* ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ continue
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++++ which gdate
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++++ which date
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ date=/usr/sbin/date
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++++ which gsed
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++++ which sed
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | +++ sed=/usr/sbin/sed
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++ arch_scheduling_enabled
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++ [[ -n '' ]]
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | + cluster=cert-management-policy
    logger.go:42: 21:53:16 | cert-management-policy/10-verify-served-certificates | ++ kubectl -n kuttl-test-superb-vulture get pod -l postgres-operator.crunchydata.com/cluster=cert-management-policy,postgres-operator.crunchydata.com/role=primary -o 'jsonpath={.items[0].metadata.name}'
    logger.go:42: 21:53:17 | cert-management-policy/10-verify-served-certificates | + primary=cert-management-policy-instance1-wpcx-0
    logger.go:42: 21:53:17 | cert-management-policy/10-verify-served-certificates | + [[ -n cert-management-policy-instance1-wpcx-0 ]]
    logger.go:42: 21:53:17 | cert-management-policy/10-verify-served-certificates | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-cluster-cert -o 'jsonpath={.data.tls\.crt}'
    logger.go:42: 21:53:17 | cert-management-policy/10-verify-served-certificates | ++ base64 -d
    logger.go:42: 21:53:17 | cert-management-policy/10-verify-served-certificates | ++ openssl x509 -noout -fingerprint -sha256
    logger.go:42: 21:53:17 | cert-management-policy/10-verify-served-certificates | ++ sed 's/.*=//'
    logger.go:42: 21:53:17 | cert-management-policy/10-verify-served-certificates | ++ tr -d ':[:space:]'
    logger.go:42: 21:53:17 | cert-management-policy/10-verify-served-certificates | + postgres_secret_fingerprint=0331C6828E548D248EF959F960D7CADDF677BAC506DA77B083A0E71C3F8F8115
    logger.go:42: 21:53:17 | cert-management-policy/10-verify-served-certificates | ++ kubectl -n kuttl-test-superb-vulture exec cert-management-policy-instance1-wpcx-0 -c database -- bash -c 'timeout 20 openssl s_client -connect cert-management-policy-primary:5432 -starttls postgres </dev/null 2>/dev/null | openssl x509 -noout -fingerprint -sha256 | sed '\''s/.*=//'\'''
    logger.go:42: 21:53:17 | cert-management-policy/10-verify-served-certificates | ++ tr -d ':[:space:]'
    logger.go:42: 21:53:19 | cert-management-policy/10-verify-served-certificates | + postgres_served_fingerprint=0331C6828E548D248EF959F960D7CADDF677BAC506DA77B083A0E71C3F8F8115
    logger.go:42: 21:53:19 | cert-management-policy/10-verify-served-certificates | + [[ 0331C6828E548D248EF959F960D7CADDF677BAC506DA77B083A0E71C3F8F8115 != 0331C6828E548D248EF959F960D7CADDF677BAC506DA77B083A0E71C3F8F8115 ]]
    logger.go:42: 21:53:19 | cert-management-policy/10-verify-served-certificates | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o 'jsonpath={.data.pgbouncer-frontend\.crt}'
    logger.go:42: 21:53:19 | cert-management-policy/10-verify-served-certificates | ++ base64 -d
    logger.go:42: 21:53:19 | cert-management-policy/10-verify-served-certificates | ++ openssl x509 -noout -fingerprint -sha256
    logger.go:42: 21:53:19 | cert-management-policy/10-verify-served-certificates | ++ sed 's/.*=//'
    logger.go:42: 21:53:19 | cert-management-policy/10-verify-served-certificates | ++ tr -d ':[:space:]'
    logger.go:42: 21:53:19 | cert-management-policy/10-verify-served-certificates | + pgbouncer_secret_fingerprint=0A748EDD1E785AD28D8C5DAB084E274BDCA793296CDDC7D78BEDCF4F14F6AB17
    logger.go:42: 21:53:19 | cert-management-policy/10-verify-served-certificates | ++ kubectl -n kuttl-test-superb-vulture exec cert-management-policy-instance1-wpcx-0 -c database -- bash -c 'timeout 20 openssl s_client -connect cert-management-policy-pgbouncer:5432 -starttls postgres </dev/null 2>/dev/null | openssl x509 -noout -fingerprint -sha256 | sed '\''s/.*=//'\'''
    logger.go:42: 21:53:19 | cert-management-policy/10-verify-served-certificates | ++ tr -d ':[:space:]'
    logger.go:42: 21:53:20 | cert-management-policy/10-verify-served-certificates | + pgbouncer_served_fingerprint=0A748EDD1E785AD28D8C5DAB084E274BDCA793296CDDC7D78BEDCF4F14F6AB17
    logger.go:42: 21:53:20 | cert-management-policy/10-verify-served-certificates | + [[ 0A748EDD1E785AD28D8C5DAB084E274BDCA793296CDDC7D78BEDCF4F14F6AB17 != 0A748EDD1E785AD28D8C5DAB084E274BDCA793296CDDC7D78BEDCF4F14F6AB17 ]]
    logger.go:42: 21:53:20 | cert-management-policy/10-verify-served-certificates | ++ kubectl -n kuttl-test-superb-vulture exec cert-management-policy-instance1-wpcx-0 -c database -- psql -d postgres -Atqc 'SELECT count(*) FROM pg_stat_ssl s JOIN pg_stat_replication r ON s.pid = r.pid WHERE s.ssl = true AND s.client_dn LIKE '\''%CN=_crunchyrepl%'\'';'
    logger.go:42: 21:53:21 | cert-management-policy/10-verify-served-certificates | + replication_connections=2
    logger.go:42: 21:53:21 | cert-management-policy/10-verify-served-certificates | ++ tr -d '[:space:]'
    logger.go:42: 21:53:21 | cert-management-policy/10-verify-served-certificates | + replication_connections=2
    logger.go:42: 21:53:21 | cert-management-policy/10-verify-served-certificates | + [[ 2 != 2 ]]
    logger.go:42: 21:53:21 | cert-management-policy/10-verify-served-certificates | test step completed 10-verify-served-certificates
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | starting test step 11-verify-secrets-unchanged
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | running command: [sh -c set -o errexit
        set -o pipefail
        set -o xtrace
        
        source ../../functions
        
        cluster="cert-management-policy"
        
        assert_secret_unchanged() {
          local secret="$1"
          local filter="${2:-.data}"
          local expected
          local actual
        
          expected=$(kubectl -n "$NAMESPACE" get secret "$secret" \
            -o jsonpath='{.metadata.annotations.e2e\.percona\.com/secret-checksum}')
          actual=$(kubectl -n "$NAMESPACE" get secret "$secret" -o json \
            | jq --compact-output --sort-keys "$filter" \
            | sha256sum | awk '{print $1}')
        
          if [[ -z "$expected" || "$actual" != "$expected" ]]; then
            echo "User-provided Secret changed: $secret" >&2
            echo "Expected checksum: ${expected:-missing}" >&2
            echo "Actual checksum: $actual" >&2
            return 1
          fi
        }
        
        assert_secret_unchanged "${cluster}-cluster-ca-cert"
        assert_secret_unchanged "${cluster}-cluster-cert"
        assert_secret_unchanged "${cluster}-replication-cert"
        assert_secret_unchanged "${cluster}-pgbackrest"
        assert_secret_unchanged "${cluster}-pgbouncer" \
          '.data | with_entries(select(.key | startswith("pgbouncer-frontend.")))'
        
