=== RUN   kuttl
    harness.go:460: starting setup
    harness.go:258: running tests using configured kubeconfig.
    harness.go:281: Successful connection to cluster at: https://35.223.162.251
    harness.go:366: running tests
    harness.go:77: going to run test suite with timeout of 600 seconds for each step
    harness.go:378: testsuite: e2e-tests/tests has 55 tests
=== RUN   kuttl/harness
=== RUN   kuttl/harness/pg-tde
=== PAUSE kuttl/harness/pg-tde
=== CONT  kuttl/harness/pg-tde
    logger.go:42: 21:00:14 | pg-tde | Creating namespace "kuttl-test-tight-mule"
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | starting test step 0-deploy-operator
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | running command: [sh -c set -o errexit
        set -o xtrace
        
        source ../../functions
        
        if [[ ${PG_VER} -lt 17 ]]; then
          echo "ERROR: pg-tde requires PostgreSQL 17 or greater; got ${PG_VER}"
          exit 1
        fi
        
        init_temp_dir # do this only in the first TestStep
        
        deploy_operator
        deploy_client]
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | + source ../../functions
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ realpath ../../..
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | ++ BUSYBOX_VER=1.36
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | ++++ pwd
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | ++ test_name=pg-tde
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/vars.sh
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ export TEMP_DIR=/tmp/kuttl/pg/pg-tde
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ TEMP_DIR=/tmp/kuttl/pg/pg-tde
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ export GIT_BRANCH=PR-1773
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ GIT_BRANCH=PR-1773
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ export VERSION=PR-1773-5cca644cd
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ VERSION=PR-1773-5cca644cd
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | +++ [[ -z '' ]]
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | ++++ detect_k8s_platform
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | ++++ local detected_platform
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | ++++ local xtrace_enabled=false
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | ++++ [[ -o xtrace ]]
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | ++++ xtrace_enabled=true
    logger.go:42: 21:00:14 | pg-tde/0-deploy-operator | ++++ set +o xtrace
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ PLATFORM=gke
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export PLATFORM
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ ! -n '' ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ -n '' ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export PG_VER=18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ PG_VER=18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ PG_DISTRIBUTION=
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ '' == community ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export PGOV1_VER=14
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ PGOV1_VER=14
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ MINIO_VER=5.4.0
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ VAULT_VER=0.32.0
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | ++++ printenv
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | ++++ grep -E '^IMAGE'
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | ++++ awk -F= '{print $1}'
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ echo perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == docker.io/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == percona/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == perconalab/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | ++++ which gdate
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | ++++ which date
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ date=/usr/sbin/date
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | ++++ which gsed
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | ++++ which sed
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | +++ sed=/usr/sbin/sed
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | + [[ 18 -lt 17 ]]
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | + init_temp_dir
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | + rm -rf /tmp/kuttl/pg/pg-tde
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | + mkdir -p /tmp/kuttl/pg/pg-tde
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | + deploy_operator
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | + local cw_prefix=
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | + destroy_operator
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | + kubectl -n pg-operator delete deployment percona-postgresql-operator --force --grace-period=0
    logger.go:42: 21:00:16 | pg-tde/0-deploy-operator | Warning: Immediate deletion does not wait for confirmation that the running resource has been terminated. The resource may continue to run on the cluster indefinitely.
    logger.go:42: 21:00:17 | pg-tde/0-deploy-operator | deployment.apps "percona-postgresql-operator" force deleted from pg-operator namespace
    logger.go:42: 21:00:17 | pg-tde/0-deploy-operator | + [[ -n pg-operator ]]
    logger.go:42: 21:00:17 | pg-tde/0-deploy-operator | + kubectl delete namespace pg-operator --force --grace-period=0
    logger.go:42: 21:00:17 | pg-tde/0-deploy-operator | Warning: Immediate deletion does not wait for confirmation that the running resource has been terminated. The resource may continue to run on the cluster indefinitely.
    logger.go:42: 21:00:17 | pg-tde/0-deploy-operator | namespace "pg-operator" force deleted
    logger.go:42: 21:00:29 | pg-tde/0-deploy-operator | + [[ -n pg-operator ]]
    logger.go:42: 21:00:29 | pg-tde/0-deploy-operator | + create_namespace pg-operator
    logger.go:42: 21:00:29 | pg-tde/0-deploy-operator | + local namespace=pg-operator
    logger.go:42: 21:00:29 | pg-tde/0-deploy-operator | + [[ gke == openshift ]]
    logger.go:42: 21:00:29 | pg-tde/0-deploy-operator | + kubectl delete namespace pg-operator --ignore-not-found
    logger.go:42: 21:00:29 | pg-tde/0-deploy-operator | + kubectl wait --for=delete namespace pg-operator
    logger.go:42: 21:00:30 | pg-tde/0-deploy-operator | + kubectl create namespace pg-operator
    logger.go:42: 21:00:30 | pg-tde/0-deploy-operator | namespace/pg-operator created
    logger.go:42: 21:00:30 | pg-tde/0-deploy-operator | + cw_prefix=cw-
    logger.go:42: 21:00:30 | pg-tde/0-deploy-operator | + kubectl -n pg-operator apply --server-side --force-conflicts -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy/crd.yaml
    logger.go:42: 21:00:31 | pg-tde/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/crunchybridgeclusters.upstream.pgv2.percona.com serverside-applied
    logger.go:42: 21:00:31 | pg-tde/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/perconapgbackups.pgv2.percona.com serverside-applied
    logger.go:42: 21:00:33 | pg-tde/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/perconapgclusters.pgv2.percona.com serverside-applied
    logger.go:42: 21:00:33 | pg-tde/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/perconapgrestores.pgv2.percona.com serverside-applied
    logger.go:42: 21:00:33 | pg-tde/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/perconapgupgrades.pgv2.percona.com serverside-applied
    logger.go:42: 21:00:34 | pg-tde/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/pgadmins.upstream.pgv2.percona.com serverside-applied
    logger.go:42: 21:00:34 | pg-tde/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/pgupgrades.upstream.pgv2.percona.com serverside-applied
    logger.go:42: 21:00:35 | pg-tde/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/postgresclusters.upstream.pgv2.percona.com serverside-applied
    logger.go:42: 21:00:35 | pg-tde/0-deploy-operator | + kubectl -n pg-operator apply --server-side --force-conflicts -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy/cw-rbac.yaml
    logger.go:42: 21:00:36 | pg-tde/0-deploy-operator | serviceaccount/percona-postgresql-operator serverside-applied
    logger.go:42: 21:00:36 | pg-tde/0-deploy-operator | clusterrole.rbac.authorization.k8s.io/percona-postgresql-operator serverside-applied
    logger.go:42: 21:00:36 | pg-tde/0-deploy-operator | clusterrolebinding.rbac.authorization.k8s.io/percona-postgresql-operator serverside-applied
    logger.go:42: 21:00:36 | pg-tde/0-deploy-operator | + local disable_telemetry=true
    logger.go:42: 21:00:36 | pg-tde/0-deploy-operator | + '[' pg-tde == telemetry-transfer ']'
    logger.go:42: 21:00:36 | pg-tde/0-deploy-operator | + yq eval '.spec.template.spec.containers[0].image = "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd"' /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy/cw-operator.yaml
    logger.go:42: 21:00:36 | pg-tde/0-deploy-operator | + yq eval '(.spec.template.spec.containers[] | select(.name=="operator") | .env[] | select(.name=="DISABLE_TELEMETRY") | .value) = "true"' -
    logger.go:42: 21:00:36 | pg-tde/0-deploy-operator | + yq eval '(.spec.template.spec.containers[] | select(.name=="operator") | .env[] | select(.name=="LOG_LEVEL") | .value) = "DEBUG"' -
    logger.go:42: 21:00:36 | pg-tde/0-deploy-operator | + yq eval '(.spec.template.spec.containers[] | select(.name=="operator") | .env[] | select(.name=="PGO_FEATURE_GATES") | .value) = ""' -
    logger.go:42: 21:00:36 | pg-tde/0-deploy-operator | + kubectl -n pg-operator apply -f -
    logger.go:42: 21:00:38 | pg-tde/0-deploy-operator | deployment.apps/percona-postgresql-operator created
    logger.go:42: 21:00:38 | pg-tde/0-deploy-operator | + deploy_client
    logger.go:42: 21:00:38 | pg-tde/0-deploy-operator | + kubectl -n kuttl-test-tight-mule apply -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf/client.yaml
    logger.go:42: 21:00:39 | pg-tde/0-deploy-operator | deployment.apps/pg-client created
    logger.go:42: 21:00:39 | pg-tde/0-deploy-operator | running command: [sh -c kubectl assert exist-enhanced deployment percona-postgresql-operator -n ${OPERATOR_NS:-$NAMESPACE} --field-selector status.readyReplicas=1]
    logger.go:42: 21:00:39 | pg-tde/0-deploy-operator | ASSERT deployment percona-postgresql-operator matching field criteria 'status.readyReplicas=1' should exist.
    logger.go:42: 21:00:40 | pg-tde/0-deploy-operator | INFO   Found 1 resource(s).
    logger.go:42: 21:00:40 | pg-tde/0-deploy-operator | NAME                          NAMESPACE     COL0
    logger.go:42: 21:00:40 | pg-tde/0-deploy-operator | percona-postgresql-operator   pg-operator   1
    logger.go:42: 21:00:40 | pg-tde/0-deploy-operator | ASSERT PASS
    logger.go:42: 21:00:40 | pg-tde/0-deploy-operator | test step completed 0-deploy-operator
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | starting test step 1-deploy-vault
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | running command: [sh -c set -o errexit
        set -o xtrace
        