        statefulsets=$(kubectl -n "$NAMESPACE" get statefulset \
          -l postgres-operator.crunchydata.com/cluster="$cluster",postgres-operator.crunchydata.com/data=postgres \
          -o json)
        jq -e '.items | length == 3' <<<"$statefulsets" >/dev/null
        instances=$(jq -r '.items[].metadata.name' <<<"$statefulsets" | sort)
        for instance in $instances; do
          assert_secret_unchanged "${instance}-certs"
        done]
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | + source ../../functions
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ realpath ../../..
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | ++++ pwd
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | ++ test_name=cert-management-policy
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/vars.sh
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ export GIT_BRANCH=PR-1760
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ GIT_BRANCH=PR-1760
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ export VERSION=PR-1760-3b2c18659
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ VERSION=PR-1760-3b2c18659
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:53:21 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ -z '' ]]
    logger.go:42: 21:53:22 | cert-management-policy/11-verify-secrets-unchanged | ++++ detect_k8s_platform
    logger.go:42: 21:53:22 | cert-management-policy/11-verify-secrets-unchanged | ++++ local detected_platform
    logger.go:42: 21:53:22 | cert-management-policy/11-verify-secrets-unchanged | ++++ local xtrace_enabled=false
    logger.go:42: 21:53:22 | cert-management-policy/11-verify-secrets-unchanged | ++++ [[ -o xtrace ]]
    logger.go:42: 21:53:22 | cert-management-policy/11-verify-secrets-unchanged | ++++ xtrace_enabled=true
    logger.go:42: 21:53:22 | cert-management-policy/11-verify-secrets-unchanged | ++++ set +o xtrace
    logger.go:42: 21:53:23 | cert-management-policy/11-verify-secrets-unchanged | +++ PLATFORM=gke
    logger.go:42: 21:53:23 | cert-management-policy/11-verify-secrets-unchanged | +++ export PLATFORM
    logger.go:42: 21:53:23 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:53:23 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:53:23 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:23 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:23 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ ! -n '' ]]
    logger.go:42: 21:53:23 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ -n '' ]]
    logger.go:42: 21:53:23 | cert-management-policy/11-verify-secrets-unchanged | +++ export PG_VER=18
    logger.go:42: 21:53:23 | cert-management-policy/11-verify-secrets-unchanged | +++ PG_VER=18
    logger.go:42: 21:53:23 | cert-management-policy/11-verify-secrets-unchanged | +++ export ARCH=
    logger.go:42: 21:53:23 | cert-management-policy/11-verify-secrets-unchanged | +++ ARCH=
    logger.go:42: 21:53:23 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ -z '' ]]
    logger.go:42: 21:53:23 | cert-management-policy/11-verify-secrets-unchanged | ++++ kubectl get nodes -o 'jsonpath={range .items[*]}{.metadata.labels.kubernetes\.io/arch}{"\n"}{end}'
    logger.go:42: 21:53:23 | cert-management-policy/11-verify-secrets-unchanged | ++++ sort -u
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ node_arches=amd64
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ amd64 == arm64 ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ PG_DISTRIBUTION=
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ '' == community ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export PGOV1_VER=14
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ PGOV1_VER=14
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ MINIO_VER=5.4.0
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ VAULT_VER=0.32.0
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++++ printenv
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++++ grep -E '^IMAGE'
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++++ awk -F= '{print $1}'
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ var_value=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == docker.io/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == percona/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == perconalab/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++++ eval 'echo $IMAGE_AWS_CLI'
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++++ echo docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ var_value=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ docker.io/amazon/aws-cli:2.34.60 == docker.io/* ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ continue
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++++ which gdate
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++++ which date
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ date=/usr/sbin/date
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++++ which gsed
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++++ which sed
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | +++ sed=/usr/sbin/sed
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++ arch_scheduling_enabled
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++ [[ -n '' ]]
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | + cluster=cert-management-policy
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | + assert_secret_unchanged cert-management-policy-cluster-ca-cert
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | + local secret=cert-management-policy-cluster-ca-cert
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | + local filter=.data
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | + local expected
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | + local actual
    logger.go:42: 21:53:24 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-cluster-ca-cert -o 'jsonpath={.metadata.annotations.e2e\.percona\.com/secret-checksum}'
    logger.go:42: 21:53:25 | cert-management-policy/11-verify-secrets-unchanged | + expected=dac92ede23f9ec89a8b26f0f15b1f925caaf05277fc4df2170c81c03db183734
    logger.go:42: 21:53:25 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-cluster-ca-cert -o json
    logger.go:42: 21:53:25 | cert-management-policy/11-verify-secrets-unchanged | ++ jq --compact-output --sort-keys .data
    logger.go:42: 21:53:25 | cert-management-policy/11-verify-secrets-unchanged | ++ sha256sum
    logger.go:42: 21:53:25 | cert-management-policy/11-verify-secrets-unchanged | ++ awk '{print $1}'
    logger.go:42: 21:53:25 | cert-management-policy/11-verify-secrets-unchanged | + actual=dac92ede23f9ec89a8b26f0f15b1f925caaf05277fc4df2170c81c03db183734
    logger.go:42: 21:53:25 | cert-management-policy/11-verify-secrets-unchanged | + [[ -z dac92ede23f9ec89a8b26f0f15b1f925caaf05277fc4df2170c81c03db183734 ]]
    logger.go:42: 21:53:25 | cert-management-policy/11-verify-secrets-unchanged | + [[ dac92ede23f9ec89a8b26f0f15b1f925caaf05277fc4df2170c81c03db183734 != dac92ede23f9ec89a8b26f0f15b1f925caaf05277fc4df2170c81c03db183734 ]]
    logger.go:42: 21:53:25 | cert-management-policy/11-verify-secrets-unchanged | + assert_secret_unchanged cert-management-policy-cluster-cert
    logger.go:42: 21:53:25 | cert-management-policy/11-verify-secrets-unchanged | + local secret=cert-management-policy-cluster-cert
    logger.go:42: 21:53:25 | cert-management-policy/11-verify-secrets-unchanged | + local filter=.data
    logger.go:42: 21:53:25 | cert-management-policy/11-verify-secrets-unchanged | + local expected
    logger.go:42: 21:53:25 | cert-management-policy/11-verify-secrets-unchanged | + local actual
    logger.go:42: 21:53:25 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-cluster-cert -o 'jsonpath={.metadata.annotations.e2e\.percona\.com/secret-checksum}'
    logger.go:42: 21:53:25 | cert-management-policy/11-verify-secrets-unchanged | + expected=40f825e91f111646b3290b8d88864ce8fe24cae14f2af5b2358361daee174757
    logger.go:42: 21:53:25 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-cluster-cert -o json
    logger.go:42: 21:53:25 | cert-management-policy/11-verify-secrets-unchanged | ++ jq --compact-output --sort-keys .data
    logger.go:42: 21:53:25 | cert-management-policy/11-verify-secrets-unchanged | ++ sha256sum
    logger.go:42: 21:53:25 | cert-management-policy/11-verify-secrets-unchanged | ++ awk '{print $1}'
    logger.go:42: 21:53:26 | cert-management-policy/11-verify-secrets-unchanged | + actual=40f825e91f111646b3290b8d88864ce8fe24cae14f2af5b2358361daee174757
    logger.go:42: 21:53:26 | cert-management-policy/11-verify-secrets-unchanged | + [[ -z 40f825e91f111646b3290b8d88864ce8fe24cae14f2af5b2358361daee174757 ]]
    logger.go:42: 21:53:26 | cert-management-policy/11-verify-secrets-unchanged | + [[ 40f825e91f111646b3290b8d88864ce8fe24cae14f2af5b2358361daee174757 != 40f825e91f111646b3290b8d88864ce8fe24cae14f2af5b2358361daee174757 ]]
    logger.go:42: 21:53:26 | cert-management-policy/11-verify-secrets-unchanged | + assert_secret_unchanged cert-management-policy-replication-cert
    logger.go:42: 21:53:26 | cert-management-policy/11-verify-secrets-unchanged | + local secret=cert-management-policy-replication-cert
    logger.go:42: 21:53:26 | cert-management-policy/11-verify-secrets-unchanged | + local filter=.data
    logger.go:42: 21:53:26 | cert-management-policy/11-verify-secrets-unchanged | + local expected
    logger.go:42: 21:53:26 | cert-management-policy/11-verify-secrets-unchanged | + local actual
    logger.go:42: 21:53:26 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-replication-cert -o 'jsonpath={.metadata.annotations.e2e\.percona\.com/secret-checksum}'
    logger.go:42: 21:53:26 | cert-management-policy/11-verify-secrets-unchanged | + expected=841374e4133f75f95480a0bafa66fb4b0b458207b1957c78bd209c97d9fd683b
    logger.go:42: 21:53:26 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-replication-cert -o json
    logger.go:42: 21:53:26 | cert-management-policy/11-verify-secrets-unchanged | ++ jq --compact-output --sort-keys .data
    logger.go:42: 21:53:26 | cert-management-policy/11-verify-secrets-unchanged | ++ sha256sum
    logger.go:42: 21:53:26 | cert-management-policy/11-verify-secrets-unchanged | ++ awk '{print $1}'
    logger.go:42: 21:53:27 | cert-management-policy/11-verify-secrets-unchanged | + actual=841374e4133f75f95480a0bafa66fb4b0b458207b1957c78bd209c97d9fd683b
    logger.go:42: 21:53:27 | cert-management-policy/11-verify-secrets-unchanged | + [[ -z 841374e4133f75f95480a0bafa66fb4b0b458207b1957c78bd209c97d9fd683b ]]
    logger.go:42: 21:53:27 | cert-management-policy/11-verify-secrets-unchanged | + [[ 841374e4133f75f95480a0bafa66fb4b0b458207b1957c78bd209c97d9fd683b != 841374e4133f75f95480a0bafa66fb4b0b458207b1957c78bd209c97d9fd683b ]]
    logger.go:42: 21:53:27 | cert-management-policy/11-verify-secrets-unchanged | + assert_secret_unchanged cert-management-policy-pgbackrest
    logger.go:42: 21:53:27 | cert-management-policy/11-verify-secrets-unchanged | + local secret=cert-management-policy-pgbackrest
    logger.go:42: 21:53:27 | cert-management-policy/11-verify-secrets-unchanged | + local filter=.data
    logger.go:42: 21:53:27 | cert-management-policy/11-verify-secrets-unchanged | + local expected
    logger.go:42: 21:53:27 | cert-management-policy/11-verify-secrets-unchanged | + local actual
    logger.go:42: 21:53:27 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbackrest -o 'jsonpath={.metadata.annotations.e2e\.percona\.com/secret-checksum}'
    logger.go:42: 21:53:27 | cert-management-policy/11-verify-secrets-unchanged | + expected=c0b1142b0cdd918e8a918151249df9c62733a09fbd1a55aabdefc801a1319079
    logger.go:42: 21:53:27 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbackrest -o json
    logger.go:42: 21:53:27 | cert-management-policy/11-verify-secrets-unchanged | ++ jq --compact-output --sort-keys .data
    logger.go:42: 21:53:27 | cert-management-policy/11-verify-secrets-unchanged | ++ sha256sum
    logger.go:42: 21:53:27 | cert-management-policy/11-verify-secrets-unchanged | ++ awk '{print $1}'
    logger.go:42: 21:53:28 | cert-management-policy/11-verify-secrets-unchanged | + actual=c0b1142b0cdd918e8a918151249df9c62733a09fbd1a55aabdefc801a1319079
    logger.go:42: 21:53:28 | cert-management-policy/11-verify-secrets-unchanged | + [[ -z c0b1142b0cdd918e8a918151249df9c62733a09fbd1a55aabdefc801a1319079 ]]
    logger.go:42: 21:53:28 | cert-management-policy/11-verify-secrets-unchanged | + [[ c0b1142b0cdd918e8a918151249df9c62733a09fbd1a55aabdefc801a1319079 != c0b1142b0cdd918e8a918151249df9c62733a09fbd1a55aabdefc801a1319079 ]]
    logger.go:42: 21:53:28 | cert-management-policy/11-verify-secrets-unchanged | + assert_secret_unchanged cert-management-policy-pgbouncer '.data | with_entries(select(.key | startswith("pgbouncer-frontend.")))'
    logger.go:42: 21:53:28 | cert-management-policy/11-verify-secrets-unchanged | + local secret=cert-management-policy-pgbouncer
    logger.go:42: 21:53:28 | cert-management-policy/11-verify-secrets-unchanged | + local 'filter=.data | with_entries(select(.key | startswith("pgbouncer-frontend.")))'
    logger.go:42: 21:53:28 | cert-management-policy/11-verify-secrets-unchanged | + local expected
    logger.go:42: 21:53:28 | cert-management-policy/11-verify-secrets-unchanged | + local actual
    logger.go:42: 21:53:28 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o 'jsonpath={.metadata.annotations.e2e\.percona\.com/secret-checksum}'
    logger.go:42: 21:53:28 | cert-management-policy/11-verify-secrets-unchanged | + expected=c9851513d6ca1eaf86889a0d6029ff2125403267df04b0d441ba5139012dd1cd
    logger.go:42: 21:53:28 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o json
    logger.go:42: 21:53:28 | cert-management-policy/11-verify-secrets-unchanged | ++ jq --compact-output --sort-keys '.data | with_entries(select(.key | startswith("pgbouncer-frontend.")))'
    logger.go:42: 21:53:28 | cert-management-policy/11-verify-secrets-unchanged | ++ sha256sum
    logger.go:42: 21:53:28 | cert-management-policy/11-verify-secrets-unchanged | ++ awk '{print $1}'
    logger.go:42: 21:53:29 | cert-management-policy/11-verify-secrets-unchanged | + actual=c9851513d6ca1eaf86889a0d6029ff2125403267df04b0d441ba5139012dd1cd
    logger.go:42: 21:53:29 | cert-management-policy/11-verify-secrets-unchanged | + [[ -z c9851513d6ca1eaf86889a0d6029ff2125403267df04b0d441ba5139012dd1cd ]]
    logger.go:42: 21:53:29 | cert-management-policy/11-verify-secrets-unchanged | + [[ c9851513d6ca1eaf86889a0d6029ff2125403267df04b0d441ba5139012dd1cd != c9851513d6ca1eaf86889a0d6029ff2125403267df04b0d441ba5139012dd1cd ]]
    logger.go:42: 21:53:29 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-superb-vulture get statefulset -l postgres-operator.crunchydata.com/cluster=cert-management-policy,postgres-operator.crunchydata.com/data=postgres -o json
    logger.go:42: 21:53:30 | cert-management-policy/11-verify-secrets-unchanged | + statefulsets=$'{\n    "apiVersion": "v1",\n    "items": [\n        {\n            "apiVersion": "apps/v1",\n            "kind": "StatefulSet",\n            "metadata": {\n                "annotations": {\n                    "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n                },\n                "creationTimestamp": "2026-09-08T21:50:31Z",\n                "generation": 1,\n                "labels": {\n                    "app.kubernetes.io/component": "pg",\n                    "app.kubernetes.io/instance": "cert-management-policy",\n                    "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n                    "app.kubernetes.io/name": "percona-postgresql",\n                    "app.kubernetes.io/part-of": "percona-postgresql",\n                    "pgv2.percona.com/version": "3.1.0",\n                    "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n                    "postgres-operator.crunchydata.com/data": "postgres",\n                    "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-j92z",\n                    "postgres-operator.crunchydata.com/instance-set": "instance1"\n                },\n                "name": "cert-management-policy-instance1-j92z",\n                "namespace": "kuttl-test-superb-vulture",\n                "ownerReferences": [\n                    {\n                        "apiVersion": "upstream.pgv2.percona.com/v1beta1",\n                        "blockOwnerDeletion": true,\n                        "controller": true,\n                        "kind": "PostgresCluster",\n                        "name": "cert-management-policy",\n                        "uid": "ed2b1aa2-6e06-43f2-8628-ca6ade38534b"\n                    }\n                ],\n                "resourceVersion": "1788904343173951001",\n                "uid": "649227b5-cb2f-4e38-9d76-76cf20e9e7b6"\n            },\n            "spec": {\n                "persistentVolumeClaimRetentionPolicy": {\n                    "whenDeleted": "Retain",\n                    "whenScaled": "Retain"\n                },\n                "podManagementPolicy": "OrderedReady",\n                "replicas": 1,\n                "revisionHistoryLimit": 0,\n                "selector": {\n                    "matchLabels": {\n                        "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n                        "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-j92z",\n                        "postgres-operator.crunchydata.com/instance-set": "instance1"\n                    }\n                },\n                "serviceName": "cert-management-policy-pods",\n                "template": {\n                    "metadata": {\n                        "annotations": {\n                            "kubectl.kubernetes.io/default-container": "database",\n                            "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n                        },\n                        "labels": {\n                            "app.kubernetes.io/component": "pg",\n                            "app.kubernetes.io/instance": "cert-management-policy",\n                            "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n                            "app.kubernetes.io/name": "percona-postgresql",\n                            "app.kubernetes.io/part-of": "percona-postgresql",\n                            "pgv2.percona.com/version": "3.1.0",\n                            "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n                            "postgres-operator.crunchydata.com/data": "postgres",\n                            "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-j92z",\n                            "postgres-operator.crunchydata.com/instance-set": "instance1",\n                            "postgres-operator.crunchydata.com/patroni": "cert-management-policy-ha"\n                        }\n                    },\n                    "spec": {\n                        "affinity": {\n                            "podAntiAffinity": {\n                                "preferredDuringSchedulingIgnoredDuringExecution": [\n                                    {\n                                        "podAffinityTerm": {\n                                            "labelSelector": {\n                                                "matchLabels": {\n                                                    "postgres-operator.crunchydata.com/data": "postgres"\n                                                }\n                                            },\n                                            "topologyKey": "kubernetes.io/hostname"\n                                        },\n                                        "weight": 1\n                                    }\n                                ]\n                            }\n                        },\n                        "containers": [\n                            {\n                                "command": [\n                                    "/opt/crunchy/bin/postgres-entrypoint.sh",\n                                    "patroni",\n                                    "/etc/patroni"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "PGDATA",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PGHOST",\n                                        "value": "/tmp/postgres"\n                                    },\n                                    {\n                                        "name": "PGPORT",\n                                        "value": "5432"\n                                    },\n                                    {\n                                        "name": "KRB5_CONFIG",\n                                        "value": "/etc/postgres/krb5.conf"\n                                    },\n                                    {\n                                        "name": "KRB5RCACHEDIR",\n                                        "value": "/tmp"\n                                    },\n                                    {\n                                        "name": "LDAPTLS_CACERT",\n                                        "value": "/etc/postgres/ldap/ca.crt"\n                                    },\n                                    {\n                                        "name": "LC_ALL",\n                                        "value": "en_US.utf-8"\n                                    },\n                                    {\n                                        "name": "LANG",\n                                        "value": "en_US.utf-8"\n                                    },\n                                    {\n                                        "name": "PATRONI_NAME",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.name"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "PATRONI_KUBERNETES_POD_IP",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "status.podIP"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "PATRONI_KUBERNETES_PORTS",\n                                        "value": "- name: postgres\\n  port: 5432\\n  protocol: TCP\\n"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_CONNECT_ADDRESS",\n                                        "value": "$(PATRONI_NAME).cert-management-policy-pods:5432"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_LISTEN",\n                                        "value": "*:5432"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_CONFIG_DIR",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_DATA_DIR",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PATRONI_RESTAPI_CONNECT_ADDRESS",\n                                        "value": "$(PATRONI_NAME).cert-management-policy-pods:8008"\n                                    },\n                                    {\n                                        "name": "PATRONI_RESTAPI_LISTEN",\n                                        "value": "*:8008"\n                                    },\n                                    {\n                                        "name": "PATRONICTL_CONFIG_FILE",\n                                        "value": "/etc/patroni"\n                                    },\n                                    {\n                                        "name": "LD_PRELOAD",\n                                        "value": "/usr/lib64/libnss_wrapper.so"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_PASSWD",\n                                        "value": "/tmp/nss_wrapper/postgres/passwd"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_GROUP",\n                                        "value": "/tmp/nss_wrapper/postgres/group"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "livenessProbe": {\n                                    "exec": {\n                                        "command": [\n                                            "bash",\n                                            "-c",\n                                            "/opt/crunchy/bin/postgres-liveness-check.sh"\n                                        ]\n                                    },\n                                    "failureThreshold": 3,\n                                    "initialDelaySeconds": 3,\n                                    "periodSeconds": 10,\n                                    "successThreshold": 1,\n                                    "timeoutSeconds": 5\n                                },\n                                "name": "database",\n                                "ports": [\n                                    {\n                                        "containerPort": 5432,\n                                        "name": "postgres",\n                                        "protocol": "TCP"\n                                    }\n                                ],\n                                "readinessProbe": {\n                                    "exec": {\n                                        "command": [\n                                            "bash",\n                                            "-c",\n                                            "/opt/crunchy/bin/postgres-readiness-check.sh"\n                                        ]\n                                    },\n                                    "failureThreshold": 3,\n                                    "initialDelaySeconds": 3,\n                                    "periodSeconds": 10,\n                                    "successThreshold": 1,\n                                    "timeoutSeconds": 5\n                                },\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgconf/tls",\n                                        "name": "cert-volume",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/etc/database-containerinfo",\n                                        "name": "database-containerinfo",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/etc/pgbackrest/conf.d",\n                                        "name": "pgbackrest-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/etc/patroni",\n                                        "name": "patroni-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    },\n                                    {\n                                        "mountPath": "/dev/shm",\n                                        "name": "dshm"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-ceu",\n                                    "--",\n                                    "monitor() {\\n# Parameters for curl when managing autogrow annotation.\\nAPISERVER=\\"https://kubernetes.default.svc\\"\\nSERVICEACCOUNT=\\"/var/run/secrets/kubernetes.io/serviceaccount\\"\\nNAMESPACE=$(cat ${SERVICEACCOUNT}/namespace)\\nTOKEN=$(cat ${SERVICEACCOUNT}/token)\\nCACERT=${SERVICEACCOUNT}/ca.crt\\n\\ndeclare -r directory=\\"/pgconf/tls\\"\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nwhile read -r -t 5 -u \\"${fd}\\" ||:; do\\n  # Manage replication certificate.\\n  if [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n    install -D --mode=0600 -t \\"/tmp/replication\\" \\"${directory}\\"/{replication/tls.crt,replication/tls.key,replication/ca.crt} \\u0026\\u0026\\n    pkill -HUP --exact --parent=1 postgres\\n  then\\n    exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n    stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n  fi\\n\\ndone\\n}; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n                                    "replication-cert-copy"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "replication-cert-copy",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgconf/tls",\n                                        "name": "cert-volume",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "args": [\n                                    "fluent-bit"\n                                ],\n                                "command": [\n                                    "/opt/crunchy/logcollector/entrypoint.sh"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "PG_LOG_DIR",\n                                        "value": "/pgdata/pg18/log"\n                                    },\n                                    {\n                                        "name": "PGBACKREST_LOG_DIR",\n                                        "value": "/pgdata/pgbackrest/log"\n                                    },\n                                    {\n                                        "name": "POD_NAMESPACE",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.namespace"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "POD_NAME",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.name"\n                                            }\n                                        }\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/fluentbit:main-logcollector",\n                                "imagePullPolicy": "IfNotPresent",\n                                "name": "logs",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "runAsGroup": 26,\n                                    "runAsNonRoot": true,\n                                    "runAsUser": 26,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "args": [\n                                    "logrotate"\n                                ],\n                                "command": [\n                                    "/opt/crunchy/logcollector/entrypoint.sh"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "POD_NAMESPACE",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.namespace"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "POD_NAME",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.name"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "LOGROTATE_SCHEDULE",\n                                        "value": "0 0 * * *"\n                                    },\n                                    {\n                                        "name": "LD_PRELOAD",\n                                        "value": "/tmp/nss_wrapper/libnss_wrapper.so"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_PASSWD",\n                                        "value": "/tmp/nss_wrapper/postgres/passwd"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_GROUP",\n                                        "value": "/tmp/nss_wrapper/postgres/group"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/fluentbit:main-logcollector",\n                                "imagePullPolicy": "IfNotPresent",\n                                "name": "logrotate",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "runAsGroup": 26,\n                                    "runAsNonRoot": true,\n                                    "runAsUser": 26,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "pgbackrest",\n                                    "server"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "LD_PRELOAD",\n                                        "value": "/usr/lib64/libnss_wrapper.so"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_PASSWD",\n                                        "value": "/tmp/nss_wrapper/postgres/passwd"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_GROUP",\n                                        "value": "/tmp/nss_wrapper/postgres/group"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n                                "imagePullPolicy": "Always",\n                                "livenessProbe": {\n                                    "exec": {\n                                        "command": [\n                                            "pgbackrest",\n                                            "server-ping"\n                                        ]\n                                    },\n                                    "failureThreshold": 3,\n                                    "periodSeconds": 10,\n                                    "successThreshold": 1,\n                                    "timeoutSeconds": 1\n                                },\n                                "name": "pgbackrest",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/etc/pgbackrest/server",\n                                        "name": "pgbackrest-server",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/etc/pgbackrest/conf.d",\n                                        "name": "pgbackrest-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-ceu",\n                                    "--",\n                                    "monitor() {\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nuntil read -r -t 5 -u \\"${fd}\\"; do\\n  if\\n    [[ \\"${filename}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n    pkill -HUP --exact --parent=0 pgbackrest\\n  then\\n    exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n    stat --dereference --format=\'Loaded configuration dated %y\' \\"${filename}\\"\\n  elif\\n    { [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] ||\\n      [[ \\"${authority}\\" -nt \\"/proc/self/fd/${fd}\\" ]]\\n    } \\u0026\\u0026\\n    pkill -HUP --exact --parent=0 pgbackrest\\n  then\\n    exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n    stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n  fi\\ndone\\n}; export directory=\\"$1\\" authority=\\"$2\\" filename=\\"$3\\"; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n                                    "pgbackrest-config",\n                                    "/etc/pgbackrest/server",\n                                    "/etc/pgbackrest/conf.d/~postgres-operator/tls-ca.crt",\n                                    "/etc/pgbackrest/conf.d/~postgres-operator_server.conf"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n                                "imagePullPolicy": "Always",\n                                "name": "pgbackrest-config",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/etc/pgbackrest/server",\n                                        "name": "pgbackrest-server",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/etc/pgbackrest/conf.d",\n                                        "name": "pgbackrest-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            }\n                        ],\n                        "dnsPolicy": "ClusterFirst",\n                        "enableServiceLinks": false,\n                        "initContainers": [\n                            {\n                                "command": [\n                                    "/usr/local/bin/init-entrypoint.sh"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659",\n                                "imagePullPolicy": "Always",\n                                "name": "database-init",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-ceu",\n                                    "--",\n                                    "declare -r expected_major_version=\\"$1\\" pgwal_directory=\\"$2\\" pgbrLog_directory=\\"$3\\"\\npermissions() { while [[ -n \\"$1\\" ]]; do set \\"${1%/*}\\" \\"$@\\"; done; shift; stat -Lc \'%A %4u %4g %n\' \\"$@\\"; }\\nhalt() { local rc=$?; \\u003e\\u00262 echo \\"$@\\"; exit \\"${rc/#0/1}\\"; }\\nresults() { printf \'::postgres-operator: %s::%s\\\\n\' \\"$@\\"; }\\nrecreate() (\\n  local tmp; tmp=$(mktemp -d -p \\"${1%/*}\\"); GLOBIGNORE=\'.:..\'; set -x\\n  chmod \\"$2\\" \\"${tmp}\\"; mv \\"$1\\"/* \\"${tmp}\\"; rmdir \\"$1\\"; mv \\"${tmp}\\" \\"$1\\"\\n)\\nsafelink() (\\n  local desired=\\"$1\\" name=\\"$2\\" current\\n  current=$(realpath \\"${name}\\")\\n  if [[ \\"${current}\\" == \\"${desired}\\" ]]; then return; fi\\n  set -x; mv --no-target-directory \\"${current}\\" \\"${desired}\\"\\n  ln --no-dereference --force --symbolic \\"${desired}\\" \\"${name}\\"\\n)\\necho Initializing ...\\nresults \'uid\' \\"$(id -u ||:)\\" \'gid\' \\"$(id -G ||:)\\"\\nif [[ \\"${pgwal_directory}\\" == *\\"pgwal/\\"* ]] \\u0026\\u0026 [[ ! -d \\"/pgwal/pgbackrest-spool\\" ]];then rm -rf \\"/pgdata/pgbackrest-spool\\" \\u0026\\u0026 mkdir -p \\"/pgwal/pgbackrest-spool\\" \\u0026\\u0026 ln --force --symbolic \\"/pgwal/pgbackrest-spool\\" \\"/pgdata/pgbackrest-spool\\";fi\\nif [[ ! -e \\"/pgdata/pgbackrest-spool\\" ]];then rm -rf /pgdata/pgbackrest-spool;fi\\nresults \'postgres path\' \\"$(command -v postgres ||:)\\"\\nresults \'postgres version\' \\"${postgres_version:=$(postgres --version ||:)}\\"\\n[[ \\"${postgres_version}\\" =~ \\") ${expected_major_version}\\"($|[^0-9]) ]] ||\\nhalt Expected PostgreSQL version \\"${expected_major_version}\\"\\nresults \'config directory\' \\"${PGDATA:?