        source ../../functions
        
        start_vault vault-service https]
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | + source ../../functions
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ realpath ../../..
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | ++ BUSYBOX_VER=1.36
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | ++++ pwd
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | ++ test_name=pg-tde
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/vars.sh
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ export TEMP_DIR=/tmp/kuttl/pg/pg-tde
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ TEMP_DIR=/tmp/kuttl/pg/pg-tde
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ export GIT_BRANCH=PR-1773
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ GIT_BRANCH=PR-1773
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ export VERSION=PR-1773-5cca644cd
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ VERSION=PR-1773-5cca644cd
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | +++ [[ -z '' ]]
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | ++++ detect_k8s_platform
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | ++++ local detected_platform
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | ++++ local xtrace_enabled=false
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | ++++ [[ -o xtrace ]]
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | ++++ xtrace_enabled=true
    logger.go:42: 21:00:40 | pg-tde/1-deploy-vault | ++++ set +o xtrace
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ PLATFORM=gke
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export PLATFORM
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ ! -n '' ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ -n '' ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export PG_VER=18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ PG_VER=18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ PG_DISTRIBUTION=
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ '' == community ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export PGOV1_VER=14
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ PGOV1_VER=14
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ MINIO_VER=5.4.0
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ VAULT_VER=0.32.0
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | ++++ printenv
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | ++++ grep -E '^IMAGE'
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | ++++ awk -F= '{print $1}'
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ echo perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++++ echo perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ var_value=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == docker.io/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == percona/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == perconalab/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | ++++ which gdate
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | ++++ which date
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ date=/usr/sbin/date
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | ++++ which gsed
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | ++++ which sed
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | +++ sed=/usr/sbin/sed
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | + start_vault vault-service https
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | + local name=vault-service
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | + local protocol=https
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | + local platform=kubernetes
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | ++ mktemp -d
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | + local tmp_dir=/tmp/tmp.5AAeHmbxdb
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | + local vault_namespace=vault
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | + [[ gke == openshift ]]
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | + stop_vault vault-service
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | + local name=vault-service
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | + local vault_namespace=vault
    logger.go:42: 21:00:42 | pg-tde/1-deploy-vault | + helm uninstall vault-service --namespace vault
    logger.go:42: 21:00:45 | pg-tde/1-deploy-vault | release "vault-service" uninstalled
    logger.go:42: 21:00:45 | pg-tde/1-deploy-vault | + kubectl delete csr vault-csr-vault-service --ignore-not-found
    logger.go:42: 21:00:46 | pg-tde/1-deploy-vault | certificatesigningrequest.certificates.k8s.io "vault-csr-vault-service" deleted
    logger.go:42: 21:00:46 | pg-tde/1-deploy-vault | + kubectl delete mutatingwebhookconfiguration vault-service-agent-injector-cfg --ignore-not-found
    logger.go:42: 21:00:46 | pg-tde/1-deploy-vault | + kubectl delete clusterrole,clusterrolebinding -l app.kubernetes.io/instance=vault-service --ignore-not-found
    logger.go:42: 21:00:47 | pg-tde/1-deploy-vault | No resources found
    logger.go:42: 21:00:47 | pg-tde/1-deploy-vault | + destroy_namespace vault
    logger.go:42: 21:00:47 | pg-tde/1-deploy-vault | + local namespace=vault
    logger.go:42: 21:00:47 | pg-tde/1-deploy-vault | + [[ gke == openshift ]]
    logger.go:42: 21:00:47 | pg-tde/1-deploy-vault | + kubectl delete namespace vault --ignore-not-found
    logger.go:42: 21:00:47 | pg-tde/1-deploy-vault | namespace "vault" deleted
    logger.go:42: 21:00:59 | pg-tde/1-deploy-vault | + kubectl wait --for=delete namespace vault
    logger.go:42: 21:00:59 | pg-tde/1-deploy-vault | + create_namespace vault
    logger.go:42: 21:00:59 | pg-tde/1-deploy-vault | + local namespace=vault
    logger.go:42: 21:00:59 | pg-tde/1-deploy-vault | + [[ gke == openshift ]]
    logger.go:42: 21:00:59 | pg-tde/1-deploy-vault | + kubectl delete namespace vault --ignore-not-found
    logger.go:42: 21:01:00 | pg-tde/1-deploy-vault | + kubectl wait --for=delete namespace vault
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + kubectl create namespace vault
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | namespace/vault created
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + helm repo add hashicorp https://helm.releases.hashicorp.com
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | "hashicorp" already exists with the same configuration, skipping
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + echo 'install Vault vault-service'
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | install Vault vault-service
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + local values_file=/tmp/tmp.5AAeHmbxdb/vault.values.yaml
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + local values_template=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf/vault-values-no-tls.yaml
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + [[ https == https ]]
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + vault_tls vault-service /tmp/tmp.5AAeHmbxdb
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + local name=vault-service
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + local tmp_dir=/tmp/tmp.5AAeHmbxdb
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + local vault_namespace=vault
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + local service=vault-service
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + local secret_name=vault-service
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + local csr_name=vault-csr-vault-service
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + local csr_signer
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + case ${PLATFORM} in
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + csr_signer=kubernetes.io/kubelet-serving
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + openssl genrsa -out /tmp/tmp.5AAeHmbxdb/vault.key 2048
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + sed -e 's/<service>/vault-service/g' -e 's/<namespace>/vault/g' /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf/vault-csr.conf
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + openssl req -new -key /tmp/tmp.5AAeHmbxdb/vault.key -subj '/CN=system:node:vault-service.vault.svc;/O=system:nodes' -out /tmp/tmp.5AAeHmbxdb/server.csr -config /tmp/tmp.5AAeHmbxdb/csr.conf
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + CSR_NAME=vault-csr-vault-service
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | ++ base64
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | ++ tr -d '\n'
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + CSR_REQUEST=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
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + CSR_SIGNER=kubernetes.io/kubelet-serving
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + yq $'.metadata.name = strenv(CSR_NAME) |\n\t\t\t .spec.request = strenv(CSR_REQUEST) |\n\t\t\t .spec.signerName = strenv(CSR_SIGNER)' /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf/vault-csr.yaml
    logger.go:42: 21:01:01 | pg-tde/1-deploy-vault | + kubectl delete csr vault-csr-vault-service --ignore-not-found
    logger.go:42: 21:01:02 | pg-tde/1-deploy-vault | + kubectl create -f /tmp/tmp.5AAeHmbxdb/csr.yaml
    logger.go:42: 21:01:03 | pg-tde/1-deploy-vault | certificatesigningrequest.certificates.k8s.io/vault-csr-vault-service created
    logger.go:42: 21:01:03 | pg-tde/1-deploy-vault | + sleep 10
    logger.go:42: 21:01:13 | pg-tde/1-deploy-vault | + kubectl certificate approve vault-csr-vault-service
    logger.go:42: 21:01:13 | pg-tde/1-deploy-vault | certificatesigningrequest.certificates.k8s.io/vault-csr-vault-service approved
    logger.go:42: 21:01:13 | pg-tde/1-deploy-vault | + kubectl get csr vault-csr-vault-service -o 'jsonpath={.status.certificate}'
    logger.go:42: 21:01:14 | pg-tde/1-deploy-vault | + openssl base64 -in /tmp/tmp.5AAeHmbxdb/serverCert -d -A -out /tmp/tmp.5AAeHmbxdb/vault.crt
    logger.go:42: 21:01:14 | pg-tde/1-deploy-vault | + kubectl config view --raw --minify --flatten -o 'jsonpath={.clusters[].cluster.certificate-authority-data}'
    logger.go:42: 21:01:14 | pg-tde/1-deploy-vault | + base64 -d
    logger.go:42: 21:01:14 | pg-tde/1-deploy-vault | + [[ gke == openshift ]]
    logger.go:42: 21:01:14 | pg-tde/1-deploy-vault | + kubectl create secret generic vault-service --namespace vault --from-file=vault.key=/tmp/tmp.5AAeHmbxdb/vault.key --from-file=vault.crt=/tmp/tmp.5AAeHmbxdb/vault.crt --from-file=vault.ca=/tmp/tmp.5AAeHmbxdb/vault.ca
    logger.go:42: 21:01:14 | pg-tde/1-deploy-vault | secret/vault-service created
    logger.go:42: 21:01:14 | pg-tde/1-deploy-vault | + values_template=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf/vault-values-tls.yaml
    logger.go:42: 21:01:14 | pg-tde/1-deploy-vault | + sed -e 's/<name>/vault-service/g' -e 's/<platform>/kubernetes/g' /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf/vault-values-tls.yaml
    logger.go:42: 21:01:14 | pg-tde/1-deploy-vault | + helm install vault-service hashicorp/vault --disable-openapi-validation --version 0.32.0 --namespace vault --values /tmp/tmp.5AAeHmbxdb/vault.values.yaml
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault | NAME: vault-service
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault | LAST DEPLOYED: Fri Aug 21 21:01:16 2026
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault | NAMESPACE: vault
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault | STATUS: deployed
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault | REVISION: 1
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault | NOTES:
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault | Thank you for installing HashiCorp Vault!
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault | 
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault | Now that you have deployed Vault, you should look over the docs on using
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault | Vault with Kubernetes available here:
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault | 
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault | https://developer.hashicorp.com/vault/docs
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault | 
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault | 
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault | Your release is named vault-service. To learn more about the release, try:
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault | 
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault |   $ helm status vault-service
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault |   $ helm get manifest vault-service
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault | + [[ gke == openshift ]]
    logger.go:42: 21:01:20 | pg-tde/1-deploy-vault | + set +o xtrace
    logger.go:42: 21:01:22 | pg-tde/1-deploy-vault | pod/vault-service-0.{"running":{"startedAt":"2026-08-21T21:01:20Z"}}
    logger.go:42: 21:01:23 | pg-tde/1-deploy-vault | Unable to use a TTY - input is not a terminal or the right kind of file
    logger.go:42: 21:01:34 | pg-tde/1-deploy-vault | Unable to use a TTY - input is not a terminal or the right kind of file
    logger.go:42: 21:01:34 | pg-tde/1-deploy-vault | Key             Value
    logger.go:42: 21:01:34 | pg-tde/1-deploy-vault | ---             -----
    logger.go:42: 21:01:34 | pg-tde/1-deploy-vault | Seal Type       shamir
    logger.go:42: 21:01:34 | pg-tde/1-deploy-vault | Initialized     true
    logger.go:42: 21:01:34 | pg-tde/1-deploy-vault | Sealed          false
    logger.go:42: 21:01:34 | pg-tde/1-deploy-vault | Total Shares    1
    logger.go:42: 21:01:34 | pg-tde/1-deploy-vault | Threshold       1
    logger.go:42: 21:01:34 | pg-tde/1-deploy-vault | Version         1.21.2
    logger.go:42: 21:01:34 | pg-tde/1-deploy-vault | Build Date      2026-01-06T08:33:05Z
    logger.go:42: 21:01:34 | pg-tde/1-deploy-vault | Storage Type    file
    logger.go:42: 21:01:34 | pg-tde/1-deploy-vault | Cluster Name    vault-cluster-71aa02c8
    logger.go:42: 21:01:34 | pg-tde/1-deploy-vault | Cluster ID      99454071-ab91-5ba2-ae82-245cc5de036e
    logger.go:42: 21:01:34 | pg-tde/1-deploy-vault | HA Enabled      false
    logger.go:42: 21:01:35 | pg-tde/1-deploy-vault | Unable to use a TTY - input is not a terminal or the right kind of file
    logger.go:42: 21:01:36 | pg-tde/1-deploy-vault | Success! Enabled the kv secrets engine at: tde/
    logger.go:42: 21:01:36 | pg-tde/1-deploy-vault | Success! Enabled the file audit device at: file/
    logger.go:42: 21:01:46 | pg-tde/1-deploy-vault | secret/vault-secret created
    logger.go:42: 21:01:47 | pg-tde/1-deploy-vault | test step completed 1-deploy-vault
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | starting test step 2-create-cluster
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | running command: [sh -c set -o errexit
        set -o xtrace
        
        source ../../functions
        
        get_cr \
          | yq '.spec.extensions.pg_tde.enabled = true' \
          | yq '.spec.extensions.pg_tde.vault.host = "https://vault-service.vault.svc:8200"' \
          | yq '.spec.extensions.pg_tde.vault.mountPath = "tde"' \
          | yq '.spec.extensions.pg_tde.vault.tokenSecret.name = "vault-secret"' \
          | yq '.spec.extensions.pg_tde.vault.tokenSecret.key = "token"' \
          | yq '.spec.extensions.pg_tde.vault.caSecret.name = "vault-secret"' \
          | yq '.spec.extensions.pg_tde.vault.caSecret.key = "ca.crt"' \
          | yq '.spec.backups.pgbackrest.global."repo1-cipher-pass" = "JemA6x5xhHA677oKCUSuIiSRMsr3OowgsaCQJu5XuSn/wyOhf48o2QdS9wUwFwOG"' \
          | yq '.spec.backups.pgbackrest.global."repo1-cipher-type" = "aes-256-cbc"' \
          | kubectl -n "${NAMESPACE}" apply -f -]
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | + source ../../functions
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ realpath ../../..
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | ++ BUSYBOX_VER=1.36
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | ++++ pwd
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | ++ test_name=pg-tde
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/vars.sh
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ export TEMP_DIR=/tmp/kuttl/pg/pg-tde
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ TEMP_DIR=/tmp/kuttl/pg/pg-tde
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ export GIT_BRANCH=PR-1773
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ GIT_BRANCH=PR-1773
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ export VERSION=PR-1773-5cca644cd
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ VERSION=PR-1773-5cca644cd
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | +++ [[ -z '' ]]
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | ++++ detect_k8s_platform
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | ++++ local detected_platform
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | ++++ local xtrace_enabled=false
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | ++++ [[ -o xtrace ]]
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | ++++ xtrace_enabled=true
    logger.go:42: 21:01:47 | pg-tde/2-create-cluster | ++++ set +o xtrace
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ PLATFORM=gke
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export PLATFORM
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ ! -n '' ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ -n '' ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export PG_VER=18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ PG_VER=18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ PG_DISTRIBUTION=
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ '' == community ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export PGOV1_VER=14
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ PGOV1_VER=14
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ MINIO_VER=5.4.0
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ VAULT_VER=0.32.0
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | ++++ printenv
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | ++++ grep -E '^IMAGE'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | ++++ awk -F= '{print $1}'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ echo perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++++ echo perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == docker.io/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == percona/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == perconalab/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | ++++ which gdate
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | ++++ which date
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ date=/usr/sbin/date
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | ++++ which gsed
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | ++++ which sed
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | +++ sed=/usr/sbin/sed
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + get_cr
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + local cr_name=pg-tde
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + yq '.spec.extensions.pg_tde.enabled = true'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + local repo_path=
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + local source_path=
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + local platform=gke
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + local cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf/pg-tde.yaml
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + local platform_cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf/pg-tde-gke.yaml
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + local spaces_cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf/pg-tde-spaces.yaml
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + [[ -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf/pg-tde-gke.yaml ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + [[ gke == doks ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + crs=('/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy/cr.yaml')
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + yq '.spec.extensions.pg_tde.vault.host = "https://vault-service.vault.svc:8200"'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + local crs
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + [[ -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf/pg-tde.yaml ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + yq eval-all $'\n\t\tselect(fileIndex == 0) * (select(fileIndex == 1) // {}) |\n\t\t.metadata.name = "pg-tde" |\n\t\t.metadata.labels = {"e2e":"pg-tde"} |\n\t\t.spec.postgresVersion = 18 |\n\t\t.spec.users += [{"name":"postgres","password":{"type":"AlphaNumeric"}}] |\n\t\t.spec.users += [{"name":"pg-tde","password":{"type":"AlphaNumeric"}}] |\n\t\t.spec.image = "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" |\n\t\t.spec.initContainer.image = "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd" |\n\t\t.spec.backups.pgbackrest.image = "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" |\n\t\t.spec.proxy.pgBouncer.image = "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" |\n\t\t.spec.logcollector.image = "docker.io/perconalab/fluentbit:main-logcollector" |\n\t\t.spec.pmm.image = "docker.io/perconalab/pmm-client:3-dev-latest" |\n\t\t.spec.pmm.secret = "pg-tde-pmm-secret" |\n\t\t.spec.pmm.customClusterName = "pg-tde-pmm-custom-name" |\n\t\t.spec.pmm.postgresParams = "--environment=dev-postgres"\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy/cr.yaml
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + yq '.spec.extensions.pg_tde.vault.mountPath = "tde"'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + yq '.spec.extensions.pg_tde.vault.tokenSecret.name = "vault-secret"'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + yq '.spec.extensions.pg_tde.vault.tokenSecret.key = "token"'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + yq '.spec.extensions.pg_tde.vault.caSecret.name = "vault-secret"'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + yq '.spec.backups.pgbackrest.global."repo1-cipher-pass" = "JemA6x5xhHA677oKCUSuIiSRMsr3OowgsaCQJu5XuSn/wyOhf48o2QdS9wUwFwOG"'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + yq '.spec.extensions.pg_tde.vault.caSecret.key = "ca.crt"'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + kubectl -n kuttl-test-tight-mule apply -f -
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + yq '.spec.backups.pgbackrest.global."repo1-cipher-type" = "aes-256-cbc"'
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + /usr/sbin/sed -i 's|<repo-path>||g' /tmp/kuttl/pg/pg-tde/cr.yaml
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + /usr/sbin/sed -i 's|<source-path>||g' /tmp/kuttl/pg/pg-tde/cr.yaml
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + /usr/sbin/sed -i 's|<bucket>|pg-operator-testing|g' /tmp/kuttl/pg/pg-tde/cr.yaml
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + /usr/sbin/sed -i 's|<image>|docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd|g' /tmp/kuttl/pg/pg-tde/cr.yaml
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + [[ gke == openshift ]]
    logger.go:42: 21:01:49 | pg-tde/2-create-cluster | + cat /tmp/kuttl/pg/pg-tde/cr.yaml
    logger.go:42: 21:01:50 | pg-tde/2-create-cluster | perconapgcluster.pgv2.percona.com/pg-tde created
    logger.go:42: 21:01:51 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:01:54 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:01:56 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:01:59 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:01 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:03 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:06 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:08 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:11 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:13 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:15 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:18 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:20 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:22 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:25 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:27 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:29 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:32 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:34 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:36 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:39 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:41 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:43 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:46 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:48 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:51 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:53 | pg-tde/2-create-cluster | running command: [sh -c tmp_file=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp_file}
        [[ $(cat ${tmp_file} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp_file} | yq .observedGeneration) == "1" ]]
        [[ $(cat ${tmp_file} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp_file} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:02:54 | pg-tde/2-create-cluster | test step completed 2-create-cluster
    logger.go:42: 21:02:54 | pg-tde/3-write-data | starting test step 3-write-data
    logger.go:42: 21:02:54 | pg-tde/3-write-data | running command: [sh -c set -o errexit
        set -o xtrace
        
        source ../../functions
        
        run_psql_local \
          'CREATE DATABASE myapp; \c myapp \\\ CREATE TABLE myTable (id int PRIMARY KEY) USING tde_heap;' \
          "$(get_psql_uri pg-tde postgres)"
        
        run_psql_local \
          '\c myapp \\\ INSERT INTO myTable (id) VALUES (100500)' \
          "$(get_psql_uri pg-tde postgres)"]
    logger.go:42: 21:02:54 | pg-tde/3-write-data | + source ../../functions
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ realpath ../../..
    logger.go:42: 21:02:54 | pg-tde/3-write-data | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:02:54 | pg-tde/3-write-data | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:02:54 | pg-tde/3-write-data | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:02:54 | pg-tde/3-write-data | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:02:54 | pg-tde/3-write-data | ++ BUSYBOX_VER=1.36
    logger.go:42: 21:02:54 | pg-tde/3-write-data | ++++ pwd
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde
    logger.go:42: 21:02:54 | pg-tde/3-write-data | ++ test_name=pg-tde
    logger.go:42: 21:02:54 | pg-tde/3-write-data | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/vars.sh
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ export TEMP_DIR=/tmp/kuttl/pg/pg-tde
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ TEMP_DIR=/tmp/kuttl/pg/pg-tde
    logger.go:42: 21:02:54 | pg-tde/3-write-data | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ export GIT_BRANCH=PR-1773
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ GIT_BRANCH=PR-1773
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ export VERSION=PR-1773-5cca644cd
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ VERSION=PR-1773-5cca644cd
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:02:54 | pg-tde/3-write-data | +++ [[ -z '' ]]
    logger.go:42: 21:02:54 | pg-tde/3-write-data | ++++ detect_k8s_platform
    logger.go:42: 21:02:54 | pg-tde/3-write-data | ++++ local detected_platform
    logger.go:42: 21:02:54 | pg-tde/3-write-data | ++++ local xtrace_enabled=false
    logger.go:42: 21:02:54 | pg-tde/3-write-data | ++++ [[ -o xtrace ]]
    logger.go:42: 21:02:54 | pg-tde/3-write-data | ++++ xtrace_enabled=true
    logger.go:42: 21:02:54 | pg-tde/3-write-data | ++++ set +o xtrace
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ PLATFORM=gke
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export PLATFORM
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ ! -n '' ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ -n '' ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export PG_VER=18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ PG_VER=18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ PG_DISTRIBUTION=
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ '' == community ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export PGOV1_VER=14
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ PGOV1_VER=14
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ MINIO_VER=5.4.0
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ VAULT_VER=0.32.0
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++++ printenv
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++++ grep -E '^IMAGE'
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++++ awk -F= '{print $1}'
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ echo perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++++ echo perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ var_value=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == docker.io/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == percona/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == perconalab/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:02:56 | pg-tde/3-write-data | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:02:56 | pg-tde/3-write-data | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:02:56 | pg-tde/3-write-data | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:02:56 | pg-tde/3-write-data | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:02:56 | pg-tde/3-write-data | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:02:56 | pg-tde/3-write-data | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++++ which gdate
    logger.go:42: 21:02:56 | pg-tde/3-write-data | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++++ which date
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ date=/usr/sbin/date
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++++ which gsed
    logger.go:42: 21:02:56 | pg-tde/3-write-data | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++++ which sed
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ sed=/usr/sbin/sed
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++ get_psql_uri pg-tde postgres
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++ local cluster=pg-tde
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++ local user=postgres
    logger.go:42: 21:02:56 | pg-tde/3-write-data | ++ local secret_name=pg-tde-pguser-postgres
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ get_psql_user_pass pg-tde-pguser-postgres
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ local secret_name=pg-tde-pguser-postgres
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ kubectl -n kuttl-test-tight-mule get secret/pg-tde-pguser-postgres '--template={{.data.password | base64decode}}'
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ get_psql_user_host pg-tde-pguser-postgres
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ local secret_name=pg-tde-pguser-postgres
    logger.go:42: 21:02:56 | pg-tde/3-write-data | +++ kubectl -n kuttl-test-tight-mule get secret/pg-tde-pguser-postgres '--template={{.data.host | base64decode }}'
    logger.go:42: 21:02:57 | pg-tde/3-write-data | ++ echo postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc
    logger.go:42: 21:02:57 | pg-tde/3-write-data | + run_psql_local 'CREATE DATABASE myapp; \c myapp \\\ CREATE TABLE myTable (id int PRIMARY KEY) USING tde_heap;' postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc
    logger.go:42: 21:02:57 | pg-tde/3-write-data | + local 'command=CREATE DATABASE myapp; \c myapp \\\ CREATE TABLE myTable (id int PRIMARY KEY) USING tde_heap;'
    logger.go:42: 21:02:57 | pg-tde/3-write-data | + local uri=postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc
    logger.go:42: 21:02:57 | pg-tde/3-write-data | + local driver=postgres
    logger.go:42: 21:02:57 | pg-tde/3-write-data | ++ get_client_pod
    logger.go:42: 21:02:57 | pg-tde/3-write-data | ++ kubectl -n kuttl-test-tight-mule get pods --selector=name=pg-client -o 'jsonpath={.items[].metadata.name}'
    logger.go:42: 21:02:58 | pg-tde/3-write-data | + kubectl -n kuttl-test-tight-mule exec pg-client-65d98588cc-w55wt -- bash -c 'printf '\''CREATE DATABASE myapp; \c myapp \\\ CREATE TABLE myTable (id int PRIMARY KEY) USING tde_heap;\n'\'' | psql -v ON_ERROR_STOP=1 -t -q postgres://'\''postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc'\'''
    logger.go:42: 21:02:59 | pg-tde/3-write-data | ++ get_psql_uri pg-tde postgres
    logger.go:42: 21:02:59 | pg-tde/3-write-data | ++ local cluster=pg-tde
    logger.go:42: 21:02:59 | pg-tde/3-write-data | ++ local user=postgres
    logger.go:42: 21:02:59 | pg-tde/3-write-data | ++ local secret_name=pg-tde-pguser-postgres
    logger.go:42: 21:02:59 | pg-tde/3-write-data | +++ get_psql_user_pass pg-tde-pguser-postgres
    logger.go:42: 21:02:59 | pg-tde/3-write-data | +++ local secret_name=pg-tde-pguser-postgres
    logger.go:42: 21:02:59 | pg-tde/3-write-data | +++ kubectl -n kuttl-test-tight-mule get secret/pg-tde-pguser-postgres '--template={{.data.password | base64decode}}'
    logger.go:42: 21:02:59 | pg-tde/3-write-data | +++ get_psql_user_host pg-tde-pguser-postgres
    logger.go:42: 21:02:59 | pg-tde/3-write-data | +++ local secret_name=pg-tde-pguser-postgres
    logger.go:42: 21:02:59 | pg-tde/3-write-data | +++ kubectl -n kuttl-test-tight-mule get secret/pg-tde-pguser-postgres '--template={{.data.host | base64decode }}'
    logger.go:42: 21:03:00 | pg-tde/3-write-data | ++ echo postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc
    logger.go:42: 21:03:00 | pg-tde/3-write-data | + run_psql_local '\c myapp \\\ INSERT INTO myTable (id) VALUES (100500)' postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc
    logger.go:42: 21:03:00 | pg-tde/3-write-data | + local 'command=\c myapp \\\ INSERT INTO myTable (id) VALUES (100500)'
    logger.go:42: 21:03:00 | pg-tde/3-write-data | + local uri=postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc
    logger.go:42: 21:03:00 | pg-tde/3-write-data | + local driver=postgres
    logger.go:42: 21:03:00 | pg-tde/3-write-data | ++ get_client_pod
    logger.go:42: 21:03:00 | pg-tde/3-write-data | ++ kubectl -n kuttl-test-tight-mule get pods --selector=name=pg-client -o 'jsonpath={.items[].metadata.name}'
    logger.go:42: 21:03:00 | pg-tde/3-write-data | + kubectl -n kuttl-test-tight-mule exec pg-client-65d98588cc-w55wt -- bash -c 'printf '\''\c myapp \\\ INSERT INTO myTable (id) VALUES (100500)\n'\'' | psql -v ON_ERROR_STOP=1 -t -q postgres://'\''postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc'\'''
    logger.go:42: 21:03:01 | pg-tde/3-write-data | test step completed 3-write-data
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | starting test step 4-verify-encryption
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | running command: [sh -c set -o xtrace
        