}\\"\\npostgres_data_directory=$([[ -d \\"${PGDATA}\\" ]] \\u0026\\u0026 postgres -C data_directory || echo \\"${PGDATA}\\")\\nresults \'data directory\' \\"${postgres_data_directory}\\"\\n[[ \\"${postgres_data_directory}\\" == \\"${PGDATA}\\" ]] ||\\nhalt Expected matching config and data directories\\nbootstrap_dir=\\"${postgres_data_directory}_bootstrap\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 results \'bootstrap directory\' \\"${bootstrap_dir}\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 postgres_data_directory=\\"${bootstrap_dir}\\"\\nif [[ ! -e \\"${postgres_data_directory}\\" || -O \\"${postgres_data_directory}\\" ]]; then\\ninstall --directory --mode=0700 \\"${postgres_data_directory}\\"\\nelif [[ -w \\"${postgres_data_directory}\\" \\u0026\\u0026 -g \\"${postgres_data_directory}\\" ]]; then\\nrecreate \\"${postgres_data_directory}\\" \'0700\'\\nelse (halt Permissions!); fi ||\\nhalt \\"$(permissions \\"${postgres_data_directory}\\" ||:)\\"\\nresults \'pgBackRest log directory\' \\"${pgbrLog_directory}\\"\\ninstall --directory --mode=0775 \\"${pgbrLog_directory}\\" ||\\nhalt \\"$(permissions \\"${pgbrLog_directory}\\" ||:)\\"\\ninstall -D --mode=0600 -t \\"/tmp/replication\\" \\"/pgconf/tls/replication\\"/{tls.crt,tls.key,ca.crt}\\n\\n[[ -f \\"${postgres_data_directory}/PG_VERSION\\" ]] || exit 0\\nresults \'data version\' \\"${postgres_data_version:=$(\\u003c \\"${postgres_data_directory}/PG_VERSION\\")}\\"\\n[[ \\"${postgres_data_version}\\" == \\"${expected_major_version}\\" ]] ||\\nhalt Expected PostgreSQL data version \\"${expected_major_version}\\"\\n[[ ! -f \\"${postgres_data_directory}/postgresql.conf\\" ]] \\u0026\\u0026\\ntouch \\"${postgres_data_directory}/postgresql.conf\\"\\nsafelink \\"${pgwal_directory}\\" \\"${postgres_data_directory}/pg_wal\\"\\nresults \'wal directory\' \\"$(realpath \\"${postgres_data_directory}/pg_wal\\" ||:)\\"\\nrm -f \\"${postgres_data_directory}/recovery.signal\\"",\n                                    "startup",\n                                    "18",\n                                    "/pgdata/pg18_wal",\n                                    "/pgdata/pgbackrest/log"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "PGDATA",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PGHOST",\n                                        "value": "/tmp/postgres"\n                                    },\n                                    {\n                                        "name": "PGPORT",\n                                        "value": "5432"\n                                    },\n                                    {\n                                        "name": "KRB5_CONFIG",\n                                        "value": "/etc/postgres/krb5.conf"\n                                    },\n                                    {\n                                        "name": "KRB5RCACHEDIR",\n                                        "value": "/tmp"\n                                    },\n                                    {\n                                        "name": "LDAPTLS_CACERT",\n                                        "value": "/etc/postgres/ldap/ca.crt"\n                                    },\n                                    {\n                                        "name": "LC_ALL",\n                                        "value": "en_US.utf-8"\n                                    },\n                                    {\n                                        "name": "LANG",\n                                        "value": "en_US.utf-8"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "postgres-startup",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgconf/tls",\n                                        "name": "cert-volume",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-c",\n                                    "mkdir -p /tmp/nss_wrapper \\u0026\\u0026 { [[ -f /tmp/nss_wrapper/libnss_wrapper.so ]] || cp /usr/lib64/libnss_wrapper.so /tmp/nss_wrapper/libnss_wrapper.so; }"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "nss-wrapper-init-logcollector",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "runAsGroup": 26,\n                                    "runAsNonRoot": true,\n                                    "runAsUser": 26,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-c",\n                                    "export NSS_WRAPPER_SUBDIR=postgres CRUNCHY_NSS_USERNAME=postgres CRUNCHY_NSS_USER_DESC=\\"postgres\\" \\n# Define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper.  The\\n# nss_wrapper_env.sh script (which also sets these vars) isn\'t sourced here since the nss_wrapper\\n# has not yet been setup, and we therefore don\'t yet want the nss_wrapper vars in the environment.\\nmkdir -p /tmp/nss_wrapper\\nchmod g+rwx /tmp/nss_wrapper\\n\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\n# create the nss_wrapper directory\\nmkdir -p \\"${NSS_WRAPPER_DIR}\\"\\n\\n# grab the current user ID and group ID\\nUSER_ID=$(id -u)\\nexport USER_ID\\nGROUP_ID=$(id -g)\\nexport GROUP_ID\\n\\n# get copies of the passwd and group files\\n[[ -f \\"${NSS_WRAPPER_PASSWD}\\" ]] || cp \\"/etc/passwd\\" \\"${NSS_WRAPPER_PASSWD}\\"\\n[[ -f \\"${NSS_WRAPPER_GROUP}\\" ]] || cp \\"/etc/group\\" \\"${NSS_WRAPPER_GROUP}\\"\\n\\n# if the username is missing from the passwd file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_PASSWD}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n    echo \\"nss_wrapper: adding user\\"\\n    passwd_tmp=\\"${NSS_WRAPPER_DIR}/passwd_tmp\\"\\n    cp \\"${NSS_WRAPPER_PASSWD}\\" \\"${passwd_tmp}\\"\\n    sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${passwd_tmp}\\"\\n    # needed for OCP 4.x because crio updates /etc/passwd with an entry for USER_ID\\n    sed -i \\"/${USER_ID}:x:/d\\" \\"${passwd_tmp}\\"\\n    printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${GROUP_ID}:${CRUNCHY_NSS_USER_DESC}:${HOME}:/bin/bash\\\\n\' \\u003e\\u003e \\"${passwd_tmp}\\"\\n    envsubst \\u003c \\"${passwd_tmp}\\" \\u003e \\"${NSS_WRAPPER_PASSWD}\\"\\n    rm \\"${passwd_tmp}\\"\\nelse\\n    echo \\"nss_wrapper: user exists\\"\\nfi\\n\\n# if the username (which will be the same as the group name) is missing from group file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_GROUP}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n    echo \\"nss_wrapper: adding group\\"\\n    group_tmp=\\"${NSS_WRAPPER_DIR}/group_tmp\\"\\n    cp \\"${NSS_WRAPPER_GROUP}\\" \\"${group_tmp}\\"\\n    sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${group_tmp}\\"\\n    printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${CRUNCHY_NSS_USERNAME}\\\\n\' \\u003e\\u003e \\"${group_tmp}\\"\\n    envsubst \\u003c \\"${group_tmp}\\" \\u003e \\"${NSS_WRAPPER_GROUP}\\"\\n    rm \\"${group_tmp}\\"\\nelse\\n    echo \\"nss_wrapper: group exists\\"\\nfi\\n\\n# export the nss_wrapper env vars\\n# define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\nexport LD_PRELOAD=/usr/lib64/libnss_wrapper.so\\nexport NSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_PASSWD}\\"\\nexport NSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_GROUP}\\"\\n\\necho \\"nss_wrapper: environment configured\\"\\n"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "nss-wrapper-init",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            }\n                        ],\n                        "restartPolicy": "Always",\n                        "schedulerName": "default-scheduler",\n                        "securityContext": {\n                            "fsGroup": 26,\n                            "fsGroupChangePolicy": "OnRootMismatch"\n                        },\n                        "serviceAccount": "cert-management-policy-instance",\n                        "serviceAccountName": "cert-management-policy-instance",\n                        "shareProcessNamespace": true,\n                        "terminationGracePeriodSeconds": 30,\n                        "topologySpreadConstraints": [\n                            {\n                                "labelSelector": {\n                                    "matchExpressions": [\n                                        {\n                                            "key": "postgres-operator.crunchydata.com/data",\n                                            "operator": "In",\n                                            "values": [\n                                                "postgres",\n                                                "pgbackrest"\n                                            ]\n                                        }\n                                    ],\n                                    "matchLabels": {\n                                        "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n                                    }\n                                },\n                                "maxSkew": 1,\n                                "topologyKey": "kubernetes.io/hostname",\n                                "whenUnsatisfiable": "ScheduleAnyway"\n                            },\n                            {\n                                "labelSelector": {\n                                    "matchExpressions": [\n                                        {\n                                            "key": "postgres-operator.crunchydata.com/data",\n                                            "operator": "In",\n                                            "values": [\n                                                "postgres",\n                                                "pgbackrest"\n                                            ]\n                                        }\n                                    ],\n                                    "matchLabels": {\n                                        "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n                                    }\n                                },\n                                "maxSkew": 1,\n                                "topologyKey": "topology.kubernetes.io/zone",\n                                "whenUnsatisfiable": "ScheduleAnyway"\n                            }\n                        ],\n                        "volumes": [\n                            {\n                                "name": "cert-volume",\n                                "projected": {\n                                    "defaultMode": 384,\n                                    "sources": [\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "tls.crt",\n                                                        "path": "tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "tls.key",\n                                                        "path": "tls.key"\n                                                    },\n                                                    {\n                                                        "key": "ca.crt",\n                                                        "path": "ca.crt"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-cluster-cert"\n                                            }\n                                        },\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "tls.crt",\n                                                        "path": "replication/tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "tls.key",\n                                                        "path": "replication/tls.key"\n                                                    },\n                                                    {\n                                                        "key": "ca.crt",\n                                                        "path": "replication/ca.crt"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-replication-cert"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "name": "postgres-data",\n                                "persistentVolumeClaim": {\n                                    "claimName": "cert-management-policy-instance1-j92z-pgdata"\n                                }\n                            },\n                            {\n                                "downwardAPI": {\n                                    "defaultMode": 420,\n                                    "items": [\n                                        {\n                                            "path": "cpu_limit",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1m",\n                                                "resource": "limits.cpu"\n                                            }\n                                        },\n                                        {\n                                            "path": "cpu_request",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1m",\n                                                "resource": "requests.cpu"\n                                            }\n                                        },\n                                        {\n                                            "path": "mem_limit",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1Mi",\n                                                "resource": "limits.memory"\n                                            }\n                                        },\n                                        {\n                                            "path": "mem_request",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1Mi",\n                                                "resource": "requests.memory"\n                                            }\n                                        },\n                                        {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.labels"\n                                            },\n                                            "path": "labels"\n                                        },\n                                        {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.annotations"\n                                            },\n                                            "path": "annotations"\n                                        }\n                                    ]\n                                },\n                                "name": "database-containerinfo"\n                            },\n                            {\n                                "name": "pgbackrest-server",\n                                "projected": {\n                                    "defaultMode": 420,\n                                    "sources": [\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "pgbackrest-server.crt",\n                                                        "path": "server-tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-server.key",\n                                                        "mode": 384,\n                                                        "path": "server-tls.key"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-instance1-j92z-certs"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "name": "pgbackrest-config",\n                                "projected": {\n                                    "defaultMode": 420,\n                                    "sources": [\n                                        {\n                                            "configMap": {\n                                                "items": [\n                                                    {\n                                                        "key": "pgbackrest_instance.conf",\n                                                        "path": "pgbackrest_instance.conf"\n                                                    },\n                                                    {\n                                                        "key": "config-hash",\n                                                        "path": "config-hash"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-server.conf",\n                                                        "path": "~postgres-operator_server.conf"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-pgbackrest-config"\n                                            }\n                                        },\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "pgbackrest.ca-roots",\n                                                        "path": "~postgres-operator/tls-ca.crt"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-client.crt",\n                                                        "path": "~postgres-operator/client-tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-client.key",\n                                                        "mode": 384,\n                                                        "path": "~postgres-operator/client-tls.key"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-pgbackrest"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "name": "patroni-config",\n                                "projected": {\n                                    "defaultMode": 420,\n                                    "sources": [\n                                        {\n                                            "configMap": {\n                                                "items": [\n                                                    {\n                                                        "key": "patroni.yaml",\n                                                        "path": "~postgres-operator_cluster.yaml"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-config"\n                                            }\n                                        },\n                                        {\n                                            "configMap": {\n                                                "items": [\n                                                    {\n                                                        "key": "patroni.yaml",\n                                                        "path": "~postgres-operator_instance.yaml"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-instance1-j92z-config"\n                                            }\n                                        },\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "patroni.ca-roots",\n                                                        "path": "~postgres-operator/patroni.ca-roots"\n                                                    },\n                                                    {\n                                                        "key": "patroni.crt-combined",\n                                                        "path": "~postgres-operator/patroni.crt+key"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-instance1-j92z-certs"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "emptyDir": {},\n                                "name": "crunchy-bin"\n                            },\n                            {\n                                "emptyDir": {\n                                    "sizeLimit": "2Gi"\n                                },\n                                "name": "tmp"\n                            },\n                            {\n                                "emptyDir": {\n                                    "medium": "Memory"\n                                },\n                                "name": "dshm"\n                            }\n                        ]\n                    }\n                },\n                "updateStrategy": {\n                    "type": "OnDelete"\n                }\n            },\n            "status": {\n                "availableReplicas": 1,\n                "collisionCount": 0,\n                "currentReplicas": 1,\n                "currentRevision": "cert-management-policy-instance1-j92z-79dfbb9dd5",\n                "observedGeneration": 1,\n                "readyReplicas": 1,\n                "replicas": 1,\n                "updateRevision": "cert-management-policy-instance1-j92z-79dfbb9dd5",\n                "updatedReplicas": 1\n            }\n        },\n        {\n            "apiVersion": "apps/v1",\n            "kind": "StatefulSet",\n            "metadata": {\n                "annotations": {\n                    "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n                },\n                "creationTimestamp": "2026-09-08T21:50:31Z",\n                "generation": 1,\n                "labels": {\n                    "app.kubernetes.io/component": "pg",\n                    "app.kubernetes.io/instance": "cert-management-policy",\n                    "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n                    "app.kubernetes.io/name": "percona-postgresql",\n                    "app.kubernetes.io/part-of": "percona-postgresql",\n                    "pgv2.percona.com/version": "3.1.0",\n                    "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n                    "postgres-operator.crunchydata.com/data": "postgres",\n                    "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-wpcx",\n                    "postgres-operator.crunchydata.com/instance-set": "instance1"\n                },\n                "name": "cert-management-policy-instance1-wpcx",\n                "namespace": "kuttl-test-superb-vulture",\n                "ownerReferences": [\n                    {\n                        "apiVersion": "upstream.pgv2.percona.com/v1beta1",\n                        "blockOwnerDeletion": true,\n                        "controller": true,\n                        "kind": "PostgresCluster",\n                        "name": "cert-management-policy",\n                        "uid": "ed2b1aa2-6e06-43f2-8628-ca6ade38534b"\n                    }\n                ],\n                "resourceVersion": "1788904302529919002",\n                "uid": "74b1b66b-6d0c-4721-b225-01985faf5e82"\n            },\n            "spec": {\n                "persistentVolumeClaimRetentionPolicy": {\n                    "whenDeleted": "Retain",\n                    "whenScaled": "Retain"\n                },\n                "podManagementPolicy": "OrderedReady",\n                "replicas": 1,\n                "revisionHistoryLimit": 0,\n                "selector": {\n                    "matchLabels": {\n                        "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n                        "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-wpcx",\n                        "postgres-operator.crunchydata.com/instance-set": "instance1"\n                    }\n                },\n                "serviceName": "cert-management-policy-pods",\n                "template": {\n                    "metadata": {\n                        "annotations": {\n                            "kubectl.kubernetes.io/default-container": "database",\n                            "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n                        },\n                        "labels": {\n                            "app.kubernetes.io/component": "pg",\n                            "app.kubernetes.io/instance": "cert-management-policy",\n                            "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n                            "app.kubernetes.io/name": "percona-postgresql",\n                            "app.kubernetes.io/part-of": "percona-postgresql",\n                            "pgv2.percona.com/version": "3.1.0",\n                            "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n                            "postgres-operator.crunchydata.com/data": "postgres",\n                            "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-wpcx",\n                            "postgres-operator.crunchydata.com/instance-set": "instance1",\n                            "postgres-operator.crunchydata.com/patroni": "cert-management-policy-ha"\n                        }\n                    },\n                    "spec": {\n                        "affinity": {\n                            "podAntiAffinity": {\n                                "preferredDuringSchedulingIgnoredDuringExecution": [\n                                    {\n                                        "podAffinityTerm": {\n                                            "labelSelector": {\n                                                "matchLabels": {\n                                                    "postgres-operator.crunchydata.com/data": "postgres"\n                                                }\n                                            },\n                                            "topologyKey": "kubernetes.io/hostname"\n                                        },\n                                        "weight": 1\n                                    }\n                                ]\n                            }\n                        },\n                        "containers": [\n                            {\n                                "command": [\n                                    "/opt/crunchy/bin/postgres-entrypoint.sh",\n                                    "patroni",\n                                    "/etc/patroni"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "PGDATA",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PGHOST",\n                                        "value": "/tmp/postgres"\n                                    },\n                                    {\n                                        "name": "PGPORT",\n                                        "value": "5432"\n                                    },\n                                    {\n                                        "name": "KRB5_CONFIG",\n                                        "value": "/etc/postgres/krb5.conf"\n                                    },\n                                    {\n                                        "name": "KRB5RCACHEDIR",\n                                        "value": "/tmp"\n                                    },\n                                    {\n                                        "name": "LDAPTLS_CACERT",\n                                        "value": "/etc/postgres/ldap/ca.crt"\n                                    },\n                                    {\n                                        "name": "LC_ALL",\n                                        "value": "en_US.utf-8"\n                                    },\n                                    {\n                                        "name": "LANG",\n                                        "value": "en_US.utf-8"\n                                    },\n                                    {\n                                        "name": "PATRONI_NAME",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.name"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "PATRONI_KUBERNETES_POD_IP",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "status.podIP"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "PATRONI_KUBERNETES_PORTS",\n                                        "value": "- name: postgres\\n  port: 5432\\n  protocol: TCP\\n"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_CONNECT_ADDRESS",\n                                        "value": "$(PATRONI_NAME).cert-management-policy-pods:5432"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_LISTEN",\n                                        "value": "*:5432"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_CONFIG_DIR",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_DATA_DIR",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PATRONI_RESTAPI_CONNECT_ADDRESS",\n                                        "value": "$(PATRONI_NAME).cert-management-policy-pods:8008"\n                                    },\n                                    {\n                                        "name": "PATRONI_RESTAPI_LISTEN",\n                                        "value": "*:8008"\n                                    },\n                                    {\n                                        "name": "PATRONICTL_CONFIG_FILE",\n                                        "value": "/etc/patroni"\n                                    },\n                                    {\n                                        "name": "LD_PRELOAD",\n                                        "value": "/usr/lib64/libnss_wrapper.so"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_PASSWD",\n                                        "value": "/tmp/nss_wrapper/postgres/passwd"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_GROUP",\n                                        "value": "/tmp/nss_wrapper/postgres/group"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "livenessProbe": {\n                                    "exec": {\n                                        "command": [\n                                            "bash",\n                                            "-c",\n                                            "/opt/crunchy/bin/postgres-liveness-check.sh"\n                                        ]\n                                    },\n                                    "failureThreshold": 3,\n                                    "initialDelaySeconds": 3,\n                                    "periodSeconds": 10,\n                                    "successThreshold": 1,\n                                    "timeoutSeconds": 5\n                                },\n                                "name": "database",\n                                "ports": [\n                                    {\n                                        "containerPort": 5432,\n                                        "name": "postgres",\n                                        "protocol": "TCP"\n                                    }\n                                ],\n                                "readinessProbe": {\n                                    "exec": {\n                                        "command": [\n                                            "bash",\n                                            "-c",\n                                            "/opt/crunchy/bin/postgres-readiness-check.sh"\n                                        ]\n                                    },\n                                    "failureThreshold": 3,\n                                    "initialDelaySeconds": 3,\n                                    "periodSeconds": 10,\n                                    "successThreshold": 1,\n                                    "timeoutSeconds": 5\n                                },\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgconf/tls",\n                                        "name": "cert-volume",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/etc/database-containerinfo",\n                                        "name": "database-containerinfo",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/etc/pgbackrest/conf.d",\n                                        "name": "pgbackrest-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/etc/patroni",\n                                        "name": "patroni-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    },\n                                    {\n                                        "mountPath": "/dev/shm",\n                                        "name": "dshm"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-ceu",\n                                    "--",\n                                    "monitor() {\\n# Parameters for curl when managing autogrow annotation.\\nAPISERVER=\\"https://kubernetes.default.svc\\"\\nSERVICEACCOUNT=\\"/var/run/secrets/kubernetes.io/serviceaccount\\"\\nNAMESPACE=$(cat ${SERVICEACCOUNT}/namespace)\\nTOKEN=$(cat ${SERVICEACCOUNT}/token)\\nCACERT=${SERVICEACCOUNT}/ca.crt\\n\\ndeclare -r directory=\\"/pgconf/tls\\"\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nwhile read -r -t 5 -u \\"${fd}\\" ||:; do\\n  # Manage replication certificate.\\n  if [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n    install -D --mode=0600 -t \\"/tmp/replication\\" \\"${directory}\\"/{replication/tls.crt,replication/tls.key,replication/ca.crt} \\u0026\\u0026\\n    pkill -HUP --exact --parent=1 postgres\\n  then\\n    exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n    stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n  fi\\n\\ndone\\n}; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n                                    "replication-cert-copy"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "replication-cert-copy",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgconf/tls",\n                                        "name": "cert-volume",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "args": [\n                                    "fluent-bit"\n                                ],\n                                "command": [\n                                    "/opt/crunchy/logcollector/entrypoint.sh"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "PG_LOG_DIR",\n                                        "value": "/pgdata/pg18/log"\n                                    },\n                                    {\n                                        "name": "PGBACKREST_LOG_DIR",\n                                        "value": "/pgdata/pgbackrest/log"\n                                    },\n                                    {\n                                        "name": "POD_NAMESPACE",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.namespace"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "POD_NAME",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.name"\n                                            }\n                                        }\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/fluentbit:main-logcollector",\n                                "imagePullPolicy": "IfNotPresent",\n                                "name": "logs",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "runAsGroup": 26,\n                                    "runAsNonRoot": true,\n                                    "runAsUser": 26,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "args": [\n                                    "logrotate"\n                                ],\n                                "command": [\n                                    "/opt/crunchy/logcollector/entrypoint.sh"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "POD_NAMESPACE",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.namespace"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "POD_NAME",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.name"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "LOGROTATE_SCHEDULE",\n                                        "value": "0 0 * * *"\n                                    },\n                                    {\n                                        "name": "LD_PRELOAD",\n                                        "value": "/tmp/nss_wrapper/libnss_wrapper.so"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_PASSWD",\n                                        "value": "/tmp/nss_wrapper/postgres/passwd"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_GROUP",\n                                        "value": "/tmp/nss_wrapper/postgres/group"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/fluentbit:main-logcollector",\n                                "imagePullPolicy": "IfNotPresent",\n                                "name": "logrotate",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "runAsGroup": 26,\n                                    "runAsNonRoot": true,\n                                    "runAsUser": 26,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "pgbackrest",\n                                    "server"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "LD_PRELOAD",\n                                        "value": "/usr/lib64/libnss_wrapper.so"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_PASSWD",\n                                        "value": "/tmp/nss_wrapper/postgres/passwd"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_GROUP",\n                                        "value": "/tmp/nss_wrapper/postgres/group"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n                                "imagePullPolicy": "Always",\n                                "livenessProbe": {\n                                    "exec": {\n                                        "command": [\n                                            "pgbackrest",\n                                            "server-ping"\n                                        ]\n                                    },\n                                    "failureThreshold": 3,\n                                    "periodSeconds": 10,\n                                    "successThreshold": 1,\n                                    "timeoutSeconds": 1\n                                },\n                                "name": "pgbackrest",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/etc/pgbackrest/server",\n                                        "name": "pgbackrest-server",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/etc/pgbackrest/conf.d",\n                                        "name": "pgbackrest-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-ceu",\n                                    "--",\n                                    "monitor() {\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nuntil read -r -t 5 -u \\"${fd}\\"; do\\n  if\\n    [[ \\"${filename}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n    pkill -HUP --exact --parent=0 pgbackrest\\n  then\\n    exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n    stat --dereference --format=\'Loaded configuration dated %y\' \\"${filename}\\"\\n  elif\\n    { [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] ||\\n      [[ \\"${authority}\\" -nt \\"/proc/self/fd/${fd}\\" ]]\\n    } \\u0026\\u0026\\n    pkill -HUP --exact --parent=0 pgbackrest\\n  then\\n    exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n    stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n  fi\\ndone\\n}; export directory=\\"$1\\" authority=\\"$2\\" filename=\\"$3\\"; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n                                    "pgbackrest-config",\n                                    "/etc/pgbackrest/server",\n                                    "/etc/pgbackrest/conf.d/~postgres-operator/tls-ca.crt",\n                                    "/etc/pgbackrest/conf.d/~postgres-operator_server.conf"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n                                "imagePullPolicy": "Always",\n                                "name": "pgbackrest-config",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/etc/pgbackrest/server",\n                                        "name": "pgbackrest-server",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/etc/pgbackrest/conf.d",\n                                        "name": "pgbackrest-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            }\n                        ],\n                        "dnsPolicy": "ClusterFirst",\n                        "enableServiceLinks": false,\n                        "initContainers": [\n                            {\n                                "command": [\n                                    "/usr/local/bin/init-entrypoint.sh"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659",\n                                "imagePullPolicy": "Always",\n                                "name": "database-init",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-ceu",\n                                    "--",\n                                    "declare -r expected_major_version=\\"$1\\" pgwal_directory=\\"$2\\" pgbrLog_directory=\\"$3\\"\\npermissions() { while [[ -n \\"$1\\" ]]; do set \\"${1%/*}\\" \\"$@\\"; done; shift; stat -Lc \'%A %4u %4g %n\' \\"$@\\"; }\\nhalt() { local rc=$?; \\u003e\\u00262 echo \\"$@\\"; exit \\"${rc/#0/1}\\"; }\\nresults() { printf \'::postgres-operator: %s::%s\\\\n\' \\"$@\\"; }\\nrecreate() (\\n  local tmp; tmp=$(mktemp -d -p \\"${1%/*}\\"); GLOBIGNORE=\'.:..