        source ../../functions
        
        result=$(run_psql_command \
          "SELECT extname FROM pg_extension WHERE extname = 'pg_tde';" \
          "$(get_psql_uri pg-tde postgres)")
        kubectl -n "${NAMESPACE}" create configmap 05-verify-extension --from-literal=pg_tde_extension="$result"
        
        result=$(run_psql_command \
          "SELECT pg_tde_is_encrypted('myTable');" \
          "$(get_psql_uri pg-tde postgres)/myapp")
        kubectl -n "${NAMESPACE}" create configmap 05-verify-encryption --from-literal=pg_tde_is_encrypted="$result"
        
        # pg_tde_verify_key will throw an error if it fails
        run_psql_command \
          "SELECT pg_tde_verify_key();" \
          "$(get_psql_uri pg-tde postgres)/myapp"]
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | + source ../../functions
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ realpath ../../..
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | ++ BUSYBOX_VER=1.36
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | ++++ pwd
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | ++ test_name=pg-tde
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/vars.sh
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ export TEMP_DIR=/tmp/kuttl/pg/pg-tde
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ TEMP_DIR=/tmp/kuttl/pg/pg-tde
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ export GIT_BRANCH=PR-1773
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ GIT_BRANCH=PR-1773
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ export VERSION=PR-1773-5cca644cd
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ VERSION=PR-1773-5cca644cd
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | +++ [[ -z '' ]]
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | ++++ detect_k8s_platform
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | ++++ local detected_platform
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | ++++ local xtrace_enabled=false
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | ++++ [[ -o xtrace ]]
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | ++++ xtrace_enabled=true
    logger.go:42: 21:03:01 | pg-tde/4-verify-encryption | ++++ set +o xtrace
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ PLATFORM=gke
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export PLATFORM
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ ! -n '' ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ -n '' ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export PG_VER=18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ PG_VER=18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ PG_DISTRIBUTION=
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ '' == community ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export PGOV1_VER=14
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ PGOV1_VER=14
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ MINIO_VER=5.4.0
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ VAULT_VER=0.32.0
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | ++++ printenv
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | ++++ grep -E '^IMAGE'
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | ++++ awk -F= '{print $1}'
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ echo perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++++ echo perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ var_value=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == docker.io/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == percona/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == perconalab/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | ++++ which gdate
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | ++++ which date
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ date=/usr/sbin/date
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | ++++ which gsed
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | ++++ which sed
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ sed=/usr/sbin/sed
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ get_psql_uri pg-tde postgres
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ local cluster=pg-tde
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ local user=postgres
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | +++ local secret_name=pg-tde-pguser-postgres
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | ++++ get_psql_user_pass pg-tde-pguser-postgres
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | ++++ local secret_name=pg-tde-pguser-postgres
    logger.go:42: 21:03:03 | pg-tde/4-verify-encryption | ++++ kubectl -n kuttl-test-tight-mule get secret/pg-tde-pguser-postgres '--template={{.data.password | base64decode}}'
    logger.go:42: 21:03:04 | pg-tde/4-verify-encryption | ++++ get_psql_user_host pg-tde-pguser-postgres
    logger.go:42: 21:03:04 | pg-tde/4-verify-encryption | ++++ local secret_name=pg-tde-pguser-postgres
    logger.go:42: 21:03:04 | pg-tde/4-verify-encryption | ++++ kubectl -n kuttl-test-tight-mule get secret/pg-tde-pguser-postgres '--template={{.data.host | base64decode }}'
    logger.go:42: 21:03:04 | pg-tde/4-verify-encryption | +++ echo postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc
    logger.go:42: 21:03:04 | pg-tde/4-verify-encryption | ++ run_psql_command 'SELECT extname FROM pg_extension WHERE extname = '\''pg_tde'\'';' postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc
    logger.go:42: 21:03:04 | pg-tde/4-verify-encryption | ++ local 'command=SELECT extname FROM pg_extension WHERE extname = '\''pg_tde'\'';'
    logger.go:42: 21:03:04 | pg-tde/4-verify-encryption | ++ local uri=postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc
    logger.go:42: 21:03:04 | pg-tde/4-verify-encryption | ++ local driver=postgres
    logger.go:42: 21:03:04 | pg-tde/4-verify-encryption | +++ get_client_pod
    logger.go:42: 21:03:04 | pg-tde/4-verify-encryption | +++ kubectl -n kuttl-test-tight-mule get pods --selector=name=pg-client -o 'jsonpath={.items[].metadata.name}'
    logger.go:42: 21:03:05 | pg-tde/4-verify-encryption | ++ kubectl -n kuttl-test-tight-mule exec pg-client-65d98588cc-w55wt -- psql -v ON_ERROR_STOP=1 -t -q postgres://postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc -c 'SELECT extname FROM pg_extension WHERE extname = '\''pg_tde'\'';'
    logger.go:42: 21:03:06 | pg-tde/4-verify-encryption | + result=' pg_tde'
    logger.go:42: 21:03:06 | pg-tde/4-verify-encryption | + kubectl -n kuttl-test-tight-mule create configmap 05-verify-extension '--from-literal=pg_tde_extension= pg_tde'
    logger.go:42: 21:03:06 | pg-tde/4-verify-encryption | configmap/05-verify-extension created
    logger.go:42: 21:03:06 | pg-tde/4-verify-encryption | +++ get_psql_uri pg-tde postgres
    logger.go:42: 21:03:06 | pg-tde/4-verify-encryption | +++ local cluster=pg-tde
    logger.go:42: 21:03:06 | pg-tde/4-verify-encryption | +++ local user=postgres
    logger.go:42: 21:03:06 | pg-tde/4-verify-encryption | +++ local secret_name=pg-tde-pguser-postgres
    logger.go:42: 21:03:06 | pg-tde/4-verify-encryption | ++++ get_psql_user_pass pg-tde-pguser-postgres
    logger.go:42: 21:03:06 | pg-tde/4-verify-encryption | ++++ local secret_name=pg-tde-pguser-postgres
    logger.go:42: 21:03:06 | pg-tde/4-verify-encryption | ++++ kubectl -n kuttl-test-tight-mule get secret/pg-tde-pguser-postgres '--template={{.data.password | base64decode}}'
    logger.go:42: 21:03:07 | pg-tde/4-verify-encryption | ++++ get_psql_user_host pg-tde-pguser-postgres
    logger.go:42: 21:03:07 | pg-tde/4-verify-encryption | ++++ local secret_name=pg-tde-pguser-postgres
    logger.go:42: 21:03:07 | pg-tde/4-verify-encryption | ++++ kubectl -n kuttl-test-tight-mule get secret/pg-tde-pguser-postgres '--template={{.data.host | base64decode }}'
    logger.go:42: 21:03:07 | pg-tde/4-verify-encryption | +++ echo postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc
    logger.go:42: 21:03:07 | pg-tde/4-verify-encryption | ++ run_psql_command 'SELECT pg_tde_is_encrypted('\''myTable'\'');' postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc/myapp
    logger.go:42: 21:03:07 | pg-tde/4-verify-encryption | ++ local 'command=SELECT pg_tde_is_encrypted('\''myTable'\'');'
    logger.go:42: 21:03:07 | pg-tde/4-verify-encryption | ++ local uri=postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc/myapp
    logger.go:42: 21:03:07 | pg-tde/4-verify-encryption | ++ local driver=postgres
    logger.go:42: 21:03:07 | pg-tde/4-verify-encryption | +++ get_client_pod
    logger.go:42: 21:03:07 | pg-tde/4-verify-encryption | +++ kubectl -n kuttl-test-tight-mule get pods --selector=name=pg-client -o 'jsonpath={.items[].metadata.name}'
    logger.go:42: 21:03:08 | pg-tde/4-verify-encryption | ++ kubectl -n kuttl-test-tight-mule exec pg-client-65d98588cc-w55wt -- psql -v ON_ERROR_STOP=1 -t -q postgres://postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc/myapp -c 'SELECT pg_tde_is_encrypted('\''myTable'\'');'
    logger.go:42: 21:03:09 | pg-tde/4-verify-encryption | + result=' t'
    logger.go:42: 21:03:09 | pg-tde/4-verify-encryption | + kubectl -n kuttl-test-tight-mule create configmap 05-verify-encryption '--from-literal=pg_tde_is_encrypted= t'
    logger.go:42: 21:03:09 | pg-tde/4-verify-encryption | configmap/05-verify-encryption created
    logger.go:42: 21:03:09 | pg-tde/4-verify-encryption | ++ get_psql_uri pg-tde postgres
    logger.go:42: 21:03:09 | pg-tde/4-verify-encryption | ++ local cluster=pg-tde
    logger.go:42: 21:03:09 | pg-tde/4-verify-encryption | ++ local user=postgres
    logger.go:42: 21:03:09 | pg-tde/4-verify-encryption | ++ local secret_name=pg-tde-pguser-postgres
    logger.go:42: 21:03:09 | pg-tde/4-verify-encryption | +++ get_psql_user_pass pg-tde-pguser-postgres
    logger.go:42: 21:03:09 | pg-tde/4-verify-encryption | +++ local secret_name=pg-tde-pguser-postgres
    logger.go:42: 21:03:09 | pg-tde/4-verify-encryption | +++ kubectl -n kuttl-test-tight-mule get secret/pg-tde-pguser-postgres '--template={{.data.password | base64decode}}'
    logger.go:42: 21:03:10 | pg-tde/4-verify-encryption | +++ get_psql_user_host pg-tde-pguser-postgres
    logger.go:42: 21:03:10 | pg-tde/4-verify-encryption | +++ local secret_name=pg-tde-pguser-postgres
    logger.go:42: 21:03:10 | pg-tde/4-verify-encryption | +++ kubectl -n kuttl-test-tight-mule get secret/pg-tde-pguser-postgres '--template={{.data.host | base64decode }}'
    logger.go:42: 21:03:10 | pg-tde/4-verify-encryption | ++ echo postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc
    logger.go:42: 21:03:10 | pg-tde/4-verify-encryption | + run_psql_command 'SELECT pg_tde_verify_key();' postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc/myapp
    logger.go:42: 21:03:10 | pg-tde/4-verify-encryption | + local 'command=SELECT pg_tde_verify_key();'
    logger.go:42: 21:03:10 | pg-tde/4-verify-encryption | + local uri=postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc/myapp
    logger.go:42: 21:03:10 | pg-tde/4-verify-encryption | + local driver=postgres
    logger.go:42: 21:03:10 | pg-tde/4-verify-encryption | ++ get_client_pod
    logger.go:42: 21:03:10 | pg-tde/4-verify-encryption | ++ kubectl -n kuttl-test-tight-mule get pods --selector=name=pg-client -o 'jsonpath={.items[].metadata.name}'
    logger.go:42: 21:03:11 | pg-tde/4-verify-encryption | + kubectl -n kuttl-test-tight-mule exec pg-client-65d98588cc-w55wt -- psql -v ON_ERROR_STOP=1 -t -q postgres://postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc/myapp -c 'SELECT pg_tde_verify_key();'
    logger.go:42: 21:03:12 | pg-tde/4-verify-encryption |  
    logger.go:42: 21:03:12 | pg-tde/4-verify-encryption | 
    logger.go:42: 21:03:13 | pg-tde/4-verify-encryption | test step completed 4-verify-encryption
    logger.go:42: 21:03:13 | pg-tde/5-create-backup | starting test step 5-create-backup
    logger.go:42: 21:03:13 | pg-tde/5-create-backup | PerconaPGBackup:kuttl-test-tight-mule/backup1 created
    logger.go:42: 21:05:27 | pg-tde/5-create-backup | test step completed 5-create-backup
    logger.go:42: 21:05:27 | pg-tde/6-write-data | starting test step 6-write-data
    logger.go:42: 21:05:27 | pg-tde/6-write-data | running command: [sh -c set -o errexit
        set -o xtrace
        
        source ../../functions
        
        run_psql_local \
          '\c myapp \\\ INSERT INTO myTable (id) VALUES (100501)' \
          "$(get_psql_uri pg-tde postgres)"
        
        sleep 5]
    logger.go:42: 21:05:27 | pg-tde/6-write-data | + source ../../functions
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ realpath ../../..
    logger.go:42: 21:05:27 | pg-tde/6-write-data | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:05:27 | pg-tde/6-write-data | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:05:27 | pg-tde/6-write-data | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:05:27 | pg-tde/6-write-data | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:05:27 | pg-tde/6-write-data | ++ BUSYBOX_VER=1.36
    logger.go:42: 21:05:27 | pg-tde/6-write-data | ++++ pwd
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde
    logger.go:42: 21:05:27 | pg-tde/6-write-data | ++ test_name=pg-tde
    logger.go:42: 21:05:27 | pg-tde/6-write-data | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/vars.sh
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ export TEMP_DIR=/tmp/kuttl/pg/pg-tde
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ TEMP_DIR=/tmp/kuttl/pg/pg-tde
    logger.go:42: 21:05:27 | pg-tde/6-write-data | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ export GIT_BRANCH=PR-1773
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ GIT_BRANCH=PR-1773
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ export VERSION=PR-1773-5cca644cd
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ VERSION=PR-1773-5cca644cd
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:05:27 | pg-tde/6-write-data | +++ [[ -z '' ]]
    logger.go:42: 21:05:27 | pg-tde/6-write-data | ++++ detect_k8s_platform
    logger.go:42: 21:05:27 | pg-tde/6-write-data | ++++ local detected_platform
    logger.go:42: 21:05:27 | pg-tde/6-write-data | ++++ local xtrace_enabled=false
    logger.go:42: 21:05:27 | pg-tde/6-write-data | ++++ [[ -o xtrace ]]
    logger.go:42: 21:05:27 | pg-tde/6-write-data | ++++ xtrace_enabled=true
    logger.go:42: 21:05:27 | pg-tde/6-write-data | ++++ set +o xtrace
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ PLATFORM=gke
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export PLATFORM
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ ! -n '' ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ -n '' ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export PG_VER=18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ PG_VER=18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ PG_DISTRIBUTION=
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ '' == community ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export PGOV1_VER=14
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ PGOV1_VER=14
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ MINIO_VER=5.4.0
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ VAULT_VER=0.32.0
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++++ printenv
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++++ grep -E '^IMAGE'
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++++ awk -F= '{print $1}'
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ echo perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++++ echo perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ var_value=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == docker.io/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == percona/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == perconalab/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:05:29 | pg-tde/6-write-data | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:05:29 | pg-tde/6-write-data | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:05:29 | pg-tde/6-write-data | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:05:29 | pg-tde/6-write-data | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:05:29 | pg-tde/6-write-data | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:05:29 | pg-tde/6-write-data | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++++ which gdate
    logger.go:42: 21:05:29 | pg-tde/6-write-data | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++++ which date
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ date=/usr/sbin/date
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++++ which gsed
    logger.go:42: 21:05:29 | pg-tde/6-write-data | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++++ which sed
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ sed=/usr/sbin/sed
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++ get_psql_uri pg-tde postgres
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++ local cluster=pg-tde
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++ local user=postgres
    logger.go:42: 21:05:29 | pg-tde/6-write-data | ++ local secret_name=pg-tde-pguser-postgres
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ get_psql_user_pass pg-tde-pguser-postgres
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ local secret_name=pg-tde-pguser-postgres
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ kubectl -n kuttl-test-tight-mule get secret/pg-tde-pguser-postgres '--template={{.data.password | base64decode}}'
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ get_psql_user_host pg-tde-pguser-postgres
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ local secret_name=pg-tde-pguser-postgres
    logger.go:42: 21:05:29 | pg-tde/6-write-data | +++ kubectl -n kuttl-test-tight-mule get secret/pg-tde-pguser-postgres '--template={{.data.host | base64decode }}'
    logger.go:42: 21:05:30 | pg-tde/6-write-data | ++ echo postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc
    logger.go:42: 21:05:30 | pg-tde/6-write-data | + run_psql_local '\c myapp \\\ INSERT INTO myTable (id) VALUES (100501)' postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc
    logger.go:42: 21:05:30 | pg-tde/6-write-data | + local 'command=\c myapp \\\ INSERT INTO myTable (id) VALUES (100501)'
    logger.go:42: 21:05:30 | pg-tde/6-write-data | + local uri=postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc
    logger.go:42: 21:05:30 | pg-tde/6-write-data | + local driver=postgres
    logger.go:42: 21:05:30 | pg-tde/6-write-data | ++ get_client_pod
    logger.go:42: 21:05:30 | pg-tde/6-write-data | ++ kubectl -n kuttl-test-tight-mule get pods --selector=name=pg-client -o 'jsonpath={.items[].metadata.name}'
    logger.go:42: 21:05:30 | pg-tde/6-write-data | + kubectl -n kuttl-test-tight-mule exec pg-client-65d98588cc-w55wt -- bash -c 'printf '\''\c myapp \\\ INSERT INTO myTable (id) VALUES (100501)\n'\'' | psql -v ON_ERROR_STOP=1 -t -q postgres://'\''postgres:bQ2JwYVePx1gmEL61qs3vzxS@pg-tde-primary.kuttl-test-tight-mule.svc'\'''
    logger.go:42: 21:05:31 | pg-tde/6-write-data | + sleep 5
    logger.go:42: 21:05:36 | pg-tde/6-write-data | test step completed 6-write-data
    logger.go:42: 21:05:36 | pg-tde/7-create-restore | starting test step 7-create-restore
    logger.go:42: 21:05:37 | pg-tde/7-create-restore | PerconaPGRestore:kuttl-test-tight-mule/restore1 created
    logger.go:42: 21:07:12 | pg-tde/7-create-restore | test step completed 7-create-restore
    logger.go:42: 21:07:12 | pg-tde/8-read-data | starting test step 8-read-data
    logger.go:42: 21:07:12 | pg-tde/8-read-data | running command: [sh -c set -o errexit
        set -o xtrace
        
        source ../../functions
        
        primary=$(get_pod_by_role pg-tde primary name)
        echo "Primary pod: ${primary}"
        data=$(kubectl exec ${primary} -n "${NAMESPACE}" -- bash -c 'psql -q -t -d myapp -c "SELECT * from myTable;"')
        kubectl create configmap -n "${NAMESPACE}" 08-read-from-primary --from-literal=data="${data}"
        