\'; set -x\\n  chmod \\"$2\\" \\"${tmp}\\"; mv \\"$1\\"/* \\"${tmp}\\"; rmdir \\"$1\\"; mv \\"${tmp}\\" \\"$1\\"\\n)\\nsafelink() (\\n  local desired=\\"$1\\" name=\\"$2\\" current\\n  current=$(realpath \\"${name}\\")\\n  if [[ \\"${current}\\" == \\"${desired}\\" ]]; then return; fi\\n  set -x; mv --no-target-directory \\"${current}\\" \\"${desired}\\"\\n  ln --no-dereference --force --symbolic \\"${desired}\\" \\"${name}\\"\\n)\\necho Initializing ...\\nresults \'uid\' \\"$(id -u ||:)\\" \'gid\' \\"$(id -G ||:)\\"\\nif [[ \\"${pgwal_directory}\\" == *\\"pgwal/\\"* ]] \\u0026\\u0026 [[ ! -d \\"/pgwal/pgbackrest-spool\\" ]];then rm -rf \\"/pgdata/pgbackrest-spool\\" \\u0026\\u0026 mkdir -p \\"/pgwal/pgbackrest-spool\\" \\u0026\\u0026 ln --force --symbolic \\"/pgwal/pgbackrest-spool\\" \\"/pgdata/pgbackrest-spool\\";fi\\nif [[ ! -e \\"/pgdata/pgbackrest-spool\\" ]];then rm -rf /pgdata/pgbackrest-spool;fi\\nresults \'postgres path\' \\"$(command -v postgres ||:)\\"\\nresults \'postgres version\' \\"${postgres_version:=$(postgres --version ||:)}\\"\\n[[ \\"${postgres_version}\\" =~ \\") ${expected_major_version}\\"($|[^0-9]) ]] ||\\nhalt Expected PostgreSQL version \\"${expected_major_version}\\"\\nresults \'config directory\' \\"${PGDATA:?}\\"\\npostgres_data_directory=$([[ -d \\"${PGDATA}\\" ]] \\u0026\\u0026 postgres -C data_directory || echo \\"${PGDATA}\\")\\nresults \'data directory\' \\"${postgres_data_directory}\\"\\n[[ \\"${postgres_data_directory}\\" == \\"${PGDATA}\\" ]] ||\\nhalt Expected matching config and data directories\\nbootstrap_dir=\\"${postgres_data_directory}_bootstrap\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 results \'bootstrap directory\' \\"${bootstrap_dir}\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 postgres_data_directory=\\"${bootstrap_dir}\\"\\nif [[ ! -e \\"${postgres_data_directory}\\" || -O \\"${postgres_data_directory}\\" ]]; then\\ninstall --directory --mode=0700 \\"${postgres_data_directory}\\"\\nelif [[ -w \\"${postgres_data_directory}\\" \\u0026\\u0026 -g \\"${postgres_data_directory}\\" ]]; then\\nrecreate \\"${postgres_data_directory}\\" \'0700\'\\nelse (halt Permissions!); fi ||\\nhalt \\"$(permissions \\"${postgres_data_directory}\\" ||:)\\"\\nresults \'pgBackRest log directory\' \\"${pgbrLog_directory}\\"\\ninstall --directory --mode=0775 \\"${pgbrLog_directory}\\" ||\\nhalt \\"$(permissions \\"${pgbrLog_directory}\\" ||:)\\"\\ninstall -D --mode=0600 -t \\"/tmp/replication\\" \\"/pgconf/tls/replication\\"/{tls.crt,tls.key,ca.crt}\\n\\n[[ -f \\"${postgres_data_directory}/PG_VERSION\\" ]] || exit 0\\nresults \'data version\' \\"${postgres_data_version:=$(\\u003c \\"${postgres_data_directory}/PG_VERSION\\")}\\"\\n[[ \\"${postgres_data_version}\\" == \\"${expected_major_version}\\" ]] ||\\nhalt Expected PostgreSQL data version \\"${expected_major_version}\\"\\n[[ ! -f \\"${postgres_data_directory}/postgresql.conf\\" ]] \\u0026\\u0026\\ntouch \\"${postgres_data_directory}/postgresql.conf\\"\\nsafelink \\"${pgwal_directory}\\" \\"${postgres_data_directory}/pg_wal\\"\\nresults \'wal directory\' \\"$(realpath \\"${postgres_data_directory}/pg_wal\\" ||:)\\"\\nrm -f \\"${postgres_data_directory}/recovery.signal\\"",\n                                    "startup",\n                                    "18",\n                                    "/pgdata/pg18_wal",\n                                    "/pgdata/pgbackrest/log"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "PGDATA",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PGHOST",\n                                        "value": "/tmp/postgres"\n                                    },\n                                    {\n                                        "name": "PGPORT",\n                                        "value": "5432"\n                                    },\n                                    {\n                                        "name": "KRB5_CONFIG",\n                                        "value": "/etc/postgres/krb5.conf"\n                                    },\n                                    {\n                                        "name": "KRB5RCACHEDIR",\n                                        "value": "/tmp"\n                                    },\n                                    {\n                                        "name": "LDAPTLS_CACERT",\n                                        "value": "/etc/postgres/ldap/ca.crt"\n                                    },\n                                    {\n                                        "name": "LC_ALL",\n                                        "value": "en_US.utf-8"\n                                    },\n                                    {\n                                        "name": "LANG",\n                                        "value": "en_US.utf-8"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "postgres-startup",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgconf/tls",\n                                        "name": "cert-volume",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-c",\n                                    "mkdir -p /tmp/nss_wrapper \\u0026\\u0026 { [[ -f /tmp/nss_wrapper/libnss_wrapper.so ]] || cp /usr/lib64/libnss_wrapper.so /tmp/nss_wrapper/libnss_wrapper.so; }"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "nss-wrapper-init-logcollector",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "runAsGroup": 26,\n                                    "runAsNonRoot": true,\n                                    "runAsUser": 26,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-c",\n                                    "export NSS_WRAPPER_SUBDIR=postgres CRUNCHY_NSS_USERNAME=postgres CRUNCHY_NSS_USER_DESC=\\"postgres\\" \\n# Define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper.  The\\n# nss_wrapper_env.sh script (which also sets these vars) isn\'t sourced here since the nss_wrapper\\n# has not yet been setup, and we therefore don\'t yet want the nss_wrapper vars in the environment.\\nmkdir -p /tmp/nss_wrapper\\nchmod g+rwx /tmp/nss_wrapper\\n\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\n# create the nss_wrapper directory\\nmkdir -p \\"${NSS_WRAPPER_DIR}\\"\\n\\n# grab the current user ID and group ID\\nUSER_ID=$(id -u)\\nexport USER_ID\\nGROUP_ID=$(id -g)\\nexport GROUP_ID\\n\\n# get copies of the passwd and group files\\n[[ -f \\"${NSS_WRAPPER_PASSWD}\\" ]] || cp \\"/etc/passwd\\" \\"${NSS_WRAPPER_PASSWD}\\"\\n[[ -f \\"${NSS_WRAPPER_GROUP}\\" ]] || cp \\"/etc/group\\" \\"${NSS_WRAPPER_GROUP}\\"\\n\\n# if the username is missing from the passwd file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_PASSWD}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n    echo \\"nss_wrapper: adding user\\"\\n    passwd_tmp=\\"${NSS_WRAPPER_DIR}/passwd_tmp\\"\\n    cp \\"${NSS_WRAPPER_PASSWD}\\" \\"${passwd_tmp}\\"\\n    sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${passwd_tmp}\\"\\n    # needed for OCP 4.x because crio updates /etc/passwd with an entry for USER_ID\\n    sed -i \\"/${USER_ID}:x:/d\\" \\"${passwd_tmp}\\"\\n    printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${GROUP_ID}:${CRUNCHY_NSS_USER_DESC}:${HOME}:/bin/bash\\\\n\' \\u003e\\u003e \\"${passwd_tmp}\\"\\n    envsubst \\u003c \\"${passwd_tmp}\\" \\u003e \\"${NSS_WRAPPER_PASSWD}\\"\\n    rm \\"${passwd_tmp}\\"\\nelse\\n    echo \\"nss_wrapper: user exists\\"\\nfi\\n\\n# if the username (which will be the same as the group name) is missing from group file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_GROUP}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n    echo \\"nss_wrapper: adding group\\"\\n    group_tmp=\\"${NSS_WRAPPER_DIR}/group_tmp\\"\\n    cp \\"${NSS_WRAPPER_GROUP}\\" \\"${group_tmp}\\"\\n    sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${group_tmp}\\"\\n    printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${CRUNCHY_NSS_USERNAME}\\\\n\' \\u003e\\u003e \\"${group_tmp}\\"\\n    envsubst \\u003c \\"${group_tmp}\\" \\u003e \\"${NSS_WRAPPER_GROUP}\\"\\n    rm \\"${group_tmp}\\"\\nelse\\n    echo \\"nss_wrapper: group exists\\"\\nfi\\n\\n# export the nss_wrapper env vars\\n# define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\nexport LD_PRELOAD=/usr/lib64/libnss_wrapper.so\\nexport NSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_PASSWD}\\"\\nexport NSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_GROUP}\\"\\n\\necho \\"nss_wrapper: environment configured\\"\\n"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "nss-wrapper-init",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            }\n                        ],\n                        "restartPolicy": "Always",\n                        "schedulerName": "default-scheduler",\n                        "securityContext": {\n                            "fsGroup": 26,\n                            "fsGroupChangePolicy": "OnRootMismatch"\n                        },\n                        "serviceAccount": "cert-management-policy-instance",\n                        "serviceAccountName": "cert-management-policy-instance",\n                        "shareProcessNamespace": true,\n                        "terminationGracePeriodSeconds": 30,\n                        "topologySpreadConstraints": [\n                            {\n                                "labelSelector": {\n                                    "matchExpressions": [\n                                        {\n                                            "key": "postgres-operator.crunchydata.com/data",\n                                            "operator": "In",\n                                            "values": [\n                                                "postgres",\n                                                "pgbackrest"\n                                            ]\n                                        }\n                                    ],\n                                    "matchLabels": {\n                                        "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n                                    }\n                                },\n                                "maxSkew": 1,\n                                "topologyKey": "kubernetes.io/hostname",\n                                "whenUnsatisfiable": "ScheduleAnyway"\n                            },\n                            {\n                                "labelSelector": {\n                                    "matchExpressions": [\n                                        {\n                                            "key": "postgres-operator.crunchydata.com/data",\n                                            "operator": "In",\n                                            "values": [\n                                                "postgres",\n                                                "pgbackrest"\n                                            ]\n                                        }\n                                    ],\n                                    "matchLabels": {\n                                        "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n                                    }\n                                },\n                                "maxSkew": 1,\n                                "topologyKey": "topology.kubernetes.io/zone",\n                                "whenUnsatisfiable": "ScheduleAnyway"\n                            }\n                        ],\n                        "volumes": [\n                            {\n                                "name": "cert-volume",\n                                "projected": {\n                                    "defaultMode": 384,\n                                    "sources": [\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "tls.crt",\n                                                        "path": "tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "tls.key",\n                                                        "path": "tls.key"\n                                                    },\n                                                    {\n                                                        "key": "ca.crt",\n                                                        "path": "ca.crt"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-cluster-cert"\n                                            }\n                                        },\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "tls.crt",\n                                                        "path": "replication/tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "tls.key",\n                                                        "path": "replication/tls.key"\n                                                    },\n                                                    {\n                                                        "key": "ca.crt",\n                                                        "path": "replication/ca.crt"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-replication-cert"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "name": "postgres-data",\n                                "persistentVolumeClaim": {\n                                    "claimName": "cert-management-policy-instance1-wpcx-pgdata"\n                                }\n                            },\n                            {\n                                "downwardAPI": {\n                                    "defaultMode": 420,\n                                    "items": [\n                                        {\n                                            "path": "cpu_limit",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1m",\n                                                "resource": "limits.cpu"\n                                            }\n                                        },\n                                        {\n                                            "path": "cpu_request",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1m",\n                                                "resource": "requests.cpu"\n                                            }\n                                        },\n                                        {\n                                            "path": "mem_limit",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1Mi",\n                                                "resource": "limits.memory"\n                                            }\n                                        },\n                                        {\n                                            "path": "mem_request",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1Mi",\n                                                "resource": "requests.memory"\n                                            }\n                                        },\n                                        {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.labels"\n                                            },\n                                            "path": "labels"\n                                        },\n                                        {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.annotations"\n                                            },\n                                            "path": "annotations"\n                                        }\n                                    ]\n                                },\n                                "name": "database-containerinfo"\n                            },\n                            {\n                                "name": "pgbackrest-server",\n                                "projected": {\n                                    "defaultMode": 420,\n                                    "sources": [\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "pgbackrest-server.crt",\n                                                        "path": "server-tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-server.key",\n                                                        "mode": 384,\n                                                        "path": "server-tls.key"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-instance1-wpcx-certs"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "name": "pgbackrest-config",\n                                "projected": {\n                                    "defaultMode": 420,\n                                    "sources": [\n                                        {\n                                            "configMap": {\n                                                "items": [\n                                                    {\n                                                        "key": "pgbackrest_instance.conf",\n                                                        "path": "pgbackrest_instance.conf"\n                                                    },\n                                                    {\n                                                        "key": "config-hash",\n                                                        "path": "config-hash"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-server.conf",\n                                                        "path": "~postgres-operator_server.conf"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-pgbackrest-config"\n                                            }\n                                        },\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "pgbackrest.ca-roots",\n                                                        "path": "~postgres-operator/tls-ca.crt"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-client.crt",\n                                                        "path": "~postgres-operator/client-tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-client.key",\n                                                        "mode": 384,\n                                                        "path": "~postgres-operator/client-tls.key"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-pgbackrest"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "name": "patroni-config",\n                                "projected": {\n                                    "defaultMode": 420,\n                                    "sources": [\n                                        {\n                                            "configMap": {\n                                                "items": [\n                                                    {\n                                                        "key": "patroni.yaml",\n                                                        "path": "~postgres-operator_cluster.yaml"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-config"\n                                            }\n                                        },\n                                        {\n                                            "configMap": {\n                                                "items": [\n                                                    {\n                                                        "key": "patroni.yaml",\n                                                        "path": "~postgres-operator_instance.yaml"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-instance1-wpcx-config"\n                                            }\n                                        },\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "patroni.ca-roots",\n                                                        "path": "~postgres-operator/patroni.ca-roots"\n                                                    },\n                                                    {\n                                                        "key": "patroni.crt-combined",\n                                                        "path": "~postgres-operator/patroni.crt+key"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-instance1-wpcx-certs"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "emptyDir": {},\n                                "name": "crunchy-bin"\n                            },\n                            {\n                                "emptyDir": {\n                                    "sizeLimit": "2Gi"\n                                },\n                                "name": "tmp"\n                            },\n                            {\n                                "emptyDir": {\n                                    "medium": "Memory"\n                                },\n                                "name": "dshm"\n                            }\n                        ]\n                    }\n                },\n                "updateStrategy": {\n                    "type": "OnDelete"\n                }\n            },\n            "status": {\n                "availableReplicas": 1,\n                "collisionCount": 0,\n                "currentReplicas": 1,\n                "currentRevision": "cert-management-policy-instance1-wpcx-5555c7fcc4",\n                "observedGeneration": 1,\n                "readyReplicas": 1,\n                "replicas": 1,\n                "updateRevision": "cert-management-policy-instance1-wpcx-5555c7fcc4",\n                "updatedReplicas": 1\n            }\n        },\n        {\n            "apiVersion": "apps/v1",\n            "kind": "StatefulSet",\n            "metadata": {\n                "annotations": {\n                    "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n                },\n                "creationTimestamp": "2026-09-08T21:50:31Z",\n                "generation": 1,\n                "labels": {\n                    "app.kubernetes.io/component": "pg",\n                    "app.kubernetes.io/instance": "cert-management-policy",\n                    "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n                    "app.kubernetes.io/name": "percona-postgresql",\n                    "app.kubernetes.io/part-of": "percona-postgresql",\n                    "pgv2.percona.com/version": "3.1.0",\n                    "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n                    "postgres-operator.crunchydata.com/data": "postgres",\n                    "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-zltj",\n                    "postgres-operator.crunchydata.com/instance-set": "instance1"\n                },\n                "name": "cert-management-policy-instance1-zltj",\n                "namespace": "kuttl-test-superb-vulture",\n                "ownerReferences": [\n                    {\n                        "apiVersion": "upstream.pgv2.percona.com/v1beta1",\n                        "blockOwnerDeletion": true,\n                        "controller": true,\n                        "kind": "PostgresCluster",\n                        "name": "cert-management-policy",\n                        "uid": "ed2b1aa2-6e06-43f2-8628-ca6ade38534b"\n                    }\n                ],\n                "resourceVersion": "1788904344196047016",\n                "uid": "c722e148-ec7f-4871-81d7-c81c7570ce9b"\n            },\n            "spec": {\n                "persistentVolumeClaimRetentionPolicy": {\n                    "whenDeleted": "Retain",\n                    "whenScaled": "Retain"\n                },\n                "podManagementPolicy": "OrderedReady",\n                "replicas": 1,\n                "revisionHistoryLimit": 0,\n                "selector": {\n                    "matchLabels": {\n                        "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n                        "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-zltj",\n                        "postgres-operator.crunchydata.com/instance-set": "instance1"\n                    }\n                },\n                "serviceName": "cert-management-policy-pods",\n                "template": {\n                    "metadata": {\n                        "annotations": {\n                            "kubectl.kubernetes.io/default-container": "database",\n                            "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n                        },\n                        "labels": {\n                            "app.kubernetes.io/component": "pg",\n                            "app.kubernetes.io/instance": "cert-management-policy",\n                            "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n                            "app.kubernetes.io/name": "percona-postgresql",\n                            "app.kubernetes.io/part-of": "percona-postgresql",\n                            "pgv2.percona.com/version": "3.1.0",\n                            "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n                            "postgres-operator.crunchydata.com/data": "postgres",\n                            "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-zltj",\n                            "postgres-operator.crunchydata.com/instance-set": "instance1",\n                            "postgres-operator.crunchydata.com/patroni": "cert-management-policy-ha"\n                        }\n                    },\n                    "spec": {\n                        "affinity": {\n                            "podAntiAffinity": {\n                                "preferredDuringSchedulingIgnoredDuringExecution": [\n                                    {\n                                        "podAffinityTerm": {\n                                            "labelSelector": {\n                                                "matchLabels": {\n                                                    "postgres-operator.crunchydata.com/data": "postgres"\n                                                }\n                                            },\n                                            "topologyKey": "kubernetes.io/hostname"\n                                        },\n                                        "weight": 1\n                                    }\n                                ]\n                            }\n                        },\n                        "containers": [\n                            {\n                                "command": [\n                                    "/opt/crunchy/bin/postgres-entrypoint.sh",\n                                    "patroni",\n                                    "/etc/patroni"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "PGDATA",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PGHOST",\n                                        "value": "/tmp/postgres"\n                                    },\n                                    {\n                                        "name": "PGPORT",\n                                        "value": "5432"\n                                    },\n                                    {\n                                        "name": "KRB5_CONFIG",\n                                        "value": "/etc/postgres/krb5.conf"\n                                    },\n                                    {\n                                        "name": "KRB5RCACHEDIR",\n                                        "value": "/tmp"\n                                    },\n                                    {\n                                        "name": "LDAPTLS_CACERT",\n                                        "value": "/etc/postgres/ldap/ca.crt"\n                                    },\n                                    {\n                                        "name": "LC_ALL",\n                                        "value": "en_US.utf-8"\n                                    },\n                                    {\n                                        "name": "LANG",\n                                        "value": "en_US.utf-8"\n                                    },\n                                    {\n                                        "name": "PATRONI_NAME",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.name"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "PATRONI_KUBERNETES_POD_IP",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "status.podIP"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "PATRONI_KUBERNETES_PORTS",\n                                        "value": "- name: postgres\\n  port: 5432\\n  protocol: TCP\\n"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_CONNECT_ADDRESS",\n                                        "value": "$(PATRONI_NAME).cert-management-policy-pods:5432"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_LISTEN",\n                                        "value": "*:5432"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_CONFIG_DIR",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PATRONI_POSTGRESQL_DATA_DIR",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PATRONI_RESTAPI_CONNECT_ADDRESS",\n                                        "value": "$(PATRONI_NAME).cert-management-policy-pods:8008"\n                                    },\n                                    {\n                                        "name": "PATRONI_RESTAPI_LISTEN",\n                                        "value": "*:8008"\n                                    },\n                                    {\n                                        "name": "PATRONICTL_CONFIG_FILE",\n                                        "value": "/etc/patroni"\n                                    },\n                                    {\n                                        "name": "LD_PRELOAD",\n                                        "value": "/usr/lib64/libnss_wrapper.so"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_PASSWD",\n                                        "value": "/tmp/nss_wrapper/postgres/passwd"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_GROUP",\n                                        "value": "/tmp/nss_wrapper/postgres/group"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "livenessProbe": {\n                                    "exec": {\n                                        "command": [\n                                            "bash",\n                                            "-c",\n                                            "/opt/crunchy/bin/postgres-liveness-check.sh"\n                                        ]\n                                    },\n                                    "failureThreshold": 3,\n                                    "initialDelaySeconds": 3,\n                                    "periodSeconds": 10,\n                                    "successThreshold": 1,\n                                    "timeoutSeconds": 5\n                                },\n                                "name": "database",\n                                "ports": [\n                                    {\n                                        "containerPort": 5432,\n                                        "name": "postgres",\n                                        "protocol": "TCP"\n                                    }\n                                ],\n                                "readinessProbe": {\n                                    "exec": {\n                                        "command": [\n                                            "bash",\n                                            "-c",\n                                            "/opt/crunchy/bin/postgres-readiness-check.sh"\n                                        ]\n                                    },\n                                    "failureThreshold": 3,\n                                    "initialDelaySeconds": 3,\n                                    "periodSeconds": 10,\n                                    "successThreshold": 1,\n                                    "timeoutSeconds": 5\n                                },\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgconf/tls",\n                                        "name": "cert-volume",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/etc/database-containerinfo",\n                                        "name": "database-containerinfo",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/etc/pgbackrest/conf.d",\n                                        "name": "pgbackrest-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/etc/patroni",\n                                        "name": "patroni-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    },\n                                    {\n                                        "mountPath": "/dev/shm",\n                                        "name": "dshm"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-ceu",\n                                    "--",\n                                    "monitor() {\\n# Parameters for curl when managing autogrow annotation.\\nAPISERVER=\\"https://kubernetes.default.svc\\"\\nSERVICEACCOUNT=\\"/var/run/secrets/kubernetes.io/serviceaccount\\"\\nNAMESPACE=$(cat ${SERVICEACCOUNT}/namespace)\\nTOKEN=$(cat ${SERVICEACCOUNT}/token)\\nCACERT=${SERVICEACCOUNT}/ca.crt\\n\\ndeclare -r directory=\\"/pgconf/tls\\"\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nwhile read -r -t 5 -u \\"${fd}\\" ||:; do\\n  # Manage replication certificate.