        t=1
        for i in $(kubectl get pods -n "${NAMESPACE}" -l postgres-operator.crunchydata.com/cluster=pg-tde,postgres-operator.crunchydata.com/role=replica -o jsonpath='{.items[*].metadata.name}'); do
          echo "Replica pod: ${i}"
          data=$(kubectl exec ${i} -n "${NAMESPACE}" -- bash -c 'psql -q -t -d myapp -c "SELECT * from myTable;"')
          kubectl create configmap -n "${NAMESPACE}" 08-read-from-replica-${t} --from-literal=data="${data}"
          t=$((t+1))
        done]
    logger.go:42: 21:07:12 | pg-tde/8-read-data | + source ../../functions
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ realpath ../../..
    logger.go:42: 21:07:12 | pg-tde/8-read-data | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:07:12 | pg-tde/8-read-data | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:07:12 | pg-tde/8-read-data | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:07:12 | pg-tde/8-read-data | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:07:12 | pg-tde/8-read-data | ++ BUSYBOX_VER=1.36
    logger.go:42: 21:07:12 | pg-tde/8-read-data | ++++ pwd
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde
    logger.go:42: 21:07:12 | pg-tde/8-read-data | ++ test_name=pg-tde
    logger.go:42: 21:07:12 | pg-tde/8-read-data | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/vars.sh
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ export TEMP_DIR=/tmp/kuttl/pg/pg-tde
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ TEMP_DIR=/tmp/kuttl/pg/pg-tde
    logger.go:42: 21:07:12 | pg-tde/8-read-data | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ export GIT_BRANCH=PR-1773
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ GIT_BRANCH=PR-1773
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ export VERSION=PR-1773-5cca644cd
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ VERSION=PR-1773-5cca644cd
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:07:12 | pg-tde/8-read-data | +++ [[ -z '' ]]
    logger.go:42: 21:07:12 | pg-tde/8-read-data | ++++ detect_k8s_platform
    logger.go:42: 21:07:12 | pg-tde/8-read-data | ++++ local detected_platform
    logger.go:42: 21:07:12 | pg-tde/8-read-data | ++++ local xtrace_enabled=false
    logger.go:42: 21:07:12 | pg-tde/8-read-data | ++++ [[ -o xtrace ]]
    logger.go:42: 21:07:12 | pg-tde/8-read-data | ++++ xtrace_enabled=true
    logger.go:42: 21:07:12 | pg-tde/8-read-data | ++++ set +o xtrace
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ PLATFORM=gke
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export PLATFORM
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ ! -n '' ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ -n '' ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export PG_VER=18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ PG_VER=18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ PG_DISTRIBUTION=
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ '' == community ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export PGOV1_VER=14
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ PGOV1_VER=14
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ MINIO_VER=5.4.0
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ VAULT_VER=0.32.0
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++++ printenv
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++++ grep -E '^IMAGE'
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++++ awk -F= '{print $1}'
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ echo perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++++ echo perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ var_value=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == docker.io/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == percona/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == perconalab/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:07:14 | pg-tde/8-read-data | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:07:14 | pg-tde/8-read-data | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:07:14 | pg-tde/8-read-data | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:07:14 | pg-tde/8-read-data | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:07:14 | pg-tde/8-read-data | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:07:14 | pg-tde/8-read-data | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++++ which gdate
    logger.go:42: 21:07:14 | pg-tde/8-read-data | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++++ which date
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ date=/usr/sbin/date
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++++ which gsed
    logger.go:42: 21:07:14 | pg-tde/8-read-data | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++++ which sed
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ sed=/usr/sbin/sed
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++ get_pod_by_role pg-tde primary name
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++ local cluster=pg-tde
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++ local role=primary
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++ local parameter=name
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++ case ${parameter} in
    logger.go:42: 21:07:14 | pg-tde/8-read-data | ++ local 'jsonpath={.items[].metadata.name}'
    logger.go:42: 21:07:14 | pg-tde/8-read-data | +++ kubectl get pods --namespace kuttl-test-tight-mule --selector=postgres-operator.crunchydata.com/role=primary,postgres-operator.crunchydata.com/cluster=pg-tde -o 'jsonpath={.items[].metadata.name}'
    logger.go:42: 21:07:15 | pg-tde/8-read-data | ++ echo pg-tde-instance1-92sr-0
    logger.go:42: 21:07:15 | pg-tde/8-read-data | + primary=pg-tde-instance1-92sr-0
    logger.go:42: 21:07:15 | pg-tde/8-read-data | + echo 'Primary pod: pg-tde-instance1-92sr-0'
    logger.go:42: 21:07:15 | pg-tde/8-read-data | Primary pod: pg-tde-instance1-92sr-0
    logger.go:42: 21:07:15 | pg-tde/8-read-data | ++ kubectl exec pg-tde-instance1-92sr-0 -n kuttl-test-tight-mule -- bash -c 'psql -q -t -d myapp -c "SELECT * from myTable;"'
    logger.go:42: 21:07:16 | pg-tde/8-read-data | + data=$' 100500\n 100501'
    logger.go:42: 21:07:16 | pg-tde/8-read-data | + kubectl create configmap -n kuttl-test-tight-mule 08-read-from-primary $'--from-literal=data= 100500\n 100501'
    logger.go:42: 21:07:17 | pg-tde/8-read-data | configmap/08-read-from-primary created
    logger.go:42: 21:07:17 | pg-tde/8-read-data | + t=1
    logger.go:42: 21:07:17 | pg-tde/8-read-data | ++ kubectl get pods -n kuttl-test-tight-mule -l postgres-operator.crunchydata.com/cluster=pg-tde,postgres-operator.crunchydata.com/role=replica -o 'jsonpath={.items[*].metadata.name}'
    logger.go:42: 21:07:17 | pg-tde/8-read-data | + for i in $(kubectl get pods -n "${NAMESPACE}" -l postgres-operator.crunchydata.com/cluster=pg-tde,postgres-operator.crunchydata.com/role=replica -o jsonpath='{.items[*].metadata.name}')
    logger.go:42: 21:07:17 | pg-tde/8-read-data | + echo 'Replica pod: pg-tde-instance1-nn9t-0'
    logger.go:42: 21:07:17 | pg-tde/8-read-data | Replica pod: pg-tde-instance1-nn9t-0
    logger.go:42: 21:07:17 | pg-tde/8-read-data | ++ kubectl exec pg-tde-instance1-nn9t-0 -n kuttl-test-tight-mule -- bash -c 'psql -q -t -d myapp -c "SELECT * from myTable;"'
    logger.go:42: 21:07:19 | pg-tde/8-read-data | + data=$' 100500\n 100501'
    logger.go:42: 21:07:19 | pg-tde/8-read-data | + kubectl create configmap -n kuttl-test-tight-mule 08-read-from-replica-1 $'--from-literal=data= 100500\n 100501'
    logger.go:42: 21:07:19 | pg-tde/8-read-data | configmap/08-read-from-replica-1 created
    logger.go:42: 21:07:19 | pg-tde/8-read-data | + t=2
    logger.go:42: 21:07:19 | pg-tde/8-read-data | + for i in $(kubectl get pods -n "${NAMESPACE}" -l postgres-operator.crunchydata.com/cluster=pg-tde,postgres-operator.crunchydata.com/role=replica -o jsonpath='{.items[*].metadata.name}')
    logger.go:42: 21:07:19 | pg-tde/8-read-data | + echo 'Replica pod: pg-tde-instance1-whvr-0'
    logger.go:42: 21:07:19 | pg-tde/8-read-data | Replica pod: pg-tde-instance1-whvr-0
    logger.go:42: 21:07:19 | pg-tde/8-read-data | ++ kubectl exec pg-tde-instance1-whvr-0 -n kuttl-test-tight-mule -- bash -c 'psql -q -t -d myapp -c "SELECT * from myTable;"'
    logger.go:42: 21:07:20 | pg-tde/8-read-data | + data=$' 100500\n 100501'
    logger.go:42: 21:07:20 | pg-tde/8-read-data | + kubectl create configmap -n kuttl-test-tight-mule 08-read-from-replica-2 $'--from-literal=data= 100500\n 100501'
    logger.go:42: 21:07:21 | pg-tde/8-read-data | configmap/08-read-from-replica-2 created
    logger.go:42: 21:07:21 | pg-tde/8-read-data | + t=3
    logger.go:42: 21:07:22 | pg-tde/8-read-data | test step completed 8-read-data
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | starting test step 9-change-vault-provider
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | running command: [sh -c set -o errexit
        set -o xtrace
        
        source ../../functions
        
        vault_name=vault-service
        
        old_token=$(kubectl -n "${NAMESPACE}" get secret vault-secret -o jsonpath='{.data.token}' | base64 -d)
        new_token=$(kubectl -n ${vault_name} exec ${vault_name}-0 -- \
          sh -c "VAULT_TOKEN=${old_token} vault token create -tls-skip-verify -format=json" | jq -r '.auth.client_token')
        
        kubectl -n "${NAMESPACE}" get secret vault-secret -o jsonpath='{.data.ca\.crt}' \
          | base64 -d > ${TEMP_DIR}/ca.crt
        
        kubectl -n "${NAMESPACE}" create secret generic vault-secret-rotated \
          --from-literal=token=${new_token} \
          --from-file=ca.crt=${TEMP_DIR}/ca.crt
        