\\n  if [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n    install -D --mode=0600 -t \\"/tmp/replication\\" \\"${directory}\\"/{replication/tls.crt,replication/tls.key,replication/ca.crt} \\u0026\\u0026\\n    pkill -HUP --exact --parent=1 postgres\\n  then\\n    exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n    stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n  fi\\n\\ndone\\n}; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n                                    "replication-cert-copy"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "replication-cert-copy",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgconf/tls",\n                                        "name": "cert-volume",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "args": [\n                                    "fluent-bit"\n                                ],\n                                "command": [\n                                    "/opt/crunchy/logcollector/entrypoint.sh"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "PG_LOG_DIR",\n                                        "value": "/pgdata/pg18/log"\n                                    },\n                                    {\n                                        "name": "PGBACKREST_LOG_DIR",\n                                        "value": "/pgdata/pgbackrest/log"\n                                    },\n                                    {\n                                        "name": "POD_NAMESPACE",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.namespace"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "POD_NAME",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.name"\n                                            }\n                                        }\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/fluentbit:main-logcollector",\n                                "imagePullPolicy": "IfNotPresent",\n                                "name": "logs",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "runAsGroup": 26,\n                                    "runAsNonRoot": true,\n                                    "runAsUser": 26,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "args": [\n                                    "logrotate"\n                                ],\n                                "command": [\n                                    "/opt/crunchy/logcollector/entrypoint.sh"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "POD_NAMESPACE",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.namespace"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "POD_NAME",\n                                        "valueFrom": {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.name"\n                                            }\n                                        }\n                                    },\n                                    {\n                                        "name": "LOGROTATE_SCHEDULE",\n                                        "value": "0 0 * * *"\n                                    },\n                                    {\n                                        "name": "LD_PRELOAD",\n                                        "value": "/tmp/nss_wrapper/libnss_wrapper.so"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_PASSWD",\n                                        "value": "/tmp/nss_wrapper/postgres/passwd"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_GROUP",\n                                        "value": "/tmp/nss_wrapper/postgres/group"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/fluentbit:main-logcollector",\n                                "imagePullPolicy": "IfNotPresent",\n                                "name": "logrotate",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "runAsGroup": 26,\n                                    "runAsNonRoot": true,\n                                    "runAsUser": 26,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "pgbackrest",\n                                    "server"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "LD_PRELOAD",\n                                        "value": "/usr/lib64/libnss_wrapper.so"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_PASSWD",\n                                        "value": "/tmp/nss_wrapper/postgres/passwd"\n                                    },\n                                    {\n                                        "name": "NSS_WRAPPER_GROUP",\n                                        "value": "/tmp/nss_wrapper/postgres/group"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n                                "imagePullPolicy": "Always",\n                                "livenessProbe": {\n                                    "exec": {\n                                        "command": [\n                                            "pgbackrest",\n                                            "server-ping"\n                                        ]\n                                    },\n                                    "failureThreshold": 3,\n                                    "periodSeconds": 10,\n                                    "successThreshold": 1,\n                                    "timeoutSeconds": 1\n                                },\n                                "name": "pgbackrest",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/etc/pgbackrest/server",\n                                        "name": "pgbackrest-server",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/etc/pgbackrest/conf.d",\n                                        "name": "pgbackrest-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-ceu",\n                                    "--",\n                                    "monitor() {\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nuntil read -r -t 5 -u \\"${fd}\\"; do\\n  if\\n    [[ \\"${filename}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n    pkill -HUP --exact --parent=0 pgbackrest\\n  then\\n    exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n    stat --dereference --format=\'Loaded configuration dated %y\' \\"${filename}\\"\\n  elif\\n    { [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] ||\\n      [[ \\"${authority}\\" -nt \\"/proc/self/fd/${fd}\\" ]]\\n    } \\u0026\\u0026\\n    pkill -HUP --exact --parent=0 pgbackrest\\n  then\\n    exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n    stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n  fi\\ndone\\n}; export directory=\\"$1\\" authority=\\"$2\\" filename=\\"$3\\"; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n                                    "pgbackrest-config",\n                                    "/etc/pgbackrest/server",\n                                    "/etc/pgbackrest/conf.d/~postgres-operator/tls-ca.crt",\n                                    "/etc/pgbackrest/conf.d/~postgres-operator_server.conf"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n                                "imagePullPolicy": "Always",\n                                "name": "pgbackrest-config",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/etc/pgbackrest/server",\n                                        "name": "pgbackrest-server",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/etc/pgbackrest/conf.d",\n                                        "name": "pgbackrest-config",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            }\n                        ],\n                        "dnsPolicy": "ClusterFirst",\n                        "enableServiceLinks": false,\n                        "initContainers": [\n                            {\n                                "command": [\n                                    "/usr/local/bin/init-entrypoint.sh"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659",\n                                "imagePullPolicy": "Always",\n                                "name": "database-init",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/opt/crunchy",\n                                        "name": "crunchy-bin"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-ceu",\n                                    "--",\n                                    "declare -r expected_major_version=\\"$1\\" pgwal_directory=\\"$2\\" pgbrLog_directory=\\"$3\\"\\npermissions() { while [[ -n \\"$1\\" ]]; do set \\"${1%/*}\\" \\"$@\\"; done; shift; stat -Lc \'%A %4u %4g %n\' \\"$@\\"; }\\nhalt() { local rc=$?; \\u003e\\u00262 echo \\"$@\\"; exit \\"${rc/#0/1}\\"; }\\nresults() { printf \'::postgres-operator: %s::%s\\\\n\' \\"$@\\"; }\\nrecreate() (\\n  local tmp; tmp=$(mktemp -d -p \\"${1%/*}\\"); GLOBIGNORE=\'.:..\'; set -x\\n  chmod \\"$2\\" \\"${tmp}\\"; mv \\"$1\\"/* \\"${tmp}\\"; rmdir \\"$1\\"; mv \\"${tmp}\\" \\"$1\\"\\n)\\nsafelink() (\\n  local desired=\\"$1\\" name=\\"$2\\" current\\n  current=$(realpath \\"${name}\\")\\n  if [[ \\"${current}\\" == \\"${desired}\\" ]]; then return; fi\\n  set -x; mv --no-target-directory \\"${current}\\" \\"${desired}\\"\\n  ln --no-dereference --force --symbolic \\"${desired}\\" \\"${name}\\"\\n)\\necho Initializing ...\\nresults \'uid\' \\"$(id -u ||:)\\" \'gid\' \\"$(id -G ||:)\\"\\nif [[ \\"${pgwal_directory}\\" == *\\"pgwal/\\"* ]] \\u0026\\u0026 [[ ! -d \\"/pgwal/pgbackrest-spool\\" ]];then rm -rf \\"/pgdata/pgbackrest-spool\\" \\u0026\\u0026 mkdir -p \\"/pgwal/pgbackrest-spool\\" \\u0026\\u0026 ln --force --symbolic \\"/pgwal/pgbackrest-spool\\" \\"/pgdata/pgbackrest-spool\\";fi\\nif [[ ! -e \\"/pgdata/pgbackrest-spool\\" ]];then rm -rf /pgdata/pgbackrest-spool;fi\\nresults \'postgres path\' \\"$(command -v postgres ||:)\\"\\nresults \'postgres version\' \\"${postgres_version:=$(postgres --version ||:)}\\"\\n[[ \\"${postgres_version}\\" =~ \\") ${expected_major_version}\\"($|[^0-9]) ]] ||\\nhalt Expected PostgreSQL version \\"${expected_major_version}\\"\\nresults \'config directory\' \\"${PGDATA:?}\\"\\npostgres_data_directory=$([[ -d \\"${PGDATA}\\" ]] \\u0026\\u0026 postgres -C data_directory || echo \\"${PGDATA}\\")\\nresults \'data directory\' \\"${postgres_data_directory}\\"\\n[[ \\"${postgres_data_directory}\\" == \\"${PGDATA}\\" ]] ||\\nhalt Expected matching config and data directories\\nbootstrap_dir=\\"${postgres_data_directory}_bootstrap\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 results \'bootstrap directory\' \\"${bootstrap_dir}\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 postgres_data_directory=\\"${bootstrap_dir}\\"\\nif [[ ! -e \\"${postgres_data_directory}\\" || -O \\"${postgres_data_directory}\\" ]]; then\\ninstall --directory --mode=0700 \\"${postgres_data_directory}\\"\\nelif [[ -w \\"${postgres_data_directory}\\" \\u0026\\u0026 -g \\"${postgres_data_directory}\\" ]]; then\\nrecreate \\"${postgres_data_directory}\\" \'0700\'\\nelse (halt Permissions!); fi ||\\nhalt \\"$(permissions \\"${postgres_data_directory}\\" ||:)\\"\\nresults \'pgBackRest log directory\' \\"${pgbrLog_directory}\\"\\ninstall --directory --mode=0775 \\"${pgbrLog_directory}\\" ||\\nhalt \\"$(permissions \\"${pgbrLog_directory}\\" ||:)\\"\\ninstall -D --mode=0600 -t \\"/tmp/replication\\" \\"/pgconf/tls/replication\\"/{tls.crt,tls.key,ca.crt}\\n\\n[[ -f \\"${postgres_data_directory}/PG_VERSION\\" ]] || exit 0\\nresults \'data version\' \\"${postgres_data_version:=$(\\u003c \\"${postgres_data_directory}/PG_VERSION\\")}\\"\\n[[ \\"${postgres_data_version}\\" == \\"${expected_major_version}\\" ]] ||\\nhalt Expected PostgreSQL data version \\"${expected_major_version}\\"\\n[[ ! -f \\"${postgres_data_directory}/postgresql.conf\\" ]] \\u0026\\u0026\\ntouch \\"${postgres_data_directory}/postgresql.conf\\"\\nsafelink \\"${pgwal_directory}\\" \\"${postgres_data_directory}/pg_wal\\"\\nresults \'wal directory\' \\"$(realpath \\"${postgres_data_directory}/pg_wal\\" ||:)\\"\\nrm -f \\"${postgres_data_directory}/recovery.signal\\"",\n                                    "startup",\n                                    "18",\n                                    "/pgdata/pg18_wal",\n                                    "/pgdata/pgbackrest/log"\n                                ],\n                                "env": [\n                                    {\n                                        "name": "PGDATA",\n                                        "value": "/pgdata/pg18"\n                                    },\n                                    {\n                                        "name": "PGHOST",\n                                        "value": "/tmp/postgres"\n                                    },\n                                    {\n                                        "name": "PGPORT",\n                                        "value": "5432"\n                                    },\n                                    {\n                                        "name": "KRB5_CONFIG",\n                                        "value": "/etc/postgres/krb5.conf"\n                                    },\n                                    {\n                                        "name": "KRB5RCACHEDIR",\n                                        "value": "/tmp"\n                                    },\n                                    {\n                                        "name": "LDAPTLS_CACERT",\n                                        "value": "/etc/postgres/ldap/ca.crt"\n                                    },\n                                    {\n                                        "name": "LC_ALL",\n                                        "value": "en_US.utf-8"\n                                    },\n                                    {\n                                        "name": "LANG",\n                                        "value": "en_US.utf-8"\n                                    }\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "postgres-startup",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/pgconf/tls",\n                                        "name": "cert-volume",\n                                        "readOnly": true\n                                    },\n                                    {\n                                        "mountPath": "/pgdata",\n                                        "name": "postgres-data"\n                                    },\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-c",\n                                    "mkdir -p /tmp/nss_wrapper \\u0026\\u0026 { [[ -f /tmp/nss_wrapper/libnss_wrapper.so ]] || cp /usr/lib64/libnss_wrapper.so /tmp/nss_wrapper/libnss_wrapper.so; }"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "nss-wrapper-init-logcollector",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "runAsGroup": 26,\n                                    "runAsNonRoot": true,\n                                    "runAsUser": 26,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            },\n                            {\n                                "command": [\n                                    "bash",\n                                    "-c",\n                                    "export NSS_WRAPPER_SUBDIR=postgres CRUNCHY_NSS_USERNAME=postgres CRUNCHY_NSS_USER_DESC=\\"postgres\\" \\n# Define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper.  The\\n# nss_wrapper_env.sh script (which also sets these vars) isn\'t sourced here since the nss_wrapper\\n# has not yet been setup, and we therefore don\'t yet want the nss_wrapper vars in the environment.\\nmkdir -p /tmp/nss_wrapper\\nchmod g+rwx /tmp/nss_wrapper\\n\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\n# create the nss_wrapper directory\\nmkdir -p \\"${NSS_WRAPPER_DIR}\\"\\n\\n# grab the current user ID and group ID\\nUSER_ID=$(id -u)\\nexport USER_ID\\nGROUP_ID=$(id -g)\\nexport GROUP_ID\\n\\n# get copies of the passwd and group files\\n[[ -f \\"${NSS_WRAPPER_PASSWD}\\" ]] || cp \\"/etc/passwd\\" \\"${NSS_WRAPPER_PASSWD}\\"\\n[[ -f \\"${NSS_WRAPPER_GROUP}\\" ]] || cp \\"/etc/group\\" \\"${NSS_WRAPPER_GROUP}\\"\\n\\n# if the username is missing from the passwd file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_PASSWD}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n    echo \\"nss_wrapper: adding user\\"\\n    passwd_tmp=\\"${NSS_WRAPPER_DIR}/passwd_tmp\\"\\n    cp \\"${NSS_WRAPPER_PASSWD}\\" \\"${passwd_tmp}\\"\\n    sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${passwd_tmp}\\"\\n    # needed for OCP 4.x because crio updates /etc/passwd with an entry for USER_ID\\n    sed -i \\"/${USER_ID}:x:/d\\" \\"${passwd_tmp}\\"\\n    printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${GROUP_ID}:${CRUNCHY_NSS_USER_DESC}:${HOME}:/bin/bash\\\\n\' \\u003e\\u003e \\"${passwd_tmp}\\"\\n    envsubst \\u003c \\"${passwd_tmp}\\" \\u003e \\"${NSS_WRAPPER_PASSWD}\\"\\n    rm \\"${passwd_tmp}\\"\\nelse\\n    echo \\"nss_wrapper: user exists\\"\\nfi\\n\\n# if the username (which will be the same as the group name) is missing from group file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_GROUP}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n    echo \\"nss_wrapper: adding group\\"\\n    group_tmp=\\"${NSS_WRAPPER_DIR}/group_tmp\\"\\n    cp \\"${NSS_WRAPPER_GROUP}\\" \\"${group_tmp}\\"\\n    sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${group_tmp}\\"\\n    printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${CRUNCHY_NSS_USERNAME}\\\\n\' \\u003e\\u003e \\"${group_tmp}\\"\\n    envsubst \\u003c \\"${group_tmp}\\" \\u003e \\"${NSS_WRAPPER_GROUP}\\"\\n    rm \\"${group_tmp}\\"\\nelse\\n    echo \\"nss_wrapper: group exists\\"\\nfi\\n\\n# export the nss_wrapper env vars\\n# define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\nexport LD_PRELOAD=/usr/lib64/libnss_wrapper.so\\nexport NSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_PASSWD}\\"\\nexport NSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_GROUP}\\"\\n\\necho \\"nss_wrapper: environment configured\\"\\n"\n                                ],\n                                "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n                                "imagePullPolicy": "Always",\n                                "name": "nss-wrapper-init",\n                                "resources": {},\n                                "securityContext": {\n                                    "allowPrivilegeEscalation": false,\n                                    "capabilities": {\n                                        "drop": [\n                                            "ALL"\n                                        ]\n                                    },\n                                    "privileged": false,\n                                    "readOnlyRootFilesystem": true,\n                                    "runAsNonRoot": true,\n                                    "seccompProfile": {\n                                        "type": "RuntimeDefault"\n                                    }\n                                },\n                                "terminationMessagePath": "/dev/termination-log",\n                                "terminationMessagePolicy": "File",\n                                "volumeMounts": [\n                                    {\n                                        "mountPath": "/tmp",\n                                        "name": "tmp"\n                                    }\n                                ]\n                            }\n                        ],\n                        "restartPolicy": "Always",\n                        "schedulerName": "default-scheduler",\n                        "securityContext": {\n                            "fsGroup": 26,\n                            "fsGroupChangePolicy": "OnRootMismatch"\n                        },\n                        "serviceAccount": "cert-management-policy-instance",\n                        "serviceAccountName": "cert-management-policy-instance",\n                        "shareProcessNamespace": true,\n                        "terminationGracePeriodSeconds": 30,\n                        "topologySpreadConstraints": [\n                            {\n                                "labelSelector": {\n                                    "matchExpressions": [\n                                        {\n                                            "key": "postgres-operator.crunchydata.com/data",\n                                            "operator": "In",\n                                            "values": [\n                                                "postgres",\n                                                "pgbackrest"\n                                            ]\n                                        }\n                                    ],\n                                    "matchLabels": {\n                                        "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n                                    }\n                                },\n                                "maxSkew": 1,\n                                "topologyKey": "kubernetes.io/hostname",\n                                "whenUnsatisfiable": "ScheduleAnyway"\n                            },\n                            {\n                                "labelSelector": {\n                                    "matchExpressions": [\n                                        {\n                                            "key": "postgres-operator.crunchydata.com/data",\n                                            "operator": "In",\n                                            "values": [\n                                                "postgres",\n                                                "pgbackrest"\n                                            ]\n                                        }\n                                    ],\n                                    "matchLabels": {\n                                        "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n                                    }\n                                },\n                                "maxSkew": 1,\n                                "topologyKey": "topology.kubernetes.io/zone",\n                                "whenUnsatisfiable": "ScheduleAnyway"\n                            }\n                        ],\n                        "volumes": [\n                            {\n                                "name": "cert-volume",\n                                "projected": {\n                                    "defaultMode": 384,\n                                    "sources": [\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "tls.crt",\n                                                        "path": "tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "tls.key",\n                                                        "path": "tls.key"\n                                                    },\n                                                    {\n                                                        "key": "ca.crt",\n                                                        "path": "ca.crt"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-cluster-cert"\n                                            }\n                                        },\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "tls.crt",\n                                                        "path": "replication/tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "tls.key",\n                                                        "path": "replication/tls.key"\n                                                    },\n                                                    {\n                                                        "key": "ca.crt",\n                                                        "path": "replication/ca.crt"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-replication-cert"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "name": "postgres-data",\n                                "persistentVolumeClaim": {\n                                    "claimName": "cert-management-policy-instance1-zltj-pgdata"\n                                }\n                            },\n                            {\n                                "downwardAPI": {\n                                    "defaultMode": 420,\n                                    "items": [\n                                        {\n                                            "path": "cpu_limit",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1m",\n                                                "resource": "limits.cpu"\n                                            }\n                                        },\n                                        {\n                                            "path": "cpu_request",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1m",\n                                                "resource": "requests.cpu"\n                                            }\n                                        },\n                                        {\n                                            "path": "mem_limit",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1Mi",\n                                                "resource": "limits.memory"\n                                            }\n                                        },\n                                        {\n                                            "path": "mem_request",\n                                            "resourceFieldRef": {\n                                                "containerName": "database",\n                                                "divisor": "1Mi",\n                                                "resource": "requests.memory"\n                                            }\n                                        },\n                                        {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.labels"\n                                            },\n                                            "path": "labels"\n                                        },\n                                        {\n                                            "fieldRef": {\n                                                "apiVersion": "v1",\n                                                "fieldPath": "metadata.annotations"\n                                            },\n                                            "path": "annotations"\n                                        }\n                                    ]\n                                },\n                                "name": "database-containerinfo"\n                            },\n                            {\n                                "name": "pgbackrest-server",\n                                "projected": {\n                                    "defaultMode": 420,\n                                    "sources": [\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "pgbackrest-server.crt",\n                                                        "path": "server-tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-server.key",\n                                                        "mode": 384,\n                                                        "path": "server-tls.key"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-instance1-zltj-certs"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "name": "pgbackrest-config",\n                                "projected": {\n                                    "defaultMode": 420,\n                                    "sources": [\n                                        {\n                                            "configMap": {\n                                                "items": [\n                                                    {\n                                                        "key": "pgbackrest_instance.conf",\n                                                        "path": "pgbackrest_instance.conf"\n                                                    },\n                                                    {\n                                                        "key": "config-hash",\n                                                        "path": "config-hash"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-server.conf",\n                                                        "path": "~postgres-operator_server.conf"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-pgbackrest-config"\n                                            }\n                                        },\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "pgbackrest.ca-roots",\n                                                        "path": "~postgres-operator/tls-ca.crt"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-client.crt",\n                                                        "path": "~postgres-operator/client-tls.crt"\n                                                    },\n                                                    {\n                                                        "key": "pgbackrest-client.key",\n                                                        "mode": 384,\n                                                        "path": "~postgres-operator/client-tls.key"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-pgbackrest"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "name": "patroni-config",\n                                "projected": {\n                                    "defaultMode": 420,\n                                    "sources": [\n                                        {\n                                            "configMap": {\n                                                "items": [\n                                                    {\n                                                        "key": "patroni.yaml",\n                                                        "path": "~postgres-operator_cluster.yaml"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-config"\n                                            }\n                                        },\n                                        {\n                                            "configMap": {\n                                                "items": [\n                                                    {\n                                                        "key": "patroni.yaml",\n                                                        "path": "~postgres-operator_instance.yaml"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-instance1-zltj-config"\n                                            }\n                                        },\n                                        {\n                                            "secret": {\n                                                "items": [\n                                                    {\n                                                        "key": "patroni.ca-roots",\n                                                        "path": "~postgres-operator/patroni.ca-roots"\n                                                    },\n                                                    {\n                                                        "key": "patroni.crt-combined",\n                                                        "path": "~postgres-operator/patroni.crt+key"\n                                                    }\n                                                ],\n                                                "name": "cert-management-policy-instance1-zltj-certs"\n                                            }\n                                        }\n                                    ]\n                                }\n                            },\n                            {\n                                "emptyDir": {},\n                                "name": "crunchy-bin"\n                            },\n                            {\n                                "emptyDir": {\n                                    "sizeLimit": "2Gi"\n                                },\n                                "name": "tmp"\n                            },\n                            {\n                                "emptyDir": {\n                                    "medium": "Memory"\n                                },\n                                "name": "dshm"\n                            }\n                        ]\n                    }\n                },\n                "updateStrategy": {\n                    "type": "OnDelete"\n                }\n            },\n            "status": {\n                "availableReplicas": 1,\n                "collisionCount": 0,\n                "currentReplicas": 1,\n                "currentRevision": "cert-management-policy-instance1-zltj-c769f565d",\n                "observedGeneration": 1,\n                "readyReplicas": 1,\n                "replicas": 1,\n                "updateRevision": "cert-management-policy-instance1-zltj-c769f565d",\n                "updatedReplicas": 1\n            }\n        }\n    ],\n    "kind": "List",\n    "metadata": {\n        "resourceVersion": ""\n    }\n}'
    logger.go:42: 21:53:30 | cert-management-policy/11-verify-secrets-unchanged | + jq -e '.items | length == 3'
    logger.go:42: 21:53:30 | cert-management-policy/11-verify-secrets-unchanged | ++ jq -r '.items[].metadata.name'
    logger.go:42: 21:53:30 | cert-management-policy/11-verify-secrets-unchanged | ++ sort
    logger.go:42: 21:53:30 | cert-management-policy/11-verify-secrets-unchanged | + instances=$'cert-management-policy-instance1-j92z\ncert-management-policy-instance1-wpcx\ncert-management-policy-instance1-zltj'
    logger.go:42: 21:53:30 | cert-management-policy/11-verify-secrets-unchanged | + for instance in $instances
    logger.go:42: 21:53:30 | cert-management-policy/11-verify-secrets-unchanged | + assert_secret_unchanged cert-management-policy-instance1-j92z-certs
    logger.go:42: 21:53:30 | cert-management-policy/11-verify-secrets-unchanged | + local secret=cert-management-policy-instance1-j92z-certs
    logger.go:42: 21:53:30 | cert-management-policy/11-verify-secrets-unchanged | + local filter=.data
    logger.go:42: 21:53:30 | cert-management-policy/11-verify-secrets-unchanged | + local expected
    logger.go:42: 21:53:30 | cert-management-policy/11-verify-secrets-unchanged | + local actual
    logger.go:42: 21:53:30 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-instance1-j92z-certs -o 'jsonpath={.metadata.annotations.e2e\.percona\.com/secret-checksum}'
    logger.go:42: 21:53:30 | cert-management-policy/11-verify-secrets-unchanged | + expected=922bd4e8e4e6c1372d422a7b818ca5e29766441577adb7b0cf4c3b6d8171da47
    logger.go:42: 21:53:30 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-instance1-j92z-certs -o json
    logger.go:42: 21:53:30 | cert-management-policy/11-verify-secrets-unchanged | ++ jq --compact-output --sort-keys .data
    logger.go:42: 21:53:30 | cert-management-policy/11-verify-secrets-unchanged | ++ sha256sum
    logger.go:42: 21:53:30 | cert-management-policy/11-verify-secrets-unchanged | ++ awk '{print $1}'
    logger.go:42: 21:53:31 | cert-management-policy/11-verify-secrets-unchanged | + actual=922bd4e8e4e6c1372d422a7b818ca5e29766441577adb7b0cf4c3b6d8171da47
    logger.go:42: 21:53:31 | cert-management-policy/11-verify-secrets-unchanged | + [[ -z 922bd4e8e4e6c1372d422a7b818ca5e29766441577adb7b0cf4c3b6d8171da47 ]]
    logger.go:42: 21:53:31 | cert-management-policy/11-verify-secrets-unchanged | + [[ 922bd4e8e4e6c1372d422a7b818ca5e29766441577adb7b0cf4c3b6d8171da47 != 922bd4e8e4e6c1372d422a7b818ca5e29766441577adb7b0cf4c3b6d8171da47 ]]
    logger.go:42: 21:53:31 | cert-management-policy/11-verify-secrets-unchanged | + for instance in $instances
    logger.go:42: 21:53:31 | cert-management-policy/11-verify-secrets-unchanged | + assert_secret_unchanged cert-management-policy-instance1-wpcx-certs
    logger.go:42: 21:53:31 | cert-management-policy/11-verify-secrets-unchanged | + local secret=cert-management-policy-instance1-wpcx-certs
    logger.go:42: 21:53:31 | cert-management-policy/11-verify-secrets-unchanged | + local filter=.data
    logger.go:42: 21:53:31 | cert-management-policy/11-verify-secrets-unchanged | + local expected
    logger.go:42: 21:53:31 | cert-management-policy/11-verify-secrets-unchanged | + local actual
    logger.go:42: 21:53:31 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-instance1-wpcx-certs -o 'jsonpath={.metadata.annotations.e2e\.percona\.com/secret-checksum}'
    logger.go:42: 21:53:31 | cert-management-policy/11-verify-secrets-unchanged | + expected=d2356fd3095f356ca49a997a78702465c241ae61a27b9c396eac8b07778e4e83
    logger.go:42: 21:53:31 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-instance1-wpcx-certs -o json
    logger.go:42: 21:53:31 | cert-management-policy/11-verify-secrets-unchanged | ++ jq --compact-output --sort-keys .data
    logger.go:42: 21:53:31 | cert-management-policy/11-verify-secrets-unchanged | ++ sha256sum
    logger.go:42: 21:53:31 | cert-management-policy/11-verify-secrets-unchanged | ++ awk '{print $1}'
    logger.go:42: 21:53:32 | cert-management-policy/11-verify-secrets-unchanged | + actual=d2356fd3095f356ca49a997a78702465c241ae61a27b9c396eac8b07778e4e83
    logger.go:42: 21:53:32 | cert-management-policy/11-verify-secrets-unchanged | + [[ -z d2356fd3095f356ca49a997a78702465c241ae61a27b9c396eac8b07778e4e83 ]]
    logger.go:42: 21:53:32 | cert-management-policy/11-verify-secrets-unchanged | + [[ d2356fd3095f356ca49a997a78702465c241ae61a27b9c396eac8b07778e4e83 != d2356fd3095f356ca49a997a78702465c241ae61a27b9c396eac8b07778e4e83 ]]
    logger.go:42: 21:53:32 | cert-management-policy/11-verify-secrets-unchanged | + for instance in $instances
    logger.go:42: 21:53:32 | cert-management-policy/11-verify-secrets-unchanged | + assert_secret_unchanged cert-management-policy-instance1-zltj-certs
    logger.go:42: 21:53:32 | cert-management-policy/11-verify-secrets-unchanged | + local secret=cert-management-policy-instance1-zltj-certs
    logger.go:42: 21:53:32 | cert-management-policy/11-verify-secrets-unchanged | + local filter=.data
    logger.go:42: 21:53:32 | cert-management-policy/11-verify-secrets-unchanged | + local expected
    logger.go:42: 21:53:32 | cert-management-policy/11-verify-secrets-unchanged | + local actual
    logger.go:42: 21:53:32 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-instance1-zltj-certs -o 'jsonpath={.metadata.annotations.e2e\.percona\.com/secret-checksum}'
    logger.go:42: 21:53:32 | cert-management-policy/11-verify-secrets-unchanged | + expected=c3006d75d5e108f20193b51740bfb82fe4932aec5fb04ea03dabefd8e8f4a1f7
    logger.go:42: 21:53:32 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-instance1-zltj-certs -o json
    logger.go:42: 21:53:32 | cert-management-policy/11-verify-secrets-unchanged | ++ jq --compact-output --sort-keys .data
    logger.go:42: 21:53:32 | cert-management-policy/11-verify-secrets-unchanged | ++ sha256sum
    logger.go:42: 21:53:32 | cert-management-policy/11-verify-secrets-unchanged | ++ awk '{print $1}'
    logger.go:42: 21:53:33 | cert-management-policy/11-verify-secrets-unchanged | + actual=c3006d75d5e108f20193b51740bfb82fe4932aec5fb04ea03dabefd8e8f4a1f7
    logger.go:42: 21:53:33 | cert-management-policy/11-verify-secrets-unchanged | + [[ -z c3006d75d5e108f20193b51740bfb82fe4932aec5fb04ea03dabefd8e8f4a1f7 ]]
    logger.go:42: 21:53:33 | cert-management-policy/11-verify-secrets-unchanged | + [[ c3006d75d5e108f20193b51740bfb82fe4932aec5fb04ea03dabefd8e8f4a1f7 != c3006d75d5e108f20193b51740bfb82fe4932aec5fb04ea03dabefd8e8f4a1f7 ]]
    logger.go:42: 21:53:33 | cert-management-policy/11-verify-secrets-unchanged | test step completed 11-verify-secrets-unchanged
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | starting test step 12-recreate-cluster
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | running command: [sh -c set -o errexit
        set -o xtrace
        