        get_cr \
          | yq '.spec.extensions.pg_tde.enabled = true' \
          | yq '.spec.extensions.pg_tde.vault.host = "https://vault-service.vault.svc:8200"' \
          | yq '.spec.extensions.pg_tde.vault.mountPath = "tde"' \
          | yq '.spec.extensions.pg_tde.vault.tokenSecret.name = "vault-secret-rotated"' \
          | yq '.spec.extensions.pg_tde.vault.tokenSecret.key = "token"' \
          | yq '.spec.extensions.pg_tde.vault.caSecret.name = "vault-secret-rotated"' \
          | yq '.spec.extensions.pg_tde.vault.caSecret.key = "ca.crt"' \
          | kubectl -n "${NAMESPACE}" apply -f -]
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | + source ../../functions
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ realpath ../../..
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | ++ CERT_MANAGER_VER=1.20.2
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | ++ CHAOS_MESH_VER=2.5.1
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | ++ BUSYBOX_VER=1.36
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | ++++ pwd
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | ++ test_name=pg-tde
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/vars.sh
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/conf
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ export TEMP_DIR=/tmp/kuttl/pg/pg-tde
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ TEMP_DIR=/tmp/kuttl/pg/pg-tde
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | ++++ git rev-parse --abbrev-ref HEAD
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ export GIT_BRANCH=PR-1773
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ GIT_BRANCH=PR-1773
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ export VERSION=PR-1773-5cca644cd
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ VERSION=PR-1773-5cca644cd
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ export SKIP_TEST_WARNINGS=true
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ SKIP_TEST_WARNINGS=true
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ export K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ K8S_UPGRADE_PLATFORM=gke
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ export K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ K8S_UPGRADE_REGION=us-central1-a
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ export K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ K8S_UPGRADE_INITIAL_VERSION=
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ export K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ K8S_UPGRADE_FINAL_VERSION=
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | +++ [[ -z '' ]]
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | ++++ detect_k8s_platform
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | ++++ local detected_platform
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | ++++ local xtrace_enabled=false
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | ++++ [[ -o xtrace ]]
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | ++++ xtrace_enabled=true
    logger.go:42: 21:07:22 | pg-tde/9-change-vault-provider | ++++ set +o xtrace
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ PLATFORM=gke
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export PLATFORM
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ IMAGE_BASE=perconalab/percona-postgresql-operator
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ ! -n '' ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ -n '' ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export PG_VER=18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ PG_VER=18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export PG_DISTRIBUTION=
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ PG_DISTRIBUTION=
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ '' == community ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export BUCKET=pg-operator-testing
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ BUCKET=pg-operator-testing
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ PMM_SERVER_VERSION=9.9.9
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export PGOV1_TAG=1.4.0
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ PGOV1_TAG=1.4.0
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export PGOV1_VER=14
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ PGOV1_VER=14
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export CPGO_VERSION=5.8.7
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ CPGO_VERSION=5.8.7
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export MINIO_VER=5.4.0
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ MINIO_VER=5.4.0
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export VAULT_VER=0.32.0
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ VAULT_VER=0.32.0
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export REGISTRY_NAME=docker.io
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ REGISTRY_NAME=docker.io
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ REGISTRY_NAME_FULL=docker.io/
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | ++++ printenv
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | ++++ grep -E '^IMAGE'
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | ++++ awk -F= '{print $1}'
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | ++++ eval 'echo $IMAGE_BACKREST'
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ echo perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | ++++ eval 'echo $IMAGE'
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++++ echo perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ var_value=perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == docker.io/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == percona/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/percona-postgresql-operator:PR-1773-5cca644cd == perconalab/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | ++++ eval 'echo $IMAGE_UPGRADE'
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++++ echo perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | ++++ eval 'echo $IMAGE_LOGCOLLECTOR'
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++++ echo perconalab/fluentbit:main-logcollector
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ var_value=perconalab/fluentbit:main-logcollector
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | ++++ eval 'echo $IMAGE_BASE'
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++++ echo perconalab/percona-postgresql-operator
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ var_value=perconalab/percona-postgresql-operator
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/percona-postgresql-operator == percona/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ new_value=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | ++++ eval 'echo $IMAGE_PGBOUNCER'
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | ++++ eval 'echo $IMAGE_POSTGRESQL'
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | ++++ eval 'echo $IMAGE_PMM_SERVER'
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++++ echo perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ var_value=perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}')
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | ++++ eval 'echo $IMAGE_PMM_CLIENT'
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++++ echo perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ var_value=perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]]
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | ++++ which gdate
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | ++++ which date
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ date=/usr/sbin/date
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | ++++ which gsed
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin)
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | ++++ which sed
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | +++ sed=/usr/sbin/sed
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | + vault_name=vault-service
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | ++ kubectl -n kuttl-test-tight-mule get secret vault-secret -o 'jsonpath={.data.token}'
    logger.go:42: 21:07:24 | pg-tde/9-change-vault-provider | ++ base64 -d
    logger.go:42: 21:07:25 | pg-tde/9-change-vault-provider | + old_token=hvs.SvpQzPIL2n8dBLRBYPsH8tlM
    logger.go:42: 21:07:25 | pg-tde/9-change-vault-provider | ++ jq -r .auth.client_token
    logger.go:42: 21:07:25 | pg-tde/9-change-vault-provider | ++ kubectl -n vault-service exec vault-service-0 -- sh -c 'VAULT_TOKEN=hvs.SvpQzPIL2n8dBLRBYPsH8tlM vault token create -tls-skip-verify -format=json'
    logger.go:42: 21:07:25 | pg-tde/9-change-vault-provider | Error from server (NotFound): namespaces "vault-service" not found
    logger.go:42: 21:07:25 | pg-tde/9-change-vault-provider | + new_token=
    logger.go:42: 21:07:25 | pg-tde/9-change-vault-provider | + kubectl -n kuttl-test-tight-mule get secret vault-secret -o 'jsonpath={.data.ca\.crt}'
    logger.go:42: 21:07:25 | pg-tde/9-change-vault-provider | + base64 -d
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + kubectl -n kuttl-test-tight-mule create secret generic vault-secret-rotated --from-literal=token= --from-file=ca.crt=/tmp/kuttl/pg/pg-tde/ca.crt
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | secret/vault-secret-rotated created
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + get_cr
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + yq '.spec.extensions.pg_tde.enabled = true'
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + local cr_name=pg-tde
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + local repo_path=
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + local source_path=
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + local platform=gke
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + local cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf/pg-tde.yaml
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + local platform_cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf/pg-tde-gke.yaml
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + local spaces_cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf/pg-tde-spaces.yaml
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + [[ -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf/pg-tde-gke.yaml ]]
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + yq '.spec.extensions.pg_tde.vault.host = "https://vault-service.vault.svc:8200"'
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + [[ gke == doks ]]
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + crs=('/mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy/cr.yaml')
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + local crs
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + [[ -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/e2e-tests/tests/pg-tde/conf/pg-tde.yaml ]]
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + yq eval-all $'\n\t\tselect(fileIndex == 0) * (select(fileIndex == 1) // {}) |\n\t\t.metadata.name = "pg-tde" |\n\t\t.metadata.labels = {"e2e":"pg-tde"} |\n\t\t.spec.postgresVersion = 18 |\n\t\t.spec.users += [{"name":"postgres","password":{"type":"AlphaNumeric"}}] |\n\t\t.spec.users += [{"name":"pg-tde","password":{"type":"AlphaNumeric"}}] |\n\t\t.spec.image = "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" |\n\t\t.spec.initContainer.image = "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd" |\n\t\t.spec.backups.pgbackrest.image = "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" |\n\t\t.spec.proxy.pgBouncer.image = "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" |\n\t\t.spec.logcollector.image = "docker.io/perconalab/fluentbit:main-logcollector" |\n\t\t.spec.pmm.image = "docker.io/perconalab/pmm-client:3-dev-latest" |\n\t\t.spec.pmm.secret = "pg-tde-pmm-secret" |\n\t\t.spec.pmm.customClusterName = "pg-tde-pmm-custom-name" |\n\t\t.spec.pmm.postgresParams = "--environment=dev-postgres"\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1773/deploy/cr.yaml
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + yq '.spec.extensions.pg_tde.vault.mountPath = "tde"'
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + yq '.spec.extensions.pg_tde.vault.tokenSecret.name = "vault-secret-rotated"'
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + yq '.spec.extensions.pg_tde.vault.tokenSecret.key = "token"'
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + yq '.spec.extensions.pg_tde.vault.caSecret.key = "ca.crt"'
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + yq '.spec.extensions.pg_tde.vault.caSecret.name = "vault-secret-rotated"'
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + kubectl -n kuttl-test-tight-mule apply -f -
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + /usr/sbin/sed -i 's|<repo-path>||g' /tmp/kuttl/pg/pg-tde/cr.yaml
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + /usr/sbin/sed -i 's|<source-path>||g' /tmp/kuttl/pg/pg-tde/cr.yaml
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + /usr/sbin/sed -i 's|<bucket>|pg-operator-testing|g' /tmp/kuttl/pg/pg-tde/cr.yaml
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + /usr/sbin/sed -i 's|<image>|docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd|g' /tmp/kuttl/pg/pg-tde/cr.yaml
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + [[ gke == openshift ]]
    logger.go:42: 21:07:26 | pg-tde/9-change-vault-provider | + cat /tmp/kuttl/pg/pg-tde/cr.yaml
    logger.go:42: 21:07:28 | pg-tde/9-change-vault-provider | perconapgcluster.pgv2.percona.com/pg-tde configured
    logger.go:42: 21:07:29 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:07:30 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:07:32 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:07:33 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:07:34 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:35 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:07:36 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:07:37 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:07:38 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:39 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:07:40 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:07:41 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:07:42 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:43 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:07:44 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:07:45 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:07:46 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:47 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:07:48 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:07:49 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:07:50 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:51 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:07:52 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:07:53 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:07:54 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:55 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:07:56 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:07:57 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:07:58 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:07:59 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:08:00 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:08:01 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:08:02 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:03 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:08:04 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:08:05 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:08:06 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:07 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:08:08 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:08:09 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:08:10 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:11 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:08:12 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:08:13 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:08:14 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:15 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:08:16 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:08:17 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:08:18 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:19 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:08:20 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:08:21 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:08:22 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:23 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:08:24 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:08:25 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:08:26 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:27 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:08:28 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:08:29 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:08:30 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:31 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:08:32 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:08:33 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:08:34 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:35 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:08:36 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:08:37 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:08:38 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:39 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:08:40 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:08:41 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:08:42 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:43 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:08:44 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:08:45 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:08:46 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:47 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:08:48 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:08:49 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:08:50 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:51 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:08:52 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:08:53 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:08:54 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:55 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:08:56 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:08:57 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:08:58 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:08:59 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:09:00 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:09:01 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:02 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:09:04 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:09:05 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:06 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:09:08 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:09:09 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:10 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:09:12 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:09:12 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:14 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:09:16 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:09:16 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:18 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:09:20 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:09:21 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:09:22 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:23 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:09:24 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:09:25 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:09:26 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:27 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:09:28 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:09:29 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:09:30 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:31 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:09:33 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:09:34 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:35 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:09:37 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:09:38 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:39 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:09:41 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:09:42 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:43 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:09:45 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:09:46 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:47 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:09:49 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:09:50 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:09:51 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:52 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:09:53 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:09:54 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:09:55 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:09:56 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:09:57 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:09:58 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:09:59 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:00 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:10:01 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:10:02 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:10:03 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:04 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:10:05 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:10:06 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:10:07 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:08 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:10:09 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:10:10 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:10:11 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:12 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:10:13 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:10:14 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:10:15 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:16 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:10:17 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:10:18 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:10:19 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:20 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:10:21 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:10:22 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:10:23 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:24 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:10:25 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:10:26 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:10:27 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:28 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:10:29 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:10:30 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:10:31 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:32 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:10:33 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:10:34 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:10:35 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:36 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:10:37 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:10:38 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:10:39 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:40 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:10:41 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:10:42 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:10:43 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:44 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:10:45 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:10:46 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:10:47 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:48 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:10:49 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:10:50 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:10:51 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:52 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:10:53 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:10:54 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:10:55 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:56 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:10:57 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:10:58 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:10:59 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:11:01 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:11:02 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:03 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:11:05 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:11:05 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:07 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:11:09 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:11:09 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:11:11 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:12 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:11:13 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:11:14 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:11:15 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:16 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:11:17 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:11:18 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:11:19 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:20 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:11:21 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:11:22 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:11:23 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:24 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:11:25 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:11:26 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:11:27 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:28 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:11:29 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:11:30 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:11:31 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:32 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:11:33 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:11:34 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:11:35 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:36 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:11:37 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:11:38 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:11:39 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:40 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:11:41 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:11:42 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:11:43 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:44 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:11:45 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:11:46 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:11:47 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:48 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:11:49 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:11:50 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:51 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:11:53 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:11:54 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:55 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:11:57 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:11:58 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:11:59 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:12:01 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:12:02 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:03 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:12:05 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:12:06 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:07 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:12:09 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:12:09 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:11 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:12:13 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:12:13 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:15 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:12:17 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:12:17 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:12:18 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:19 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:12:21 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:12:21 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:12:22 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:23 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:12:25 | pg-tde/9-change-vault-provider | running command: [sh -c tmp=$(mktemp)
        kubectl -n $NAMESPACE get pg pg-tde -o yaml | yq '.status.conditions.[] | select(.type == "PGTDEEnabled")' > ${tmp}
        [[ $(cat ${tmp} | yq .message) == "pg_tde is enabled in PerconaPGCluster" ]]
        [[ $(cat ${tmp} | yq .reason) == "Enabled" ]]
        [[ $(cat ${tmp} | yq .status) == "True" ]]
        ]
    logger.go:42: 21:12:25 | pg-tde/9-change-vault-provider | running command: [sh -c # PGTDEVaultProviderReady is owned by the crunchy controller and mirrored
        # to the PerconaPGCluster status
        condStatus=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].status}')
        condReason=$(kubectl -n "${NAMESPACE}" get pg pg-tde -o jsonpath='{.status.conditions[?(@.type=="PGTDEVaultProviderReady")].reason}')
        