        source ../../functions
        
        cluster="cert-management-policy"
        
        kubectl -n "$NAMESPACE" delete perconapgcluster "$cluster" --wait=true
        kubectl -n "$NAMESPACE" delete postgrescluster "$cluster" --wait=true --ignore-not-found
        kubectl -n "$NAMESPACE" delete pvc \
          -l postgres-operator.crunchydata.com/cluster="$cluster" --wait=true
        kubectl -n "$NAMESPACE" delete secret \
          -l postgres-operator.crunchydata.com/cluster="$cluster" --wait=true
        
        get_cr "$cluster" \
          | yq '.spec.tls.certManagementPolicy = "operatorProvidedOnly"' \
          | yq '.spec.tls.issuerConf = {"name":"cert-management-policy-ignored-issuer","kind":"ClusterIssuer"}' \
          | yq '.spec.proxy.pgBouncer.replicas = 1' \
          | yq '.spec.instances[].replicas = 1' \
          | kubectl -n "$NAMESPACE" apply -f -]
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | + source ../../functions
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ realpath ../../..
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | ++++ pwd
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | ++ test_name=cert-management-policy
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/vars.sh
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ export GIT_BRANCH=PR-1760
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ GIT_BRANCH=PR-1760
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ export VERSION=PR-1760-3b2c18659
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ VERSION=PR-1760-3b2c18659
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | +++ [[ -z '' ]]
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | ++++ detect_k8s_platform
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | ++++ local detected_platform
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | ++++ local xtrace_enabled=false
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | ++++ [[ -o xtrace ]]
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | ++++ xtrace_enabled=true
    logger.go:42: 21:53:33 | cert-management-policy/12-recreate-cluster | ++++ set +o xtrace
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ PLATFORM=gke
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export PLATFORM
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ ! -n '' ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ -n '' ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export PG_VER=18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ PG_VER=18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export ARCH=
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ ARCH=
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ -z '' ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++++ kubectl get nodes -o 'jsonpath={range .items[*]}{.metadata.labels.kubernetes\.io/arch}{"\n"}{end}'
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++++ sort -u
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ node_arches=amd64
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ amd64 == arm64 ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ PG_DISTRIBUTION=
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ '' == community ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export PGOV1_VER=14
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ PGOV1_VER=14
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ MINIO_VER=5.4.0
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ VAULT_VER=0.32.0
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++++ printenv
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++++ grep -E '^IMAGE'
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++++ awk -F= '{print $1}'
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ var_value=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == docker.io/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == percona/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == perconalab/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++++ eval 'echo $IMAGE_AWS_CLI'
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++++ echo docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ var_value=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ [[ docker.io/amazon/aws-cli:2.34.60 == docker.io/* ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ continue
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++++ which gdate
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++++ which date
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ date=/usr/sbin/date
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++++ which gsed
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++++ which sed
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | +++ sed=/usr/sbin/sed
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++ arch_scheduling_enabled
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | ++ [[ -n '' ]]
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | + cluster=cert-management-policy
    logger.go:42: 21:53:35 | cert-management-policy/12-recreate-cluster | + kubectl -n kuttl-test-superb-vulture delete perconapgcluster cert-management-policy --wait=true
    logger.go:42: 21:53:36 | cert-management-policy/12-recreate-cluster | perconapgcluster.pgv2.percona.com "cert-management-policy" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:53:36 | cert-management-policy/12-recreate-cluster | + kubectl -n kuttl-test-superb-vulture delete postgrescluster cert-management-policy --wait=true --ignore-not-found
    logger.go:42: 21:53:37 | cert-management-policy/12-recreate-cluster | postgrescluster.upstream.pgv2.percona.com "cert-management-policy" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:53:42 | cert-management-policy/12-recreate-cluster | + kubectl -n kuttl-test-superb-vulture delete pvc -l postgres-operator.crunchydata.com/cluster=cert-management-policy --wait=true
    logger.go:42: 21:53:43 | cert-management-policy/12-recreate-cluster | persistentvolumeclaim "cert-management-policy-instance1-j92z-pgdata" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:53:43 | cert-management-policy/12-recreate-cluster | persistentvolumeclaim "cert-management-policy-instance1-wpcx-pgdata" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:53:43 | cert-management-policy/12-recreate-cluster | persistentvolumeclaim "cert-management-policy-instance1-zltj-pgdata" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:53:43 | cert-management-policy/12-recreate-cluster | persistentvolumeclaim "cert-management-policy-repo1" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:53:44 | cert-management-policy/12-recreate-cluster | + kubectl -n kuttl-test-superb-vulture delete secret -l postgres-operator.crunchydata.com/cluster=cert-management-policy --wait=true
    logger.go:42: 21:53:45 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-cluster-ca-cert" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:53:45 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-cluster-cert" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:53:45 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-instance1-j92z-certs" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:53:45 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-instance1-wpcx-certs" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:53:45 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-instance1-zltj-certs" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:53:46 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-pgbackrest" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:53:46 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-pgbouncer" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:53:46 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-pguser-cert-management-policy" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:53:46 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-pguser-postgres" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:53:46 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-replication-cert" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + get_cr cert-management-policy
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + local cr_name=cert-management-policy
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + local repo_path=
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + local source_path=
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + local platform=gke
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + yq '.spec.tls.certManagementPolicy = "operatorProvidedOnly"'
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + local cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf/cert-management-policy.yaml
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + local platform_cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf/cert-management-policy-gke.yaml
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + local spaces_cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf/cert-management-policy-spaces.yaml
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + [[ -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf/cert-management-policy-gke.yaml ]]
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + [[ gke == doks ]]
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + crs=('/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy/cr.yaml')
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + local crs
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + [[ -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf/cert-management-policy.yaml ]]
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + yq '.spec.tls.issuerConf = {"name":"cert-management-policy-ignored-issuer","kind":"ClusterIssuer"}'
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + yq eval-all $'\n\t\tselect(fileIndex == 0) * (select(fileIndex == 1) // {}) |\n\t\t.metadata.name = "cert-management-policy" |\n\t\t.metadata.labels = {"e2e":"cert-management-policy"} |\n\t\t.spec.postgresVersion = 18 |\n\t\t.spec.users += [{"name":"postgres","password":{"type":"AlphaNumeric"}}] |\n\t\t.spec.users += [{"name":"cert-management-policy","password":{"type":"AlphaNumeric"}}] |\n\t\t.spec.image = "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" |\n\t\t.spec.initContainer.image = "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659" |\n\t\t.spec.backups.pgbackrest.image = "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" |\n\t\t.spec.proxy.pgBouncer.image = "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" |\n\t\t.spec.logcollector.image = "docker.io/perconalab/fluentbit:main-logcollector" |\n\t\t.spec.pmm.image = "docker.io/perconalab/pmm-client:3-dev-latest" |\n\t\t.spec.pmm.secret = "cert-management-policy-pmm-secret" |\n\t\t.spec.pmm.customClusterName = "cert-management-policy-pmm-custom-name" |\n\t\t.spec.pmm.postgresParams = "--environment=dev-postgres"\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy/cr.yaml
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + yq '.spec.proxy.pgBouncer.replicas = 1'
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + yq '.spec.instances[].replicas = 1'
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + kubectl -n kuttl-test-superb-vulture apply -f -
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + /usr/sbin/sed -i 's|<repo-path>||g' /tmp/kuttl/pg/cert-management-policy/cr.yaml
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + /usr/sbin/sed -i 's|<source-path>||g' /tmp/kuttl/pg/cert-management-policy/cr.yaml
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + /usr/sbin/sed -i 's|<bucket>|pg-operator-testing|g' /tmp/kuttl/pg/cert-management-policy/cr.yaml
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + /usr/sbin/sed -i 's|<image>|docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659|g' /tmp/kuttl/pg/cert-management-policy/cr.yaml
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + [[ gke == openshift ]]
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + arch_scheduling_enabled
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + [[ -n '' ]]
    logger.go:42: 21:53:47 | cert-management-policy/12-recreate-cluster | + cat /tmp/kuttl/pg/cert-management-policy/cr.yaml
    logger.go:42: 21:53:49 | cert-management-policy/12-recreate-cluster | perconapgcluster.pgv2.percona.com/cert-management-policy created
    logger.go:42: 21:53:49 | cert-management-policy/12-recreate-cluster | test step completed 12-recreate-cluster
    logger.go:42: 21:53:49 | cert-management-policy/13- | starting test step 13-
    logger.go:42: 21:54:41 | cert-management-policy/13- | test step completed 13-
    logger.go:42: 21:54:41 | cert-management-policy/14-verify-operator-provided-only | starting test step 14-verify-operator-provided-only
    logger.go:42: 21:54:41 | cert-management-policy/14-verify-operator-provided-only | running command: [sh -c set -o errexit
        set -o xtrace
        
        cluster="cert-management-policy"
        
        verify_secret_data() {
          local secret="$1"
          shift
          for key in "$@"; do
            local escaped_key="${key//./\\.}"
            local value
            value=$(kubectl -n "$NAMESPACE" get secret "$secret" \
              -o jsonpath="{.data.${escaped_key}}")
            if [[ -z "$value" ]]; then
              echo "Secret $secret is missing key: $key" >&2
              return 1
            fi
          done
        }
        
        verify_secret_data "${cluster}-cluster-ca-cert" root.crt root.key
        verify_secret_data "${cluster}-cluster-cert" tls.crt tls.key ca.crt
        verify_secret_data "${cluster}-replication-cert" tls.crt tls.key ca.crt
        verify_secret_data "${cluster}-pgbackrest" pgbackrest.ca-roots pgbackrest-client.crt pgbackrest-client.key
        verify_secret_data "${cluster}-pgbouncer" pgbouncer-frontend.ca-roots pgbouncer-frontend.crt pgbouncer-frontend.key
        
        for secret in \
          "${cluster}-cluster-ca-cert" \
          "${cluster}-cluster-cert" \
          "${cluster}-replication-cert" \
          "${cluster}-pgbackrest" \
          "${cluster}-pgbouncer"; do
          annotation=$(kubectl -n "$NAMESPACE" get secret "$secret" \
            -o jsonpath='{.metadata.annotations.cert-manager\.io/certificate-name}' 2>/dev/null || true)
          if [[ -n "$annotation" ]]; then
            echo "Secret $secret is unexpectedly managed by cert-manager" >&2
            exit 1
          fi
        done
        
        instance_sts=$(kubectl -n "$NAMESPACE" get sts \
          -l postgres-operator.crunchydata.com/cluster="$cluster",postgres-operator.crunchydata.com/instance-set=instance1 \
          -o jsonpath='{.items[*].metadata.name}')
        if [[ -z "$instance_sts" ]]; then
          echo "No PostgreSQL instance StatefulSet found for $cluster" >&2
          exit 1
        fi
        for sts_name in $instance_sts; do
          verify_secret_data "${sts_name}-certs" dns.crt dns.key patroni.ca-roots patroni.crt-combined
          annotation=$(kubectl -n "$NAMESPACE" get secret "${sts_name}-certs" \
            -o jsonpath='{.metadata.annotations.cert-manager\.io/certificate-name}' 2>/dev/null || true)
          if [[ -n "$annotation" ]]; then
            echo "Instance Secret ${sts_name}-certs is unexpectedly managed by cert-manager" >&2
            exit 1
          fi
        done
        
        certificates=$(kubectl -n "$NAMESPACE" get certificate \
          -l postgres-operator.crunchydata.com/cluster="$cluster" \
          -o name)
        if [[ -n "$certificates" ]]; then
          echo "Certificate resources were generated in operatorProvidedOnly mode: $certificates" >&2
          exit 1
        fi
        
        issuers=$(kubectl -n "$NAMESPACE" get issuer -o json \
          | jq -r '.items[].metadata.name | select(startswith("cert-management-policy-"))')
        if [[ -n "$issuers" ]]; then
          echo "Issuer resources were generated in operatorProvidedOnly mode: $issuers" >&2
          exit 1
        fi
        
        if kubectl get clusterissuer cert-management-policy-ignored-issuer >/dev/null 2>&1; then
          echo "operatorProvidedOnly created the ClusterIssuer from issuerConf" >&2
          exit 1
        fi]
    logger.go:42: 21:54:41 | cert-management-policy/14-verify-operator-provided-only | + cluster=cert-management-policy
    logger.go:42: 21:54:41 | cert-management-policy/14-verify-operator-provided-only | + verify_secret_data cert-management-policy-cluster-ca-cert root.crt root.key
    logger.go:42: 21:54:41 | cert-management-policy/14-verify-operator-provided-only | + local secret=cert-management-policy-cluster-ca-cert
    logger.go:42: 21:54:41 | cert-management-policy/14-verify-operator-provided-only | + shift
    logger.go:42: 21:54:41 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@"
    logger.go:42: 21:54:41 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=root\.crt'
    logger.go:42: 21:54:41 | cert-management-policy/14-verify-operator-provided-only | + local value
    logger.go:42: 21:54:41 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-cluster-ca-cert -o 'jsonpath={.data.root\.crt}'
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | + value=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
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | + [[ -z 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 ]]
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@"
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=root\.key'
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | + local value
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-cluster-ca-cert -o 'jsonpath={.data.root\.key}'
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | + value=LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSVBka3JoWExiWUlTcGk4SDUwMUFNUjI4Y01uZjdSUitFeHNVN0hMZ1BKK2NvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFWlFmakVqOEZId0NrOGZ0Nk16VDlKMFNzc0ZGRXJ1T2tkSEhZTklXQ3M2aTNiWGRGZ1ZacgpUMkNwc2t1ZjVkQmp3YTNVaS9YbTZGbk84TDN5RkhJMWhnPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | + [[ -z LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSVBka3JoWExiWUlTcGk4SDUwMUFNUjI4Y01uZjdSUitFeHNVN0hMZ1BKK2NvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFWlFmakVqOEZId0NrOGZ0Nk16VDlKMFNzc0ZGRXJ1T2tkSEhZTklXQ3M2aTNiWGRGZ1ZacgpUMkNwc2t1ZjVkQmp3YTNVaS9YbTZGbk84TDN5RkhJMWhnPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= ]]
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | + verify_secret_data cert-management-policy-cluster-cert tls.crt tls.key ca.crt
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | + local secret=cert-management-policy-cluster-cert
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | + shift
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@"
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=tls\.crt'
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | + local value
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-cluster-cert -o 'jsonpath={.data.tls\.crt}'
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | + value=LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURsVENDQXp1Z0F3SUJBZ0lSQU15b0ZKaXl0ckpLRW5QL2RnYXRsMmN3Q2dZSUtvWkl6ajBFQXdNd0h6RWQKTUJzR0ExVUVBeE1VY0c5emRHZHlaWE10YjNCbGNtRjBiM0l0WTJFd0hoY05Nall3T1RBNE1qQTFNelE1V2hjTgpNamN3T1RBNE1qRTFNelE1V2pCVk1WTXdVUVlEVlFRREUwcGpaWEowTFcxaGJtRm5aVzFsYm5RdGNHOXNhV041CkxYQnlhVzFoY25rdWEzVjBkR3d0ZEdWemRDMXpkWEJsY21JdGRuVnNkSFZ5WlM1emRtTXVZMngxYzNSbGNpNXMKYjJOaGJEQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJQUWlVNkZKYnZZWTZGVUM2SWZHemNTeAorUng2OHorSmJrUjlHU251eDMzVGg1MU4wUkRTaFVtUXZZZHpqSUxVcFY5MXNsZFNyNWw3RkdNNVZPckxKNjJqCmdnSWdNSUlDSERBT0JnTlZIUThCQWY4RUJBTUNCYUF3REFZRFZSMFRBUUgvQkFJd0FEQWZCZ05WSFNNRUdEQVcKZ0JUcThMQ3NjTU1lZHZMWSt2aXhRdThGVk04dUd6Q0NBZGtHQTFVZEVRU0NBZEF3Z2dITWdrcGpaWEowTFcxaApibUZuWlcxbGJuUXRjRzlzYVdONUxYQnlhVzFoY25rdWEzVjBkR3d0ZEdWemRDMXpkWEJsY21JdGRuVnNkSFZ5ClpTNXpkbU11WTJ4MWMzUmxjaTVzYjJOaGJJSThZMlZ5ZEMxdFlXNWhaMlZ0Wlc1MExYQnZiR2xqZVMxd2NtbHQKWVhKNUxtdDFkSFJzTFhSbGMzUXRjM1Z3WlhKaUxYWjFiSFIxY21VdWMzWmpnamhqWlhKMExXMWhibUZuWlcxbApiblF0Y0c5c2FXTjVMWEJ5YVcxaGNua3VhM1YwZEd3dGRHVnpkQzF6ZFhCbGNtSXRkblZzZEhWeVpZSWVZMlZ5CmRDMXRZVzVoWjJWdFpXNTBMWEJ2YkdsamVTMXdjbWx0WVhKNWdrdGpaWEowTFcxaGJtRm5aVzFsYm5RdGNHOXMKYVdONUxYSmxjR3hwWTJGekxtdDFkSFJzTFhSbGMzUXRjM1Z3WlhKaUxYWjFiSFIxY21VdWMzWmpMbU5zZFhOMApaWEl1Ykc5allXeUNQV05sY25RdGJXRnVZV2RsYldWdWRDMXdiMnhwWTNrdGNtVndiR2xqWVhNdWEzVjBkR3d0CmRHVnpkQzF6ZFhCbGNtSXRkblZzZEhWeVpTNXpkbU9DT1dObGNuUXRiV0Z1WVdkbGJXVnVkQzF3YjJ4cFkza3QKY21Wd2JHbGpZWE11YTNWMGRHd3RkR1Z6ZEMxemRYQmxjbUl0ZG5Wc2RIVnlaWUlmWTJWeWRDMXRZVzVoWjJWdApaVzUwTFhCdmJHbGplUzF5WlhCc2FXTmhjekFLQmdncWhrak9QUVFEQXdOSUFEQkZBaUVBN0tnL3N5N0NsSzBlClZkd1oybkVxOERrSjZIRnJzcy9OSjVENDk5MzNKOTRDSUJnMnpYUUZzVHplN3N0WkdrOXlGcmlDWGRKblR1VlcKSWZjU05wcThhemd3Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | + [[ -z LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURsVENDQXp1Z0F3SUJBZ0lSQU15b0ZKaXl0ckpLRW5QL2RnYXRsMmN3Q2dZSUtvWkl6ajBFQXdNd0h6RWQKTUJzR0ExVUVBeE1VY0c5emRHZHlaWE10YjNCbGNtRjBiM0l0WTJFd0hoY05Nall3T1RBNE1qQTFNelE1V2hjTgpNamN3T1RBNE1qRTFNelE1V2pCVk1WTXdVUVlEVlFRREUwcGpaWEowTFcxaGJtRm5aVzFsYm5RdGNHOXNhV041CkxYQnlhVzFoY25rdWEzVjBkR3d0ZEdWemRDMXpkWEJsY21JdGRuVnNkSFZ5WlM1emRtTXVZMngxYzNSbGNpNXMKYjJOaGJEQlpNQk1HQnlxR1NNNDlBZ0VHQ0NxR1NNNDlBd0VIQTBJQUJQUWlVNkZKYnZZWTZGVUM2SWZHemNTeAorUng2OHorSmJrUjlHU251eDMzVGg1MU4wUkRTaFVtUXZZZHpqSUxVcFY5MXNsZFNyNWw3RkdNNVZPckxKNjJqCmdnSWdNSUlDSERBT0JnTlZIUThCQWY4RUJBTUNCYUF3REFZRFZSMFRBUUgvQkFJd0FEQWZCZ05WSFNNRUdEQVcKZ0JUcThMQ3NjTU1lZHZMWSt2aXhRdThGVk04dUd6Q0NBZGtHQTFVZEVRU0NBZEF3Z2dITWdrcGpaWEowTFcxaApibUZuWlcxbGJuUXRjRzlzYVdONUxYQnlhVzFoY25rdWEzVjBkR3d0ZEdWemRDMXpkWEJsY21JdGRuVnNkSFZ5ClpTNXpkbU11WTJ4MWMzUmxjaTVzYjJOaGJJSThZMlZ5ZEMxdFlXNWhaMlZ0Wlc1MExYQnZiR2xqZVMxd2NtbHQKWVhKNUxtdDFkSFJzTFhSbGMzUXRjM1Z3WlhKaUxYWjFiSFIxY21VdWMzWmpnamhqWlhKMExXMWhibUZuWlcxbApiblF0Y0c5c2FXTjVMWEJ5YVcxaGNua3VhM1YwZEd3dGRHVnpkQzF6ZFhCbGNtSXRkblZzZEhWeVpZSWVZMlZ5CmRDMXRZVzVoWjJWdFpXNTBMWEJ2YkdsamVTMXdjbWx0WVhKNWdrdGpaWEowTFcxaGJtRm5aVzFsYm5RdGNHOXMKYVdONUxYSmxjR3hwWTJGekxtdDFkSFJzTFhSbGMzUXRjM1Z3WlhKaUxYWjFiSFIxY21VdWMzWmpMbU5zZFhOMApaWEl1Ykc5allXeUNQV05sY25RdGJXRnVZV2RsYldWdWRDMXdiMnhwWTNrdGNtVndiR2xqWVhNdWEzVjBkR3d0CmRHVnpkQzF6ZFhCbGNtSXRkblZzZEhWeVpTNXpkbU9DT1dObGNuUXRiV0Z1WVdkbGJXVnVkQzF3YjJ4cFkza3QKY21Wd2JHbGpZWE11YTNWMGRHd3RkR1Z6ZEMxemRYQmxjbUl0ZG5Wc2RIVnlaWUlmWTJWeWRDMXRZVzVoWjJWdApaVzUwTFhCdmJHbGplUzF5WlhCc2FXTmhjekFLQmdncWhrak9QUVFEQXdOSUFEQkZBaUVBN0tnL3N5N0NsSzBlClZkd1oybkVxOERrSjZIRnJzcy9OSjVENDk5MzNKOTRDSUJnMnpYUUZzVHplN3N0WkdrOXlGcmlDWGRKblR1VlcKSWZjU05wcThhemd3Ci0tLS0tRU5EIENFUlRJRklDQVRFLS0tLS0K ]]
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@"
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=tls\.key'
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | + local value
    logger.go:42: 21:54:42 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-cluster-cert -o 'jsonpath={.data.tls\.key}'
    logger.go:42: 21:54:43 | cert-management-policy/14-verify-operator-provided-only | + value=LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUEvV3RNVzNZWVE0QUo2Q3NEd0VOQTNScERreEZZZDkrWlJVSzc0N2hvR1lvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFOUNKVG9VbHU5aGpvVlFMb2g4Yk54TEg1SEhyelA0bHVSSDBaS2U3SGZkT0huVTNSRU5LRgpTWkM5aDNPTWd0U2xYM1d5VjFLdm1Yc1VZemxVNnNzbnJRPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
    logger.go:42: 21:54:43 | cert-management-policy/14-verify-operator-provided-only | + [[ -z LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUEvV3RNVzNZWVE0QUo2Q3NEd0VOQTNScERreEZZZDkrWlJVSzc0N2hvR1lvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFOUNKVG9VbHU5aGpvVlFMb2g4Yk54TEg1SEhyelA0bHVSSDBaS2U3SGZkT0huVTNSRU5LRgpTWkM5aDNPTWd0U2xYM1d5VjFLdm1Yc1VZemxVNnNzbnJRPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= ]]
    logger.go:42: 21:54:43 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@"
    logger.go:42: 21:54:43 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=ca\.crt'
    logger.go:42: 21:54:43 | cert-management-policy/14-verify-operator-provided-only | + local value
    logger.go:42: 21:54:43 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-cluster-cert -o 'jsonpath={.data.ca\.crt}'
    logger.go:42: 21:54:43 | cert-management-policy/14-verify-operator-provided-only | + value=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
    logger.go:42: 21:54:43 | cert-management-policy/14-verify-operator-provided-only | + [[ -z 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 ]]
    logger.go:42: 21:54:43 | cert-management-policy/14-verify-operator-provided-only | + verify_secret_data cert-management-policy-replication-cert tls.crt tls.key ca.crt
    logger.go:42: 21:54:43 | cert-management-policy/14-verify-operator-provided-only | + local secret=cert-management-policy-replication-cert
    logger.go:42: 21:54:43 | cert-management-policy/14-verify-operator-provided-only | + shift
    logger.go:42: 21:54:43 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@"
    logger.go:42: 21:54:43 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=tls\.crt'
    logger.go:42: 21:54:43 | cert-management-policy/14-verify-operator-provided-only | + local value
    logger.go:42: 21:54:43 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-replication-cert -o 'jsonpath={.data.tls\.crt}'
    logger.go:42: 21:54:44 | cert-management-policy/14-verify-operator-provided-only | + value=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
    logger.go:42: 21:54:44 | cert-management-policy/14-verify-operator-provided-only | + [[ -z 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 ]]
    logger.go:42: 21:54:44 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@"
    logger.go:42: 21:54:44 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=tls\.key'
    logger.go:42: 21:54:44 | cert-management-policy/14-verify-operator-provided-only | + local value
    logger.go:42: 21:54:44 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-replication-cert -o 'jsonpath={.data.tls\.key}'
    logger.go:42: 21:54:44 | cert-management-policy/14-verify-operator-provided-only | + value=LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUVsVi9QRXNFZWo1NW9UZDdnRFlSaWRnVFVYaHJPa2M3dVZjYkxZN3UwVFZvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFbVczNUJ4WXhIV2cvS2d3MlFvL1d6UDJrQU1ySnN2dDhvMlhGZ0taTk9IaGREUmtPNFhtVApBTDBGNjlEbSsxY2FnNzc5Rk1hdUV2Y3pleVp1TC8wajlBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
    logger.go:42: 21:54:44 | cert-management-policy/14-verify-operator-provided-only | + [[ -z LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUVsVi9QRXNFZWo1NW9UZDdnRFlSaWRnVFVYaHJPa2M3dVZjYkxZN3UwVFZvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFbVczNUJ4WXhIV2cvS2d3MlFvL1d6UDJrQU1ySnN2dDhvMlhGZ0taTk9IaGREUmtPNFhtVApBTDBGNjlEbSsxY2FnNzc5Rk1hdUV2Y3pleVp1TC8wajlBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= ]]
    logger.go:42: 21:54:44 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@"
    logger.go:42: 21:54:44 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=ca\.crt'
    logger.go:42: 21:54:44 | cert-management-policy/14-verify-operator-provided-only | + local value
    logger.go:42: 21:54:44 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-replication-cert -o 'jsonpath={.data.ca\.crt}'
    logger.go:42: 21:54:45 | cert-management-policy/14-verify-operator-provided-only | + value=LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJnVENDQVNpZ0F3SUJBZ0lSQUlGb3JoUkRtdFJmTjZ2SHkzamQ0b2d3Q2dZSUtvWkl6ajBFQXdNd0h6RWQKTUJzR0ExVUVBeE1VY0c5emRHZHlaWE10YjNCbGNtRjBiM0l0WTJFd0hoY05Nall3T1RBNE1qQTFNelE1V2hjTgpNell3T1RBMU1qRTFNelE1V2pBZk1SMHdHd1lEVlFRREV4UndiM04wWjNKbGN5MXZjR1Z5WVhSdmNpMWpZVEJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkdVSDR4SS9CUjhBcFBIN2VqTTAvU2RFckxCUlJLN2oKcEhSeDJEU0Znck9vdDIxM1JZRldhMDlncWJKTG4rWFFZOEd0MUl2MTV1aFp6dkM5OGhSeU5ZYWpSVEJETUE0RwpBMVVkRHdFQi93UUVBd0lCQmpBU0JnTlZIUk1CQWY4RUNEQUdBUUgvQWdFQU1CMEdBMVVkRGdRV0JCVHE4TENzCmNNTWVkdkxZK3ZpeFF1OEZWTTh1R3pBS0JnZ3Foa2pPUFFRREF3TkhBREJFQWlCQjk4ZHY1emJtc1UyZmtVdUoKWWJ1MUhiZjhBRFJJM1pqdUIvR0ZkaFliRWdJZ05zd1ZpWGk4S2JCUE0vcnlhZXkzSWxOQzJLOHFtOXdWQjlXQwpUdHd6WGhBPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==
    logger.go:42: 21:54:45 | cert-management-policy/14-verify-operator-provided-only | + [[ -z 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 ]]
    logger.go:42: 21:54:45 | cert-management-policy/14-verify-operator-provided-only | + verify_secret_data cert-management-policy-pgbackrest pgbackrest.ca-roots pgbackrest-client.crt pgbackrest-client.key
    logger.go:42: 21:54:45 | cert-management-policy/14-verify-operator-provided-only | + local secret=cert-management-policy-pgbackrest
    logger.go:42: 21:54:45 | cert-management-policy/14-verify-operator-provided-only | + shift
    logger.go:42: 21:54:45 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@"
    logger.go:42: 21:54:45 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=pgbackrest\.ca-roots'
    logger.go:42: 21:54:45 | cert-management-policy/14-verify-operator-provided-only | + local value
    logger.go:42: 21:54:45 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbackrest -o 'jsonpath={.data.pgbackrest\.ca-roots}'
    logger.go:42: 21:54:45 | cert-management-policy/14-verify-operator-provided-only | + value=LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJnVENDQVNpZ0F3SUJBZ0lSQUlGb3JoUkRtdFJmTjZ2SHkzamQ0b2d3Q2dZSUtvWkl6ajBFQXdNd0h6RWQKTUJzR0ExVUVBeE1VY0c5emRHZHlaWE10YjNCbGNtRjBiM0l0WTJFd0hoY05Nall3T1RBNE1qQTFNelE1V2hjTgpNell3T1RBMU1qRTFNelE1V2pBZk1SMHdHd1lEVlFRREV4UndiM04wWjNKbGN5MXZjR1Z5WVhSdmNpMWpZVEJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkdVSDR4SS9CUjhBcFBIN2VqTTAvU2RFckxCUlJLN2oKcEhSeDJEU0Znck9vdDIxM1JZRldhMDlncWJKTG4rWFFZOEd0MUl2MTV1aFp6dkM5OGhSeU5ZYWpSVEJETUE0RwpBMVVkRHdFQi93UUVBd0lCQmpBU0JnTlZIUk1CQWY4RUNEQUdBUUgvQWdFQU1CMEdBMVVkRGdRV0JCVHE4TENzCmNNTWVkdkxZK3ZpeFF1OEZWTTh1R3pBS0JnZ3Foa2pPUFFRREF3TkhBREJFQWlCQjk4ZHY1emJtc1UyZmtVdUoKWWJ1MUhiZjhBRFJJM1pqdUIvR0ZkaFliRWdJZ05zd1ZpWGk4S2JCUE0vcnlhZXkzSWxOQzJLOHFtOXdWQjlXQwpUdHd6WGhBPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg==
    logger.go:42: 21:54:45 | cert-management-policy/14-verify-operator-provided-only | + [[ -z LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJnVENDQVNpZ0F3SUJBZ0lSQUlGb3JoUkRtdFJmTjZ2SHkzamQ0b2d3Q2dZSUtvWkl6ajBFQXdNd0h6RWQKTUJzR0ExVUVBeE1VY0c5emRHZHlaWE10YjNCbGNtRjBiM0l0WTJFd0hoY05Nall3T1RBNE1qQTFNelE1V2hjTgpNell3T1RBMU1qRTFNelE1V2pBZk1SMHdHd1lEVlFRREV4UndiM04wWjNKbGN5MXZjR1Z5WVhSdmNpMWpZVEJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkdVSDR4SS9CUjhBcFBIN2VqTTAvU2RFckxCUlJLN2oKcEhSeDJEU0Znck9vdDIxM1JZRldhMDlncWJKTG4rWFFZOEd0MUl2MTV1aFp6dkM5OGhSeU5ZYWpSVEJETUE0RwpBMVVkRHdFQi93UUVBd0lCQmpBU0JnTlZIUk1CQWY4RUNEQUdBUUgvQWdFQU1CMEdBMVVkRGdRV0JCVHE4TENzCmNNTWVkdkxZK3ZpeFF1OEZWTTh1R3pBS0JnZ3Foa2pPUFFRREF3TkhBREJFQWlCQjk4ZHY1emJtc1UyZmtVdUoKWWJ1MUhiZjhBRFJJM1pqdUIvR0ZkaFliRWdJZ05zd1ZpWGk4S2JCUE0vcnlhZXkzSWxOQzJLOHFtOXdWQjlXQwpUdHd6WGhBPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== ]]
    logger.go:42: 21:54:45 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@"
    logger.go:42: 21:54:45 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=pgbackrest-client\.crt'
    logger.go:42: 21:54:45 | cert-management-policy/14-verify-operator-provided-only | + local value
    logger.go:42: 21:54:45 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbackrest -o 'jsonpath={.data.pgbackrest-client\.crt}'
    logger.go:42: 21:54:46 | cert-management-policy/14-verify-operator-provided-only | + value=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
    logger.go:42: 21:54:46 | cert-management-policy/14-verify-operator-provided-only | + [[ -z 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 ]]
    logger.go:42: 21:54:46 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@"
    logger.go:42: 21:54:46 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=pgbackrest-client\.key'
    logger.go:42: 21:54:46 | cert-management-policy/14-verify-operator-provided-only | + local value
    logger.go:42: 21:54:46 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbackrest -o 'jsonpath={.data.pgbackrest-client\.key}'
    logger.go:42: 21:54:46 | cert-management-policy/14-verify-operator-provided-only | + value=LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUJCS1BwSnIvVENWaGpyVFhvTWVQRE8reEwza2h6MFZOazIvOFNwT2l1dXRvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFSXZoMDhGbnJhM01XMEVuNXZ2bVJwL1p1TXpZR1paUEdhaWJrYk1xQitIL21QK0NYZk5mZwoxRmx1ZkFhaXQ1NnJOTjZzZHdlNzErTnBrazNDQWhlQVZ3PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
    logger.go:42: 21:54:46 | cert-management-policy/14-verify-operator-provided-only | + [[ -z LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUJCS1BwSnIvVENWaGpyVFhvTWVQRE8reEwza2h6MFZOazIvOFNwT2l1dXRvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFSXZoMDhGbnJhM01XMEVuNXZ2bVJwL1p1TXpZR1paUEdhaWJrYk1xQitIL21QK0NYZk5mZwoxRmx1ZkFhaXQ1NnJOTjZzZHdlNzErTnBrazNDQWhlQVZ3PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= ]]
    logger.go:42: 21:54:46 | cert-management-policy/14-verify-operator-provided-only | + verify_secret_data cert-management-policy-pgbouncer pgbouncer-frontend.ca-roots pgbouncer-frontend.crt pgbouncer-frontend.key
    logger.go:42: 21:54:46 | cert-management-policy/14-verify-operator-provided-only | + local secret=cert-management-policy-pgbouncer
    logger.go:42: 21:54:46 | cert-management-policy/14-verify-operator-provided-only | + shift
    logger.go:42: 21:54:46 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@"
    logger.go:42: 21:54:46 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=pgbouncer-frontend\.ca-roots'
    logger.go:42: 21:54:46 | cert-management-policy/14-verify-operator-provided-only | + local value
    logger.go:42: 21:54:46 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o 'jsonpath={.data.pgbouncer-frontend\.ca-roots}'
    logger.go:42: 21:54:47 | cert-management-policy/14-verify-operator-provided-only | + value=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
    logger.go:42: 21:54:47 | cert-management-policy/14-verify-operator-provided-only | + [[ -z LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJnVENDQVNpZ0F3SUJBZ0lSQUlGb3JoUkRtdFJmTjZ2SHkzamQ0b2d3Q2dZSUtvWkl6ajBFQXdNd0h6RWQKTUJzR0ExVUVBeE1VY0c5emRHZHlaWE10YjNCbGNtRjBiM0l0WTJFd0hoY05Nall3T1RBNE1qQTFNelE1V2hjTgpNell3T1RBMU1qRTFNelE1V2pBZk1SMHdHd1lEVlFRREV4UndiM04wWjNKbGN5MXZjR1Z5WVhSdmNpMWpZVEJaCk1CTUdCeXFHU000OUFnRUdDQ3FHU000OUF3RUhBMElBQkdVSDR4SS9CUjhBcFBIN2VqTTAvU2RFckxCUlJLN2oKcEhSeDJEU0Znck9vdDIxM1JZRldhMDlncWJKTG4rWFFZOEd0MUl2MTV1aFp6dkM5OGhSeU5ZYWpSVEJETUE0RwpBMVVkRHdFQi93UUVBd0lCQmpBU0JnTlZIUk1CQWY4RUNEQUdBUUgvQWdFQU1CMEdBMVVkRGdRV0JCVHE4TENzCmNNTWVkdkxZK3ZpeFF1OEZWTTh1R3pBS0JnZ3Foa2pPUFFRREF3TkhBREJFQWlCQjk4ZHY1emJtc1UyZmtVdUoKWWJ1MUhiZjhBRFJJM1pqdUIvR0ZkaFliRWdJZ05zd1ZpWGk4S2JCUE0vcnlhZXkzSWxOQzJLOHFtOXdWQjlXQwpUdHd6WGhBPQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== ]]
    logger.go:42: 21:54:47 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@"
    logger.go:42: 21:54:47 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=pgbouncer-frontend\.crt'
    logger.go:42: 21:54:47 | cert-management-policy/14-verify-operator-provided-only | + local value
    logger.go:42: 21:54:47 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o 'jsonpath={.data.pgbouncer-frontend\.crt}'
    logger.go:42: 21:54:47 | cert-management-policy/14-verify-operator-provided-only | + value=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
    logger.go:42: 21:54:47 | cert-management-policy/14-verify-operator-provided-only | + [[ -z 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 ]]
    logger.go:42: 21:54:47 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@"
    logger.go:42: 21:54:47 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=pgbouncer-frontend\.key'
    logger.go:42: 21:54:47 | cert-management-policy/14-verify-operator-provided-only | + local value
    logger.go:42: 21:54:47 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o 'jsonpath={.data.pgbouncer-frontend\.key}'
    logger.go:42: 21:54:47 | cert-management-policy/14-verify-operator-provided-only | + value=LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUtreVg3WTFGbjJxZWZRUTh0bXpYb0NUcmo5dGhQZTJkTCtVUnFpM1ZqeUxvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFR2VoeVErQ0t5ZnMwWmZMdFhQVjQzcEdRZDVXZUUzWlduK1Y2a0NCeWQzU0xSQ3BOcml0Nwp6b0xsSTVTTUV4aS9scUZFek8rdW80NHR0aUV2dHFVYjV3PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
    logger.go:42: 21:54:47 | cert-management-policy/14-verify-operator-provided-only | + [[ -z LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUtreVg3WTFGbjJxZWZRUTh0bXpYb0NUcmo5dGhQZTJkTCtVUnFpM1ZqeUxvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFR2VoeVErQ0t5ZnMwWmZMdFhQVjQzcEdRZDVXZUUzWlduK1Y2a0NCeWQzU0xSQ3BOcml0Nwp6b0xsSTVTTUV4aS9scUZFek8rdW80NHR0aUV2dHFVYjV3PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= ]]
    logger.go:42: 21:54:47 | cert-management-policy/14-verify-operator-provided-only | + for secret in "${cluster}-cluster-ca-cert" "${cluster}-cluster-cert" "${cluster}-replication-cert" "${cluster}-pgbackrest" "${cluster}-pgbouncer"
    logger.go:42: 21:54:47 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-cluster-ca-cert -o 'jsonpath={.metadata.annotations.cert-manager\.io/certificate-name}'
    logger.go:42: 21:54:48 | cert-management-policy/14-verify-operator-provided-only | + annotation=
    logger.go:42: 21:54:48 | cert-management-policy/14-verify-operator-provided-only | + [[ -n '' ]]
    logger.go:42: 21:54:48 | cert-management-policy/14-verify-operator-provided-only | + for secret in "${cluster}-cluster-ca-cert" "${cluster}-cluster-cert" "${cluster}-replication-cert" "${cluster}-pgbackrest" "${cluster}-pgbouncer"
    logger.go:42: 21:54:48 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-cluster-cert -o 'jsonpath={.metadata.annotations.cert-manager\.io/certificate-name}'
    logger.go:42: 21:54:48 | cert-management-policy/14-verify-operator-provided-only | + annotation=
    logger.go:42: 21:54:48 | cert-management-policy/14-verify-operator-provided-only | + [[ -n '' ]]
    logger.go:42: 21:54:48 | cert-management-policy/14-verify-operator-provided-only | + for secret in "${cluster}-cluster-ca-cert" "${cluster}-cluster-cert" "${cluster}-replication-cert" "${cluster}-pgbackrest" "${cluster}-pgbouncer"
    logger.go:42: 21:54:48 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-replication-cert -o 'jsonpath={.metadata.annotations.cert-manager\.io/certificate-name}'
    logger.go:42: 21:54:49 | cert-management-policy/14-verify-operator-provided-only | + annotation=
    logger.go:42: 21:54:49 | cert-management-policy/14-verify-operator-provided-only | + [[ -n '' ]]
    logger.go:42: 21:54:49 | cert-management-policy/14-verify-operator-provided-only | + for secret in "${cluster}-cluster-ca-cert" "${cluster}-cluster-cert" "${cluster}-replication-cert" "${cluster}-pgbackrest" "${cluster}-pgbouncer"
    logger.go:42: 21:54:49 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbackrest -o 'jsonpath={.metadata.annotations.cert-manager\.io/certificate-name}'
    logger.go:42: 21:54:49 | cert-management-policy/14-verify-operator-provided-only | + annotation=
    logger.go:42: 21:54:49 | cert-management-policy/14-verify-operator-provided-only | + [[ -n '' ]]
    logger.go:42: 21:54:49 | cert-management-policy/14-verify-operator-provided-only | + for secret in "${cluster}-cluster-ca-cert" "${cluster}-cluster-cert" "${cluster}-replication-cert" "${cluster}-pgbackrest" "${cluster}-pgbouncer"
    logger.go:42: 21:54:49 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-pgbouncer -o 'jsonpath={.metadata.annotations.cert-manager\.io/certificate-name}'
    logger.go:42: 21:54:50 | cert-management-policy/14-verify-operator-provided-only | + annotation=
    logger.go:42: 21:54:50 | cert-management-policy/14-verify-operator-provided-only | + [[ -n '' ]]
    logger.go:42: 21:54:50 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get sts -l postgres-operator.crunchydata.com/cluster=cert-management-policy,postgres-operator.crunchydata.com/instance-set=instance1 -o 'jsonpath={.items[*].metadata.name}'
    logger.go:42: 21:54:50 | cert-management-policy/14-verify-operator-provided-only | + instance_sts=cert-management-policy-instance1-7g4g
    logger.go:42: 21:54:50 | cert-management-policy/14-verify-operator-provided-only | + [[ -z cert-management-policy-instance1-7g4g ]]
    logger.go:42: 21:54:50 | cert-management-policy/14-verify-operator-provided-only | + for sts_name in $instance_sts
    logger.go:42: 21:54:50 | cert-management-policy/14-verify-operator-provided-only | + verify_secret_data cert-management-policy-instance1-7g4g-certs dns.crt dns.key patroni.ca-roots patroni.crt-combined
    logger.go:42: 21:54:50 | cert-management-policy/14-verify-operator-provided-only | + local secret=cert-management-policy-instance1-7g4g-certs
    logger.go:42: 21:54:50 | cert-management-policy/14-verify-operator-provided-only | + shift
    logger.go:42: 21:54:50 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@"
    logger.go:42: 21:54:50 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=dns\.crt'
    logger.go:42: 21:54:50 | cert-management-policy/14-verify-operator-provided-only | + local value
    logger.go:42: 21:54:50 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-instance1-7g4g-certs -o 'jsonpath={.data.dns\.crt}'
    logger.go:42: 21:54:51 | cert-management-policy/14-verify-operator-provided-only | + value=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
    logger.go:42: 21:54:51 | cert-management-policy/14-verify-operator-provided-only | + [[ -z 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 ]]
    logger.go:42: 21:54:51 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@"
    logger.go:42: 21:54:51 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=dns\.key'
    logger.go:42: 21:54:51 | cert-management-policy/14-verify-operator-provided-only | + local value
    logger.go:42: 21:54:51 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-instance1-7g4g-certs -o 'jsonpath={.data.dns\.key}'
    logger.go:42: 21:54:51 | cert-management-policy/14-verify-operator-provided-only | + value=LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUJBRDA2bVM3ZDhjUGE4d1gxZDBoSnNxYVQvQ1JwSnRPb2xpTGdhM1VJT3dvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFNE9hbWFnQlk3dEhpNWdxOW1vcmVmeCtqSmsyeE1oQmJjZkVuUnl3T1Q2WFFwRmRTZlJEagpVSkhEcERZQS9zeE5pcEFuWC82V2lWb1RpYmI0S0dOdW93PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo=
    logger.go:42: 21:54:51 | cert-management-policy/14-verify-operator-provided-only | + [[ -z LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUJBRDA2bVM3ZDhjUGE4d1gxZDBoSnNxYVQvQ1JwSnRPb2xpTGdhM1VJT3dvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFNE9hbWFnQlk3dEhpNWdxOW1vcmVmeCtqSmsyeE1oQmJjZkVuUnl3T1Q2WFFwRmRTZlJEagpVSkhEcERZQS9zeE5pcEFuWC82V2lWb1RpYmI0S0dOdW93PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= ]]
    logger.go:42: 21:54:51 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@"
    logger.go:42: 21:54:51 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=patroni\.ca-roots'
    logger.go:42: 21:54:51 | cert-management-policy/14-verify-operator-provided-only | + local value
    logger.go:42: 21:54:51 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-instance1-7g4g-certs -o 'jsonpath={.data.patroni\.ca-roots}'
    logger.go:42: 21:54:52 | cert-management-policy/14-verify-operator-provided-only | + value=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
    logger.go:42: 21:54:52 | cert-management-policy/14-verify-operator-provided-only | + [[ -z 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 ]]
    logger.go:42: 21:54:52 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@"
    logger.go:42: 21:54:52 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=patroni\.crt-combined'
    logger.go:42: 21:54:52 | cert-management-policy/14-verify-operator-provided-only | + local value
    logger.go:42: 21:54:52 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-instance1-7g4g-certs -o 'jsonpath={.data.patroni\.crt-combined}'
    logger.go:42: 21:54:52 | cert-management-policy/14-verify-operator-provided-only | + value=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
    logger.go:42: 21:54:52 | cert-management-policy/14-verify-operator-provided-only | + [[ -z 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 ]]
    logger.go:42: 21:54:52 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get secret cert-management-policy-instance1-7g4g-certs -o 'jsonpath={.metadata.annotations.cert-manager\.io/certificate-name}'
    logger.go:42: 21:54:53 | cert-management-policy/14-verify-operator-provided-only | + annotation=
    logger.go:42: 21:54:53 | cert-management-policy/14-verify-operator-provided-only | + [[ -n '' ]]
    logger.go:42: 21:54:53 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get certificate -l postgres-operator.crunchydata.com/cluster=cert-management-policy -o name
    logger.go:42: 21:54:53 | cert-management-policy/14-verify-operator-provided-only | + certificates=
    logger.go:42: 21:54:53 | cert-management-policy/14-verify-operator-provided-only | + [[ -n '' ]]
    logger.go:42: 21:54:53 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-superb-vulture get issuer -o json
    logger.go:42: 21:54:53 | cert-management-policy/14-verify-operator-provided-only | ++ jq -r '.items[].metadata.name | select(startswith("cert-management-policy-"))'
    logger.go:42: 21:54:54 | cert-management-policy/14-verify-operator-provided-only | + issuers=
    logger.go:42: 21:54:54 | cert-management-policy/14-verify-operator-provided-only | + [[ -n '' ]]
    logger.go:42: 21:54:54 | cert-management-policy/14-verify-operator-provided-only | + kubectl get clusterissuer cert-management-policy-ignored-issuer
    logger.go:42: 21:54:54 | cert-management-policy/14-verify-operator-provided-only | test step completed 14-verify-operator-provided-only
    logger.go:42: 21:54:54 | cert-management-policy/99-remove-cluster-gracefully | starting test step 99-remove-cluster-gracefully
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | running command: [sh -c set -o errexit
        set -o xtrace
        
        source ../../functions
        
        cluster="cert-management-policy"
        
        remove_all_finalizers
        kubectl -n "$NAMESPACE" delete pvc -l postgres-operator.crunchydata.com/cluster="$cluster" || true
        kubectl -n "$NAMESPACE" delete secret -l postgres-operator.crunchydata.com/cluster="$cluster" || true
        kubectl -n "$NAMESPACE" delete secret \
          "${cluster}-cluster-ca-cert" \
          "${cluster}-cluster-cert" \
          "${cluster}-replication-cert" \
          --ignore-not-found || true
        check_operator_panic
        destroy_operator
        destroy_cert_manager]
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | + source ../../functions
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ realpath ../../..
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | ++++ pwd
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | ++ test_name=cert-management-policy
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/vars.sh
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/deploy
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/conf
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/e2e-tests/tests/cert-management-policy/conf
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ export GIT_BRANCH=PR-1760
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ GIT_BRANCH=PR-1760
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ export VERSION=PR-1760-3b2c18659
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ VERSION=PR-1760-3b2c18659
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ -z '' ]]
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | ++++ detect_k8s_platform
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | ++++ local detected_platform
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | ++++ local xtrace_enabled=false
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | ++++ [[ -o xtrace ]]
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | ++++ xtrace_enabled=true
    logger.go:42: 21:55:00 | cert-management-policy/99-remove-cluster-gracefully | ++++ set +o xtrace
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ PLATFORM=gke
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export PLATFORM
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ ! -n '' ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ -n '' ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export PG_VER=18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ PG_VER=18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export ARCH=
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ ARCH=
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ -z '' ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++++ kubectl get nodes -o 'jsonpath={range .items[*]}{.metadata.labels.kubernetes\.io/arch}{"\n"}{end}'
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++++ sort -u
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ node_arches=amd64
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ amd64 == arm64 ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ PG_DISTRIBUTION=
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ '' == community ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export PGOV1_VER=14
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ PGOV1_VER=14
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ MINIO_VER=5.4.0
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ VAULT_VER=0.32.0
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_AWS_CLI=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++++ printenv
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++++ grep -E '^IMAGE'
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++++ awk -F= '{print $1}'
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++++ echo perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ var_value=perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == docker.io/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == percona/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:PR-1760-3b2c18659 == perconalab/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++++ eval 'echo $IMAGE_AWS_CLI'
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++++ echo docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ var_value=docker.io/amazon/aws-cli:2.34.60
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ docker.io/amazon/aws-cli:2.34.60 == docker.io/* ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ continue
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++++ which gdate
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++++ which date
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ date=/usr/sbin/date
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++++ which gsed
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1760/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++++ which sed
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | +++ sed=/usr/sbin/sed
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++ arch_scheduling_enabled
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | ++ [[ -n '' ]]
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | + cluster=cert-management-policy
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | + remove_all_finalizers
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | + resource_types=("pg-restore" "pg-backup" "pg")
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | + for resource in "${resource_types[@]}"
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | + echo 'removing all finalizers for pg-restore resources'
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | removing all finalizers for pg-restore resources
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | + kubectl -n kuttl-test-superb-vulture get pg-restore -o json
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | + jq '.items[] | .metadata.name' -r
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | + IFS=
    logger.go:42: 21:55:02 | cert-management-policy/99-remove-cluster-gracefully | + read -r name
    logger.go:42: 21:55:03 | cert-management-policy/99-remove-cluster-gracefully | + for resource in "${resource_types[@]}"
    logger.go:42: 21:55:03 | cert-management-policy/99-remove-cluster-gracefully | + echo 'removing all finalizers for pg-backup resources'
    logger.go:42: 21:55:03 | cert-management-policy/99-remove-cluster-gracefully | removing all finalizers for pg-backup resources
    logger.go:42: 21:55:03 | cert-management-policy/99-remove-cluster-gracefully | + kubectl -n kuttl-test-superb-vulture get pg-backup -o json
    logger.go:42: 21:55:03 | cert-management-policy/99-remove-cluster-gracefully | + jq '.items[] | .metadata.name' -r
    logger.go:42: 21:55:03 | cert-management-policy/99-remove-cluster-gracefully | + IFS=
    logger.go:42: 21:55:03 | cert-management-policy/99-remove-cluster-gracefully | + read -r name
    logger.go:42: 21:55:03 | cert-management-policy/99-remove-cluster-gracefully | ++ kubectl -n kuttl-test-superb-vulture get pg-backup cert-management-policy-backup-j4dr-bzw67 -o yaml
    logger.go:42: 21:55:03 | cert-management-policy/99-remove-cluster-gracefully | ++ yq '.metadata.finalizers | length'
    logger.go:42: 21:55:04 | cert-management-policy/99-remove-cluster-gracefully | + [[ 0 == 0 ]]
    logger.go:42: 21:55:04 | cert-management-policy/99-remove-cluster-gracefully | + continue
    logger.go:42: 21:55:04 | cert-management-policy/99-remove-cluster-gracefully | + IFS=
    logger.go:42: 21:55:04 | cert-management-policy/99-remove-cluster-gracefully | + read -r name
    logger.go:42: 21:55:04 | cert-management-policy/99-remove-cluster-gracefully | + for resource in "${resource_types[@]}"
    logger.go:42: 21:55:04 | cert-management-policy/99-remove-cluster-gracefully | + echo 'removing all finalizers for pg resources'
    logger.go:42: 21:55:04 | cert-management-policy/99-remove-cluster-gracefully | removing all finalizers for pg resources
    logger.go:42: 21:55:04 | cert-management-policy/99-remove-cluster-gracefully | + kubectl -n kuttl-test-superb-vulture get pg -o json
    logger.go:42: 21:55:04 | cert-management-policy/99-remove-cluster-gracefully | + jq '.items[] | .metadata.name' -r
    logger.go:42: 21:55:04 | cert-management-policy/99-remove-cluster-gracefully | + IFS=
    logger.go:42: 21:55:04 | cert-management-policy/99-remove-cluster-gracefully | + read -r name
    logger.go:42: 21:55:04 | cert-management-policy/99-remove-cluster-gracefully | + kubectl -n kuttl-test-superb-vulture delete pvc -l postgres-operator.crunchydata.com/cluster=cert-management-policy
    logger.go:42: 21:55:05 | cert-management-policy/99-remove-cluster-gracefully | persistentvolumeclaim "cert-management-policy-instance1-7g4g-pgdata" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:55:05 | cert-management-policy/99-remove-cluster-gracefully | persistentvolumeclaim "cert-management-policy-repo1" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:55:05 | cert-management-policy/99-remove-cluster-gracefully | + kubectl -n kuttl-test-superb-vulture delete secret -l postgres-operator.crunchydata.com/cluster=cert-management-policy
    logger.go:42: 21:55:06 | cert-management-policy/99-remove-cluster-gracefully | secret "cert-management-policy-cluster-cert" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:55:06 | cert-management-policy/99-remove-cluster-gracefully | secret "cert-management-policy-instance1-7g4g-certs" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:55:06 | cert-management-policy/99-remove-cluster-gracefully | secret "cert-management-policy-pgbackrest" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:55:06 | cert-management-policy/99-remove-cluster-gracefully | secret "cert-management-policy-pgbouncer" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:55:06 | cert-management-policy/99-remove-cluster-gracefully | secret "cert-management-policy-pguser-cert-management-policy" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:55:06 | cert-management-policy/99-remove-cluster-gracefully | secret "cert-management-policy-pguser-postgres" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:55:07 | cert-management-policy/99-remove-cluster-gracefully | secret "cert-management-policy-replication-cert" deleted from kuttl-test-superb-vulture namespace
    logger.go:42: 21:55:08 | cert-management-policy/99-remove-cluster-gracefully | + kubectl -n kuttl-test-superb-vulture delete secret cert-management-policy-cluster-ca-cert cert-management-policy-cluster-cert cert-management-policy-replication-cert --ignore-not-found
    logger.go:42: 21:55:09 | cert-management-policy/99-remove-cluster-gracefully | + check_operator_panic
    logger.go:42: 21:55:09 | cert-management-policy/99-remove-cluster-gracefully | ++ get_operator_pod
    logger.go:42: 21:55:09 | cert-management-policy/99-remove-cluster-gracefully | +++ kubectl get pods -n pg-operator --selector=app.kubernetes.io/name=percona-postgresql-operator -o 'jsonpath={.items[].metadata.name}'
    logger.go:42: 21:55:09 | cert-management-policy/99-remove-cluster-gracefully | ++ echo percona-postgresql-operator-79457cc8d6-sgwrw
    logger.go:42: 21:55:09 | cert-management-policy/99-remove-cluster-gracefully | + local operator_pod=percona-postgresql-operator-79457cc8d6-sgwrw
    logger.go:42: 21:55:09 | cert-management-policy/99-remove-cluster-gracefully | + local panic_log
    logger.go:42: 21:55:09 | cert-management-policy/99-remove-cluster-gracefully | ++ kubectl logs -n pg-operator percona-postgresql-operator-79457cc8d6-sgwrw -c operator
    logger.go:42: 21:55:09 | cert-management-policy/99-remove-cluster-gracefully | ++ grep -A 100 'Observed a panic'
    logger.go:42: 21:55:10 | cert-management-policy/99-remove-cluster-gracefully | ++ true
    logger.go:42: 21:55:10 | cert-management-policy/99-remove-cluster-gracefully | + panic_log=
    logger.go:42: 21:55:10 | cert-management-policy/99-remove-cluster-gracefully | + '[' -n '' ']'
    logger.go:42: 21:55:10 | cert-management-policy/99-remove-cluster-gracefully | + destroy_operator
    logger.go:42: 21:55:10 | cert-management-policy/99-remove-cluster-gracefully | + kubectl -n pg-operator delete deployment percona-postgresql-operator --force --grace-period=0
    logger.go:42: 21:55:10 | cert-management-policy/99-remove-cluster-gracefully | Warning: Immediate deletion does not wait for confirmation that the running resource has been terminated. The resource may continue to run on the cluster indefinitely.
    logger.go:42: 21:55:11 | cert-management-policy/99-remove-cluster-gracefully | deployment.apps "percona-postgresql-operator" force deleted from pg-operator namespace
    logger.go:42: 21:55:11 | cert-management-policy/99-remove-cluster-gracefully | + [[ -n pg-operator ]]
    logger.go:42: 21:55:11 | cert-management-policy/99-remove-cluster-gracefully | + kubectl delete namespace pg-operator --force --grace-period=0 --ignore-not-found
    logger.go:42: 21:55:11 | cert-management-policy/99-remove-cluster-gracefully | Warning: Immediate deletion does not wait for confirmation that the running resource has been terminated. The resource may continue to run on the cluster indefinitely.
    logger.go:42: 21:55:11 | cert-management-policy/99-remove-cluster-gracefully | namespace "pg-operator" force deleted
    logger.go:42: 21:55:23 | cert-management-policy/99-remove-cluster-gracefully | + destroy_cert_manager
    logger.go:42: 21:55:23 | cert-management-policy/99-remove-cluster-gracefully | + [[ gke == rancher ]]
    logger.go:42: 21:55:23 | cert-management-policy/99-remove-cluster-gracefully | + helm uninstall cert-manager -n cert-manager
    logger.go:42: 21:55:27 | cert-management-policy/99-remove-cluster-gracefully | + kubectl get crd -o name
    logger.go:42: 21:55:27 | cert-management-policy/99-remove-cluster-gracefully | + grep cert-manager.io
    logger.go:42: 21:55:27 | cert-management-policy/99-remove-cluster-gracefully | + xargs -r kubectl delete
    logger.go:42: 21:55:30 | cert-management-policy/99-remove-cluster-gracefully | customresourcedefinition.apiextensions.k8s.io "certificaterequests.cert-manager.io" deleted
    logger.go:42: 21:55:30 | cert-management-policy/99-remove-cluster-gracefully | customresourcedefinition.apiextensions.k8s.io "certificates.cert-manager.io" deleted
    logger.go:42: 21:55:30 | cert-management-policy/99-remove-cluster-gracefully | customresourcedefinition.apiextensions.k8s.io "challenges.acme.cert-manager.io" deleted
    logger.go:42: 21:55:30 | cert-management-policy/99-remove-cluster-gracefully | customresourcedefinition.apiextensions.k8s.io "clusterissuers.cert-manager.io" deleted
    logger.go:42: 21:55:31 | cert-management-policy/99-remove-cluster-gracefully | customresourcedefinition.apiextensions.k8s.io "issuers.cert-manager.io" deleted
    logger.go:42: 21:55:31 | cert-management-policy/99-remove-cluster-gracefully | customresourcedefinition.apiextensions.k8s.io "orders.acme.cert-manager.io" deleted
    logger.go:42: 21:55:32 | cert-management-policy/99-remove-cluster-gracefully | + kubectl get mutatingwebhookconfiguration -o name
    logger.go:42: 21:55:32 | cert-management-policy/99-remove-cluster-gracefully | + grep cert-manager
    logger.go:42: 21:55:32 | cert-management-policy/99-remove-cluster-gracefully | + xargs kubectl delete
    logger.go:42: 21:55:33 | cert-management-policy/99-remove-cluster-gracefully | + :
    logger.go:42: 21:55:33 | cert-management-policy/99-remove-cluster-gracefully | + kubectl get validatingwebhookconfiguration -o name
    logger.go:42: 21:55:33 | cert-management-policy/99-remove-cluster-gracefully | + grep cert-manager
    logger.go:42: 21:55:33 | cert-management-policy/99-remove-cluster-gracefully | + xargs kubectl delete
    logger.go:42: 21:55:33 | cert-management-policy/99-remove-cluster-gracefully | + :
    logger.go:42: 21:55:33 | cert-management-policy/99-remove-cluster-gracefully | + kubectl get clusterrole,clusterrolebinding -o name
    logger.go:42: 21:55:33 | cert-management-policy/99-remove-cluster-gracefully | + grep cert-manager
    logger.go:42: 21:55:33 | cert-management-policy/99-remove-cluster-gracefully | + xargs -r kubectl delete
    logger.go:42: 21:55:34 | cert-management-policy/99-remove-cluster-gracefully | + kubectl delete namespace cert-manager --grace-period=0 --force=true --ignore-not-found
    logger.go:42: 21:55:46 | cert-management-policy/99-remove-cluster-gracefully | test step completed 99-remove-cluster-gracefully
    logger.go:42: 21:55:46 | cert-management-policy | cert-management-policy events from ns kuttl-test-superb-vulture:
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:31 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-instance1-j92z-pgdata		WaitForFirstConsumer	waiting for first consumer to be created before binding	persistentvolume-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:31 +0000 UTC	Normal	StatefulSet.apps cert-management-policy-instance1-j92z		SuccessfulCreate	create Pod cert-management-policy-instance1-j92z-0 in StatefulSet cert-management-policy-instance1-j92z successful	statefulset-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:31 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-instance1-wpcx-pgdata		WaitForFirstConsumer	waiting for first consumer to be created before binding	persistentvolume-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:31 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-instance1-wpcx-pgdata		ExternalProvisioning	Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered.	persistentvolume-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:31 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-instance1-wpcx-pgdata		Provisioning	External provisioner is provisioning volume for claim "kuttl-test-superb-vulture/cert-management-policy-instance1-wpcx-pgdata"	pd.csi.storage.gke.io_gke-7c953be5c2f24d67bdc8-e5c8-f5b7-vm_dec0e66c-b3c5-437d-ab86-acea6948598c	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:31 +0000 UTC	Normal	StatefulSet.apps cert-management-policy-instance1-wpcx		SuccessfulCreate	create Pod cert-management-policy-instance1-wpcx-0 in StatefulSet cert-management-policy-instance1-wpcx successful	statefulset-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:31 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-instance1-zltj-pgdata		WaitForFirstConsumer	waiting for first consumer to be created before binding	persistentvolume-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:31 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-instance1-zltj-pgdata		ExternalProvisioning	Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered.	persistentvolume-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:31 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-instance1-zltj-pgdata		Provisioning	External provisioner is provisioning volume for claim "kuttl-test-superb-vulture/cert-management-policy-instance1-zltj-pgdata"	pd.csi.storage.gke.io_gke-7c953be5c2f24d67bdc8-e5c8-f5b7-vm_dec0e66c-b3c5-437d-ab86-acea6948598c	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:31 +0000 UTC	Normal	StatefulSet.apps cert-management-policy-instance1-zltj		SuccessfulCreate	create Pod cert-management-policy-instance1-zltj-0 in StatefulSet cert-management-policy-instance1-zltj successful	statefulset-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:32 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-instance1-j92z-pgdata		ExternalProvisioning	Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered.	persistentvolume-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:32 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-instance1-j92z-pgdata		Provisioning	External provisioner is provisioning volume for claim "kuttl-test-superb-vulture/cert-management-policy-instance1-j92z-pgdata"	pd.csi.storage.gke.io_gke-7c953be5c2f24d67bdc8-e5c8-f5b7-vm_dec0e66c-b3c5-437d-ab86-acea6948598c	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:32 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-instance1-zltj-pgdata		ProvisioningSucceeded	Successfully provisioned volume pvc-811aa55e-cd3f-4b66-866c-ccb61dbda8be	pd.csi.storage.gke.io_gke-7c953be5c2f24d67bdc8-e5c8-f5b7-vm_dec0e66c-b3c5-437d-ab86-acea6948598c	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:32 +0000 UTC	Normal	StatefulSet.apps cert-management-policy-repo-host		SuccessfulCreate	create Pod cert-management-policy-repo-host-0 in StatefulSet cert-management-policy-repo-host successful	statefulset-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:32 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-repo1		WaitForFirstConsumer	waiting for first consumer to be created before binding	persistentvolume-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:32 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-repo1		ExternalProvisioning	Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered.	persistentvolume-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:32 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-repo1		Provisioning	External provisioner is provisioning volume for claim "kuttl-test-superb-vulture/cert-management-policy-repo1"	pd.csi.storage.gke.io_gke-7c953be5c2f24d67bdc8-e5c8-f5b7-vm_dec0e66c-b3c5-437d-ab86-acea6948598c	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:32 +0000 UTC	Normal	PostgresCluster.upstream.pgv2.percona.com cert-management-policy		RepoHostCreated	created pgBackRest repository host StatefulSet/cert-management-policy-repo-host	postgrescluster-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:33 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-instance1-wpcx-pgdata		ProvisioningSucceeded	Successfully provisioned volume pvc-a2d37892-b7be-4191-88d4-0dfdb29d2a13	pd.csi.storage.gke.io_gke-7c953be5c2f24d67bdc8-e5c8-f5b7-vm_dec0e66c-b3c5-437d-ab86-acea6948598c	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:33 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0		Scheduled	Successfully assigned kuttl-test-superb-vulture/cert-management-policy-instance1-zltj-0 to gke-jen-pg-1760-3b2c1865-default-pool-f0b97dda-tf53	default-scheduler	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:33 +0000 UTC	Warning	Pod cert-management-policy-instance1-zltj-0		FailedMount	MountVolume.SetUp failed for volume "pgbackrest-server" : secret "cert-management-policy-instance1-zltj-certs" not found	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:33 +0000 UTC	Warning	Pod cert-management-policy-instance1-zltj-0		FailedMount	MountVolume.SetUp failed for volume "pgbackrest-config" : configmap "cert-management-policy-pgbackrest-config" not found	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:33 +0000 UTC	Warning	Pod cert-management-policy-instance1-zltj-0		FailedMount	MountVolume.SetUp failed for volume "patroni-config" : secret "cert-management-policy-instance1-zltj-certs" not found	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:34 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-instance1-j92z-pgdata		ProvisioningSucceeded	Successfully provisioned volume pvc-d067aea1-496d-4d2e-adab-2656a5e48adb	pd.csi.storage.gke.io_gke-7c953be5c2f24d67bdc8-e5c8-f5b7-vm_dec0e66c-b3c5-437d-ab86-acea6948598c	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:34 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0		Scheduled	Successfully assigned kuttl-test-superb-vulture/cert-management-policy-instance1-wpcx-0 to gke-jen-pg-1760-3b2c1865-default-pool-f0b97dda-tf53	default-scheduler	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:34 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0		Scheduled	Successfully assigned kuttl-test-superb-vulture/cert-management-policy-repo-host-0 to gke-jen-pg-1760-3b2c1865-default-pool-f0b97dda-tf53	default-scheduler	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:34 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-repo1		ProvisioningSucceeded	Successfully provisioned volume pvc-9570f1e5-7b86-418b-ab9d-6c3a5b6a478d	pd.csi.storage.gke.io_gke-7c953be5c2f24d67bdc8-e5c8-f5b7-vm_dec0e66c-b3c5-437d-ab86-acea6948598c	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:35 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0		Scheduled	Successfully assigned kuttl-test-superb-vulture/cert-management-policy-instance1-j92z-0 to gke-jen-pg-1760-3b2c1865-default-pool-f0b97dda-tf53	default-scheduler	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:35 +0000 UTC	Warning	Pod cert-management-policy-instance1-j92z-0		FailedMount	MountVolume.SetUp failed for volume "patroni-config" : secret "cert-management-policy-instance1-j92z-certs" not found	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:35 +0000 UTC	Warning	Pod cert-management-policy-instance1-j92z-0		FailedMount	MountVolume.SetUp failed for volume "pgbackrest-config" : configmap "cert-management-policy-pgbackrest-config" not found	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:35 +0000 UTC	Warning	Pod cert-management-policy-instance1-j92z-0		FailedMount	MountVolume.SetUp failed for volume "pgbackrest-server" : secret "cert-management-policy-instance1-j92z-certs" not found	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:35 +0000 UTC	Warning	Pod cert-management-policy-instance1-wpcx-0		FailedMount	MountVolume.SetUp failed for volume "patroni-config" : secret "cert-management-policy-instance1-wpcx-certs" not found	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:35 +0000 UTC	Warning	Pod cert-management-policy-instance1-wpcx-0		FailedMount	MountVolume.SetUp failed for volume "pgbackrest-config" : configmap "cert-management-policy-pgbackrest-config" not found	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:35 +0000 UTC	Warning	Pod cert-management-policy-instance1-wpcx-0		FailedMount	MountVolume.SetUp failed for volume "pgbackrest-server" : secret "cert-management-policy-instance1-wpcx-certs" not found	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:35 +0000 UTC	Warning	Pod cert-management-policy-repo-host-0		FailedMount	MountVolume.SetUp failed for volume "pgbackrest-config" : configmap "cert-management-policy-pgbackrest-config" not found	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:39 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0		SuccessfulAttachVolume	AttachVolume.Attach succeeded for volume "pvc-811aa55e-cd3f-4b66-866c-ccb61dbda8be" 	attachdetach-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:49 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0		SuccessfulAttachVolume	AttachVolume.Attach succeeded for volume "pvc-d067aea1-496d-4d2e-adab-2656a5e48adb" 	attachdetach-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:49 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0		SuccessfulAttachVolume	AttachVolume.Attach succeeded for volume "pvc-9570f1e5-7b86-418b-ab9d-6c3a5b6a478d" 	attachdetach-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:50:51 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0		SuccessfulAttachVolume	AttachVolume.Attach succeeded for volume "pvc-a2d37892-b7be-4191-88d4-0dfdb29d2a13" 	attachdetach-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:02 +0000 UTC	Normal	Deployment.apps cert-management-policy-pgbouncer		ScalingReplicaSet	Scaled up replica set cert-management-policy-pgbouncer-56896f784f from 0 to 1	deployment-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:03 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-hphtt		Scheduled	Successfully assigned kuttl-test-superb-vulture/cert-management-policy-pgbouncer-56896f784f-hphtt to gke-jen-pg-1760-3b2c1865-default-pool-f0b97dda-tf53	default-scheduler	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:03 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-hphtt.spec.initContainers{pgbouncer-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:03 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-hphtt.spec.initContainers{pgbouncer-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659" in 138ms (138ms including waiting). Image size: 91385588 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:03 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-hphtt.spec.initContainers{pgbouncer-init}		Created	Created container: pgbouncer-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:03 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-hphtt.spec.initContainers{pgbouncer-init}		Started	Started container pgbouncer-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:03 +0000 UTC	Normal	ReplicaSet.apps cert-management-policy-pgbouncer-56896f784f		SuccessfulCreate	Created pod: cert-management-policy-pgbouncer-56896f784f-hphtt	replicaset-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:05 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.initContainers{database-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:05 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-hphtt.spec.containers{pgbouncer}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:06 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.initContainers{database-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659" in 131ms (131ms including waiting). Image size: 91385588 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:06 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.initContainers{database-init}		Created	Created container: database-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:06 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.initContainers{database-init}		Started	Started container database-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:07 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.initContainers{database-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:07 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.initContainers{database-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:07 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.initContainers{postgres-startup}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:07 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.initContainers{pgbackrest-log-dir}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:11 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.initContainers{database-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659" in 129ms (4.478s including waiting). Image size: 91385588 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:11 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.initContainers{database-init}		Created	Created container: database-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:11 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.initContainers{database-init}		Started	Started container database-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:11 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-hphtt.spec.containers{pgbouncer}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 6.481s (6.481s including waiting). Image size: 84619748 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:11 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-hphtt.spec.containers{pgbouncer}		Created	Created container: pgbouncer	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:11 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-hphtt.spec.containers{pgbouncer}		Started	Started container pgbouncer	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:11 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-hphtt.spec.containers{pgbouncer-config}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:16 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.initContainers{postgres-startup}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:17 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.initContainers{database-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659" in 124ms (10.346s including waiting). Image size: 91385588 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:17 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.initContainers{database-init}		Created	Created container: database-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:17 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-hphtt.spec.containers{pgbouncer-config}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 115ms (6.162s including waiting). Image size: 84619748 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:17 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.initContainers{pgbackrest-log-dir}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 5.988s (10.384s including waiting). Image size: 122700307 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:17 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.initContainers{pgbackrest-log-dir}		Created	Created container: pgbackrest-log-dir	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:17 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.initContainers{pgbackrest-log-dir}		Started	Started container pgbackrest-log-dir	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:18 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.initContainers{database-init}		Started	Started container database-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:18 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-hphtt.spec.containers{pgbouncer-config}		Created	Created container: pgbouncer-config	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:18 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-hphtt.spec.containers{pgbouncer-config}		Started	Started container pgbouncer-config	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:24 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.initContainers{postgres-startup}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:24 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.initContainers{nss-wrapper-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:27 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.initContainers{postgres-startup}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 280ms (2.803s including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:27 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.initContainers{postgres-startup}		Created	Created container: postgres-startup	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:27 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.initContainers{postgres-startup}		Started	Started container postgres-startup	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:27 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.initContainers{postgres-startup}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 9.296s (11.068s including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:27 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.initContainers{postgres-startup}		Created	Created container: postgres-startup	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:27 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.initContainers{postgres-startup}		Started	Started container postgres-startup	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:27 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.initContainers{postgres-startup}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 20.11s (20.11s including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:27 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.initContainers{postgres-startup}		Created	Created container: postgres-startup	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:27 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.initContainers{postgres-startup}		Started	Started container postgres-startup	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:27 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.initContainers{nss-wrapper-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 183ms (2.703s including waiting). Image size: 122700307 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:27 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.initContainers{nss-wrapper-init}		Created	Created container: nss-wrapper-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:27 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.initContainers{nss-wrapper-init}		Started	Started container nss-wrapper-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:29 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:29 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:29 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:29 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:29 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 166ms (166ms including waiting). Image size: 122700307 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:30 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 243ms (405ms including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:30 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.initContainers{nss-wrapper-init-logcollector}		Created	Created container: nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:30 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.initContainers{nss-wrapper-init-logcollector}		Started	Started container nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:30 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.initContainers{nss-wrapper-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:30 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 255ms (457ms including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:30 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.initContainers{nss-wrapper-init-logcollector}		Created	Created container: nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:30 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.initContainers{nss-wrapper-init-logcollector}		Started	Started container nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:30 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.initContainers{nss-wrapper-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:30 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 214ms (214ms including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:30 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.initContainers{nss-wrapper-init-logcollector}		Created	Created container: nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:30 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.initContainers{nss-wrapper-init-logcollector}		Started	Started container nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:30 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.initContainers{nss-wrapper-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:30 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest}		Created	Created container: pgbackrest	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:30 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest}		Started	Started container pgbackrest	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:30 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:30 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 120ms (120ms including waiting). Image size: 122700307 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:30 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config}		Created	Created container: pgbackrest-config	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:30 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config}		Started	Started container pgbackrest-config	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:31 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.initContainers{nss-wrapper-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 161ms (161ms including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:31 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.initContainers{nss-wrapper-init}		Created	Created container: nss-wrapper-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:31 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.initContainers{nss-wrapper-init}		Started	Started container nss-wrapper-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:31 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.containers{database}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:31 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.initContainers{nss-wrapper-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 150ms (301ms including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:31 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.initContainers{nss-wrapper-init}		Created	Created container: nss-wrapper-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:31 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.initContainers{nss-wrapper-init}		Started	Started container nss-wrapper-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:31 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.containers{database}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:31 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.initContainers{nss-wrapper-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 168ms (168ms including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:31 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.initContainers{nss-wrapper-init}		Created	Created container: nss-wrapper-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:31 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.initContainers{nss-wrapper-init}		Started	Started container nss-wrapper-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:31 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.containers{database}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.containers{database}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 201ms (201ms including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.containers{database}		Created	Created container: database	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.containers{database}		Started	Started container database	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.containers{replication-cert-copy}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.containers{replication-cert-copy}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 221ms (221ms including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.containers{replication-cert-copy}		Created	Created container: replication-cert-copy	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.containers{replication-cert-copy}		Started	Started container replication-cert-copy	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-j92z-0.spec.containers{logs}		Pulling	Pulling image "docker.io/perconalab/fluentbit:main-logcollector"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.containers{database}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 189ms (189ms including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.containers{database}		Created	Created container: database	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.containers{database}		Started	Started container database	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.containers{replication-cert-copy}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.containers{replication-cert-copy}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 267ms (267ms including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.containers{replication-cert-copy}		Created	Created container: replication-cert-copy	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.containers{database}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 145ms (324ms including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.containers{database}		Created	Created container: database	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.containers{database}		Started	Started container database	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.containers{replication-cert-copy}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.containers{replication-cert-copy}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 273ms (315ms including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:32 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.containers{replication-cert-copy}		Created	Created container: replication-cert-copy	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:33 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.containers{replication-cert-copy}		Started	Started container replication-cert-copy	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:33 +0000 UTC	Normal	Pod cert-management-policy-instance1-wpcx-0.spec.containers{logs}		Pulling	Pulling image "docker.io/perconalab/fluentbit:main-logcollector"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:33 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.containers{replication-cert-copy}		Started	Started container replication-cert-copy	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:33 +0000 UTC	Normal	Pod cert-management-policy-instance1-zltj-0.spec.containers{logs}		Pulling	Pulling image "docker.io/perconalab/fluentbit:main-logcollector"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:42 +0000 UTC	Warning	Pod cert-management-policy-instance1-j92z-0.spec.containers{database}		Unhealthy	Readiness probe failed: 	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:51:43 +0000 UTC	Warning	Pod cert-management-policy-instance1-zltj-0.spec.containers{database}		Unhealthy	Readiness probe failed: 	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:06 +0000 UTC	Warning	PostgresCluster.upstream.pgv2.percona.com cert-management-policy		UnableToCreateStanzas	repo1-path = /pgbackrest/repo1
        2026-09-08 21:52:06.205 P00  ERROR: [049]: unable to get address for 'cert-management-policy-repo-host-0.cert-management-policy-pods.kuttl-test-superb-vulture.svc.cluster.local': [-2] Name or service not known
        2026-09-08 21:52:06.420 P00  ERROR: [049]: unable to get address for 'cert-management-policy-repo-host-0.cert-management-policy-pods.kuttl-test-superb-vulture.svc.cluster.local': [-2] Name or service not known
         : command terminated with exit code 49	postgrescluster-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:08 +0000 UTC	Normal	PostgresCluster.upstream.pgv2.percona.com cert-management-policy		StanzasCreated	pgBackRest stanza creation completed successfully	postgrescluster-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:09 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-pzwrf		Scheduled	Successfully assigned kuttl-test-superb-vulture/cert-management-policy-backup-j4dr-pzwrf to gke-jen-pg-1760-3b2c1865-default-pool-f0b97dda-cd0w	default-scheduler	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:09 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-pzwrf.spec.initContainers{pgbackrest-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:09 +0000 UTC	Normal	Job.batch cert-management-policy-backup-j4dr		SuccessfulCreate	Created pod: cert-management-policy-backup-j4dr-pzwrf	job-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:13 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-pzwrf.spec.initContainers{pgbackrest-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659" in 4.052s (4.149s including waiting). Image size: 91385588 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:14 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-pzwrf.spec.initContainers{pgbackrest-init}		Created	Created container: pgbackrest-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:14 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-pzwrf.spec.initContainers{pgbackrest-init}		Started	Started container pgbackrest-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:17 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-pzwrf.spec.containers{pgbackrest}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:24 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-pzwrf.spec.containers{pgbackrest}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 6.086s (6.086s including waiting). Image size: 122700307 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:24 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-pzwrf.spec.containers{pgbackrest}		Created	Created container: pgbackrest	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:24 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-pzwrf.spec.containers{pgbackrest}		Started	Started container pgbackrest	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:34 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-4r8qw		Scheduled	Successfully assigned kuttl-test-superb-vulture/cert-management-policy-backup-j4dr-4r8qw to gke-jen-pg-1760-3b2c1865-default-pool-f0b97dda-cd0w	default-scheduler	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:34 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-4r8qw.spec.initContainers{pgbackrest-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:34 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-4r8qw.spec.initContainers{pgbackrest-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659" in 207ms (207ms including waiting). Image size: 91385588 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:34 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-4r8qw.spec.initContainers{pgbackrest-init}		Created	Created container: pgbackrest-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:34 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-4r8qw.spec.initContainers{pgbackrest-init}		Started	Started container pgbackrest-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:34 +0000 UTC	Normal	Job.batch cert-management-policy-backup-j4dr		SuccessfulCreate	Created pod: cert-management-policy-backup-j4dr-4r8qw	job-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:36 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-4r8qw.spec.containers{pgbackrest}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:36 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-4r8qw.spec.containers{pgbackrest}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 111ms (111ms including waiting). Image size: 122700307 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:36 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-4r8qw.spec.containers{pgbackrest}		Created	Created container: pgbackrest	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:36 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-4r8qw.spec.containers{pgbackrest}		Started	Started container pgbackrest	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:56 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-bv868		Scheduled	Successfully assigned kuttl-test-superb-vulture/cert-management-policy-backup-j4dr-bv868 to gke-jen-pg-1760-3b2c1865-default-pool-f0b97dda-cd0w	default-scheduler	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:56 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-bv868.spec.initContainers{pgbackrest-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:56 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-bv868.spec.initContainers{pgbackrest-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659" in 131ms (131ms including waiting). Image size: 91385588 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:56 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-bv868.spec.initContainers{pgbackrest-init}		Created	Created container: pgbackrest-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:56 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-bv868.spec.initContainers{pgbackrest-init}		Started	Started container pgbackrest-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:56 +0000 UTC	Normal	Job.batch cert-management-policy-backup-j4dr		SuccessfulCreate	Created pod: cert-management-policy-backup-j4dr-bv868	job-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:58 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-bv868.spec.containers{pgbackrest}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:58 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-bv868.spec.containers{pgbackrest}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 98ms (98ms including waiting). Image size: 122700307 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:58 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-bv868.spec.containers{pgbackrest}		Created	Created container: pgbackrest	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:52:58 +0000 UTC	Normal	Pod cert-management-policy-backup-j4dr-bv868.spec.containers{pgbackrest}		Started	Started container pgbackrest	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:11 +0000 UTC	Normal	Job.batch cert-management-policy-backup-j4dr		Completed	Job completed	job-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:36 +0000 UTC	Normal	StatefulSet.apps cert-management-policy-instance1-j92z		SuccessfulDelete	delete Pod cert-management-policy-instance1-j92z-0 in StatefulSet cert-management-policy-instance1-j92z successful	statefulset-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:36 +0000 UTC	Normal	StatefulSet.apps cert-management-policy-instance1-zltj		SuccessfulDelete	delete Pod cert-management-policy-instance1-zltj-0 in StatefulSet cert-management-policy-instance1-zltj successful	statefulset-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:39 +0000 UTC	Normal	StatefulSet.apps cert-management-policy-instance1-wpcx		SuccessfulDelete	delete Pod cert-management-policy-instance1-wpcx-0 in StatefulSet cert-management-policy-instance1-wpcx successful	statefulset-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:42 +0000 UTC	Normal	PodDisruptionBudget.policy cert-management-policy-set-instance1		NoPods	No matching pods found	controllermanager	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:43 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-hphtt.spec.containers{pgbouncer}		Killing	Stopping container pgbouncer	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:43 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-hphtt.spec.containers{pgbouncer-config}		Killing	Stopping container pgbouncer-config	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:43 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest}		Killing	Stopping container pgbackrest	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:43 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config}		Killing	Stopping container pgbackrest-config	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:50 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-instance1-7g4g-pgdata		WaitForFirstConsumer	waiting for first consumer to be created before binding	persistentvolume-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:50 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-instance1-7g4g-pgdata		ExternalProvisioning	Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered.	persistentvolume-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:50 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-instance1-7g4g-pgdata		Provisioning	External provisioner is provisioning volume for claim "kuttl-test-superb-vulture/cert-management-policy-instance1-7g4g-pgdata"	pd.csi.storage.gke.io_gke-7c953be5c2f24d67bdc8-e5c8-f5b7-vm_dec0e66c-b3c5-437d-ab86-acea6948598c	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:50 +0000 UTC	Normal	StatefulSet.apps cert-management-policy-instance1-7g4g		SuccessfulCreate	create Pod cert-management-policy-instance1-7g4g-0 in StatefulSet cert-management-policy-instance1-7g4g successful	statefulset-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:50 +0000 UTC	Normal	PostgresCluster.upstream.pgv2.percona.com cert-management-policy		RepoHostCreated	created pgBackRest repository host StatefulSet/cert-management-policy-repo-host	postgrescluster-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:51 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-instance1-7g4g-pgdata		ProvisioningSucceeded	Successfully provisioned volume pvc-25a1b8be-e688-4419-a006-420216468bc2	pd.csi.storage.gke.io_gke-7c953be5c2f24d67bdc8-e5c8-f5b7-vm_dec0e66c-b3c5-437d-ab86-acea6948598c	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:51 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-445tf		Scheduled	Successfully assigned kuttl-test-superb-vulture/cert-management-policy-pgbouncer-56896f784f-445tf to gke-jen-pg-1760-3b2c1865-default-pool-f0b97dda-fp3f	default-scheduler	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:51 +0000 UTC	Normal	ReplicaSet.apps cert-management-policy-pgbouncer-56896f784f		SuccessfulCreate	Created pod: cert-management-policy-pgbouncer-56896f784f-445tf	replicaset-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:51 +0000 UTC	Normal	Deployment.apps cert-management-policy-pgbouncer		ScalingReplicaSet	Scaled up replica set cert-management-policy-pgbouncer-56896f784f from 0 to 1	deployment-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:51 +0000 UTC	Normal	StatefulSet.apps cert-management-policy-repo-host		SuccessfulCreate	create Pod cert-management-policy-repo-host-0 in StatefulSet cert-management-policy-repo-host successful	statefulset-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:51 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-repo1		WaitForFirstConsumer	waiting for first consumer to be created before binding	persistentvolume-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:51 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-repo1		ExternalProvisioning	Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered.	persistentvolume-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:51 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-repo1		Provisioning	External provisioner is provisioning volume for claim "kuttl-test-superb-vulture/cert-management-policy-repo1"	pd.csi.storage.gke.io_gke-7c953be5c2f24d67bdc8-e5c8-f5b7-vm_dec0e66c-b3c5-437d-ab86-acea6948598c	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:52 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0		Scheduled	Successfully assigned kuttl-test-superb-vulture/cert-management-policy-instance1-7g4g-0 to gke-jen-pg-1760-3b2c1865-default-pool-f0b97dda-cd0w	default-scheduler	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:52 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-445tf.spec.initContainers{pgbouncer-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:52 +0000 UTC	Normal	PersistentVolumeClaim cert-management-policy-repo1		ProvisioningSucceeded	Successfully provisioned volume pvc-5eeef404-40b8-40de-b54d-1dbf2039ab5f	pd.csi.storage.gke.io_gke-7c953be5c2f24d67bdc8-e5c8-f5b7-vm_dec0e66c-b3c5-437d-ab86-acea6948598c	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:53 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0		Scheduled	Successfully assigned kuttl-test-superb-vulture/cert-management-policy-repo-host-0 to gke-jen-pg-1760-3b2c1865-default-pool-f0b97dda-fp3f	default-scheduler	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:56 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-445tf.spec.initContainers{pgbouncer-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659" in 4.975s (4.975s including waiting). Image size: 91385588 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:57 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0		SuccessfulAttachVolume	AttachVolume.Attach succeeded for volume "pvc-25a1b8be-e688-4419-a006-420216468bc2" 	attachdetach-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:57 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-445tf.spec.initContainers{pgbouncer-init}		Created	Created container: pgbouncer-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:57 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-445tf.spec.initContainers{pgbouncer-init}		Started	Started container pgbouncer-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:58 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0		SuccessfulAttachVolume	AttachVolume.Attach succeeded for volume "pvc-5eeef404-40b8-40de-b54d-1dbf2039ab5f" 	attachdetach-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:53:59 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-445tf.spec.containers{pgbouncer}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:00 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.initContainers{database-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:00 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.initContainers{database-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1760-3b2c18659" in 137ms (137ms including waiting). Image size: 91385588 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:00 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.initContainers{database-init}		Created	Created container: database-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:00 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.initContainers{pgbackrest-log-dir}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:01 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.initContainers{database-init}		Started	Started container database-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:02 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.initContainers{postgres-startup}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:05 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-445tf.spec.containers{pgbouncer}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 5.702s (5.702s including waiting). Image size: 84619748 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:05 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-445tf.spec.containers{pgbouncer}		Created	Created container: pgbouncer	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:05 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-445tf.spec.containers{pgbouncer}		Started	Started container pgbouncer	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:05 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-445tf.spec.containers{pgbouncer-config}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:05 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-445tf.spec.containers{pgbouncer-config}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 138ms (138ms including waiting). Image size: 84619748 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:05 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-445tf.spec.containers{pgbouncer-config}		Created	Created container: pgbouncer-config	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:05 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-445tf.spec.containers{pgbouncer-config}		Started	Started container pgbouncer-config	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:07 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.initContainers{pgbackrest-log-dir}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 7.233s (7.233s including waiting). Image size: 122700307 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:08 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.initContainers{pgbackrest-log-dir}		Created	Created container: pgbackrest-log-dir	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:08 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.initContainers{pgbackrest-log-dir}		Started	Started container pgbackrest-log-dir	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:11 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.initContainers{nss-wrapper-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:11 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.initContainers{nss-wrapper-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 135ms (135ms including waiting). Image size: 122700307 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:11 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.initContainers{nss-wrapper-init}		Created	Created container: nss-wrapper-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:11 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.initContainers{nss-wrapper-init}		Started	Started container nss-wrapper-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:12 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:12 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 154ms (154ms including waiting). Image size: 122700307 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:12 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest}		Created	Created container: pgbackrest	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:13 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest}		Started	Started container pgbackrest	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:13 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:13 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 148ms (148ms including waiting). Image size: 122700307 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:13 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config}		Created	Created container: pgbackrest-config	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:13 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config}		Started	Started container pgbackrest-config	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:18 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.initContainers{postgres-startup}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 16.504s (16.504s including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:18 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.initContainers{postgres-startup}		Created	Created container: postgres-startup	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:18 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.initContainers{postgres-startup}		Started	Started container postgres-startup	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:26 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:26 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 121ms (121ms including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:26 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.initContainers{nss-wrapper-init-logcollector}		Created	Created container: nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:26 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.initContainers{nss-wrapper-init-logcollector}		Started	Started container nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:27 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.initContainers{nss-wrapper-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:27 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.initContainers{nss-wrapper-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 137ms (137ms including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:27 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.initContainers{nss-wrapper-init}		Created	Created container: nss-wrapper-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:27 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.initContainers{nss-wrapper-init}		Started	Started container nss-wrapper-init	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:28 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.containers{database}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:28 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.containers{database}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 127ms (127ms including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:28 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.containers{database}		Created	Created container: database	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:28 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.containers{database}		Started	Started container database	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:28 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.containers{replication-cert-copy}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:28 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.containers{replication-cert-copy}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 133ms (133ms including waiting). Image size: 449178529 bytes.	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:28 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.containers{replication-cert-copy}		Created	Created container: replication-cert-copy	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:28 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.containers{replication-cert-copy}		Started	Started container replication-cert-copy	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:28 +0000 UTC	Normal	Pod cert-management-policy-instance1-7g4g-0.spec.containers{logs}		Pulling	Pulling image "docker.io/perconalab/fluentbit:main-logcollector"	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:34 +0000 UTC	Normal	PostgresCluster.upstream.pgv2.percona.com cert-management-policy		StanzasCreated	pgBackRest stanza creation completed successfully	postgrescluster-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:55 +0000 UTC	Normal	StatefulSet.apps cert-management-policy-instance1-7g4g		SuccessfulDelete	delete Pod cert-management-policy-instance1-7g4g-0 in StatefulSet cert-management-policy-instance1-7g4g successful	statefulset-controller	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:54:58 +0000 UTC	Warning	Pod cert-management-policy-instance1-7g4g-0.spec.containers{database}		Unhealthy	Readiness probe failed: 	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:55:00 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-445tf.spec.containers{pgbouncer}		Killing	Stopping container pgbouncer	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:55:00 +0000 UTC	Normal	Pod cert-management-policy-pgbouncer-56896f784f-445tf.spec.containers{pgbouncer-config}		Killing	Stopping container pgbouncer-config	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:55:00 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest}		Killing	Stopping container pgbackrest	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:55:00 +0000 UTC	Normal	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config}		Killing	Stopping container pgbackrest-config	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | 2026-09-08 21:55:00 +0000 UTC	Warning	Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest}		Unhealthy	Liveness probe failed: 	kubelet	
    logger.go:42: 21:55:46 | cert-management-policy | Deleting namespace "kuttl-test-superb-vulture"
=== NAME  kuttl
    harness.go:404: run tests finished
    harness.go:511: cleaning up
    harness.go:568: removing temp folder: ""
--- PASS: kuttl (429.36s)
    --- PASS: kuttl/harness (0.00s)
        --- PASS: kuttl/harness/cert-management-policy (428.63s)
PASS