        if [[ ${condStatus} != "True" || ${condReason} != "Configured" ]]; then
          echo "ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got '${condStatus}'/'${condReason}'"
          kubectl -n "${NAMESPACE}" get pg pg-tde -o yaml | yq '.status.conditions'
          exit 1
        fi
        ]
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider | ERROR: PGTDEVaultProviderReady in PerconaPGCluster status should be True/Configured, got 'False'/'ChangeFailed'
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:27Z"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   message: ""
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   reason: AllConditionsAreTrue
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   type: ReadyForBackup
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:01:50Z"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   message: certManagementPolicy is auto
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   reason: TLSSecretsFound
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   type: TLSSecretsReady
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:19Z"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   message: pgBackRest dedicated repository host is ready
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   reason: RepoHostReady
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   type: PGBackRestRepoHostReady
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   message: pgBackRest replica create repo is ready for backups
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   reason: StanzaCreated
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaRepoReady
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:25Z"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   message: pgBackRest replica creation is now possible
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   reason: RepoBackupComplete
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   type: PGBackRestReplicaCreate
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:05Z"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   message: Deployment has minimum availability.
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   reason: MinimumReplicasAvailable
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   type: ProxyAvailable
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:17Z"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   message: Legacy API group is not installed
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   observedGeneration: 1
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   reason: APIGroupMigrationNotNeeded
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   type: APIGroupMigration
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:02:18Z"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   message: pg_tde is enabled in PerconaPGCluster
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   reason: Enabled
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   type: PGTDEEnabled
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:07:31Z"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   message: command terminated with exit code 3
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   reason: ChangeFailed
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   status: "False"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   type: PGTDEVaultProviderReady
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider | - lastTransitionTime: "2026-08-21T21:06:11Z"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   message: pgBackRest restore completed successfully
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   observedGeneration: 5
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   reason: PGBackRestRestoreComplete
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   status: "True"
    logger.go:42: 21:12:27 | pg-tde/9-change-vault-provider |   type: PostgresDataInitialized
    logger.go:42: 21:12:28 | pg-tde/9-change-vault-provider | test step failed 9-change-vault-provider
    case.go:328: failed in step 9-change-vault-provider
    case.go:330: --- StatefulSet:kuttl-test-tight-mule/
        +++ StatefulSet:kuttl-test-tight-mule/pg-tde-instance1-92sr
        @@ -1,10 +1,21 @@
         apiVersion: apps/v1
         kind: StatefulSet
         metadata:
        +  annotations:
        +    pgv2.percona.com/logcollector-config-hash: d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77
           labels:
        +    app.kubernetes.io/component: pg
        +    app.kubernetes.io/instance: pg-tde
        +    app.kubernetes.io/managed-by: percona-postgresql-operator
        +    app.kubernetes.io/name: percona-postgresql
        +    app.kubernetes.io/part-of: percona-postgresql
        +    pgv2.percona.com/version: 3.1.0
             postgres-operator.crunchydata.com/cluster: pg-tde
             postgres-operator.crunchydata.com/data: postgres
        +    postgres-operator.crunchydata.com/instance: pg-tde-instance1-92sr
             postgres-operator.crunchydata.com/instance-set: instance1
        +  managedFields: '[... elided field over 10 lines long ...]'
        +  name: pg-tde-instance1-92sr
           namespace: kuttl-test-tight-mule
           ownerReferences:
           - apiVersion: upstream.pgv2.percona.com/v1beta1
        @@ -12,11 +23,131 @@
             controller: true
             kind: PostgresCluster
             name: pg-tde
        +    uid: 7f4a2880-3777-4397-9b75-3c9bd493a306
         spec:
        +  persistentVolumeClaimRetentionPolicy:
        +    whenDeleted: Retain
        +    whenScaled: Retain
        +  podManagementPolicy: OrderedReady
        +  replicas: 1
        +  revisionHistoryLimit: 0
        +  selector:
        +    matchLabels:
        +      postgres-operator.crunchydata.com/cluster: pg-tde
        +      postgres-operator.crunchydata.com/instance: pg-tde-instance1-92sr
        +      postgres-operator.crunchydata.com/instance-set: instance1
        +  serviceName: pg-tde-pods
           template:
        +    metadata: '[... elided field over 10 lines long ...]'
             spec:
        +      affinity:
        +        podAntiAffinity:
        +          preferredDuringSchedulingIgnoredDuringExecution:
        +          - podAffinityTerm:
        +              labelSelector:
        +                matchLabels:
        +                  postgres-operator.crunchydata.com/data: postgres
        +              topologyKey: kubernetes.io/hostname
        +            weight: 1
               containers:
        -      - name: database
        +      - command:
        +        - /opt/crunchy/bin/postgres-entrypoint.sh
        +        - patroni
        +        - /etc/patroni
        +        env:
        +        - name: PGDATA
        +          value: /pgdata/pg18
        +        - name: PGHOST
        +          value: /tmp/postgres
        +        - name: PGPORT
        +          value: "5432"
        +        - name: KRB5_CONFIG
        +          value: /etc/postgres/krb5.conf
        +        - name: KRB5RCACHEDIR
        +          value: /tmp
        +        - name: LDAPTLS_CACERT
        +          value: /etc/postgres/ldap/ca.crt
        +        - name: LC_ALL
        +          value: en_US.utf-8
        +        - name: LANG
        +          value: en_US.utf-8
        +        - name: PATRONI_NAME
        +          valueFrom:
        +            fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.name
        +        - name: PATRONI_KUBERNETES_POD_IP
        +          valueFrom:
        +            fieldRef:
        +              apiVersion: v1
        +              fieldPath: status.podIP
        +        - name: PATRONI_KUBERNETES_PORTS
        +          value: |
        +            - name: postgres
        +              port: 5432
        +              protocol: TCP
        +        - name: PATRONI_POSTGRESQL_CONNECT_ADDRESS
        +          value: $(PATRONI_NAME).pg-tde-pods:5432
        +        - name: PATRONI_POSTGRESQL_LISTEN
        +          value: '*:5432'
        +        - name: PATRONI_POSTGRESQL_CONFIG_DIR
        +          value: /pgdata/pg18
        +        - name: PATRONI_POSTGRESQL_DATA_DIR
        +          value: /pgdata/pg18
        +        - name: PATRONI_RESTAPI_CONNECT_ADDRESS
        +          value: $(PATRONI_NAME).pg-tde-pods:8008
        +        - name: PATRONI_RESTAPI_LISTEN
        +          value: '*:8008'
        +        - name: PATRONICTL_CONFIG_FILE
        +          value: /etc/patroni
        +        - name: LD_PRELOAD
        +          value: /usr/lib64/libnss_wrapper.so
        +        - name: NSS_WRAPPER_PASSWD
        +          value: /tmp/nss_wrapper/postgres/passwd
        +        - name: NSS_WRAPPER_GROUP
        +          value: /tmp/nss_wrapper/postgres/group
        +        image: docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
        +        imagePullPolicy: Always
        +        livenessProbe:
        +          exec:
        +            command:
        +            - bash
        +            - -c
        +            - /opt/crunchy/bin/postgres-liveness-check.sh
        +          failureThreshold: 3
        +          initialDelaySeconds: 3
        +          periodSeconds: 10
        +          successThreshold: 1
        +          timeoutSeconds: 5
        +        name: database
        +        ports:
        +        - containerPort: 5432
        +          name: postgres
        +          protocol: TCP
        +        readinessProbe:
        +          exec:
        +            command:
        +            - bash
        +            - -c
        +            - /opt/crunchy/bin/postgres-readiness-check.sh
        +          failureThreshold: 3
        +          initialDelaySeconds: 3
        +          periodSeconds: 10
        +          successThreshold: 1
        +          timeoutSeconds: 5
        +        resources: {}
        +        securityContext:
        +          allowPrivilegeEscalation: false
        +          capabilities:
        +            drop:
        +            - ALL
        +          privileged: false
        +          readOnlyRootFilesystem: true
        +          runAsNonRoot: true
        +          seccompProfile:
        +            type: RuntimeDefault
        +        terminationMessagePath: /dev/termination-log
        +        terminationMessagePolicy: File
                 volumeMounts:
                 - mountPath: /pgconf/tls
                   name: cert-volume
        @@ -41,15 +172,319 @@
                   name: tmp
                 - mountPath: /dev/shm
                   name: dshm
        -      - name: replication-cert-copy
        -      - name: logs
        -      - name: logrotate
        -      - name: pgbackrest
        -      - name: pgbackrest-config
        +      - command:
        +        - bash
        +        - -ceu
        +        - --
        +        - |-
        +          monitor() {
        +          # Parameters for curl when managing autogrow annotation.
        +          APISERVER="https://kubernetes.default.svc"
        +          SERVICEACCOUNT="/var/run/secrets/kubernetes.io/serviceaccount"
        +          NAMESPACE=$(cat ${SERVICEACCOUNT}/namespace)
        +          TOKEN=$(cat ${SERVICEACCOUNT}/token)
        +          CACERT=${SERVICEACCOUNT}/ca.crt
        +
        +          declare -r directory="/pgconf/tls"
        +          exec {fd}<> <(:||:)
        +          while read -r -t 5 -u "${fd}" ||:; do
        +            # Manage replication certificate.
        +            if [[ "${directory}" -nt "/proc/self/fd/${fd}" ]] &&
        +              install -D --mode=0600 -t "/tmp/replication" "${directory}"/{replication/tls.crt,replication/tls.key,replication/ca.crt} &&
        +              pkill -HUP --exact --parent=1 postgres
        +            then
        +              exec {fd}>&- && exec {fd}<> <(:||:)
        +              stat --format='Loaded certificates dated %y' "${directory}"
        +            fi
        +
        +          done
        +          }; export -f monitor; exec -a "$0" bash -ceu monitor
        +        - replication-cert-copy
        +        image: docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
        +        imagePullPolicy: Always
        +        name: replication-cert-copy
        +        resources: {}
        +        securityContext:
        +          allowPrivilegeEscalation: false
        +          capabilities:
        +            drop:
        +            - ALL
        +          privileged: false
        +          readOnlyRootFilesystem: true
        +          runAsNonRoot: true
        +          seccompProfile:
        +            type: RuntimeDefault
        +        terminationMessagePath: /dev/termination-log
        +        terminationMessagePolicy: File
        +        volumeMounts:
        +        - mountPath: /pgconf/tls
        +          name: cert-volume
        +          readOnly: true
        +        - mountPath: /pgdata
        +          name: postgres-data
        +        - mountPath: /tmp
        +          name: tmp
        +      - args:
        +        - fluent-bit
        +        command:
        +        - /opt/crunchy/logcollector/entrypoint.sh
        +        env:
        +        - name: PG_LOG_DIR
        +          value: /pgdata/pg18/log
        +        - name: PGBACKREST_LOG_DIR
        +          value: /pgdata/pgbackrest/log
        +        - name: POD_NAMESPACE
        +          valueFrom:
        +            fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.namespace
        +        - name: POD_NAME
        +          valueFrom:
        +            fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.name
        +        image: docker.io/perconalab/fluentbit:main-logcollector
        +        imagePullPolicy: IfNotPresent
        +        name: logs
        +        resources: {}
        +        securityContext:
        +          allowPrivilegeEscalation: false
        +          capabilities:
        +            drop:
        +            - ALL
        +          privileged: false
        +          runAsGroup: 26
        +          runAsNonRoot: true
        +          runAsUser: 26
        +          seccompProfile:
        +            type: RuntimeDefault
        +        terminationMessagePath: /dev/termination-log
        +        terminationMessagePolicy: File
        +        volumeMounts:
        +        - mountPath: /pgdata
        +          name: postgres-data
        +        - mountPath: /opt/crunchy
        +          name: crunchy-bin
        +        - mountPath: /tmp
        +          name: tmp
        +      - args:
        +        - logrotate
        +        command:
        +        - /opt/crunchy/logcollector/entrypoint.sh
        +        env:
        +        - name: POD_NAMESPACE
        +          valueFrom:
        +            fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.namespace
        +        - name: POD_NAME
        +          valueFrom:
        +            fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.name
        +        - name: LOGROTATE_SCHEDULE
        +          value: 0 0 * * *
        +        - name: LD_PRELOAD
        +          value: /tmp/nss_wrapper/libnss_wrapper.so
        +        - name: NSS_WRAPPER_PASSWD
        +          value: /tmp/nss_wrapper/postgres/passwd
        +        - name: NSS_WRAPPER_GROUP
        +          value: /tmp/nss_wrapper/postgres/group
        +        image: docker.io/perconalab/fluentbit:main-logcollector
        +        imagePullPolicy: IfNotPresent
        +        name: logrotate
        +        resources: {}
        +        securityContext:
        +          allowPrivilegeEscalation: false
        +          capabilities:
        +            drop:
        +            - ALL
        +          privileged: false
        +          runAsGroup: 26
        +          runAsNonRoot: true
        +          runAsUser: 26
        +          seccompProfile:
        +            type: RuntimeDefault
        +        terminationMessagePath: /dev/termination-log
        +        terminationMessagePolicy: File
        +        volumeMounts:
        +        - mountPath: /pgdata
        +          name: postgres-data
        +        - mountPath: /opt/crunchy
        +          name: crunchy-bin
        +        - mountPath: /tmp
        +          name: tmp
        +      - command:
        +        - pgbackrest
        +        - server
        +        env:
        +        - name: LD_PRELOAD
        +          value: /usr/lib64/libnss_wrapper.so
        +        - name: NSS_WRAPPER_PASSWD
        +          value: /tmp/nss_wrapper/postgres/passwd
        +        - name: NSS_WRAPPER_GROUP
        +          value: /tmp/nss_wrapper/postgres/group
        +        image: docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
        +        imagePullPolicy: Always
        +        livenessProbe:
        +          exec:
        +            command:
        +            - pgbackrest
        +            - server-ping
        +          failureThreshold: 3
        +          periodSeconds: 10
        +          successThreshold: 1
        +          timeoutSeconds: 1
        +        name: pgbackrest
        +        resources: {}
        +        securityContext:
        +          allowPrivilegeEscalation: false
        +          capabilities:
        +            drop:
        +            - ALL
        +          privileged: false
        +          readOnlyRootFilesystem: true
        +          runAsNonRoot: true
        +          seccompProfile:
        +            type: RuntimeDefault
        +        terminationMessagePath: /dev/termination-log
        +        terminationMessagePolicy: File
        +        volumeMounts:
        +        - mountPath: /etc/pgbackrest/server
        +          name: pgbackrest-server
        +          readOnly: true
        +        - mountPath: /pgdata
        +          name: postgres-data
        +        - mountPath: /etc/pgbackrest/conf.d
        +          name: pgbackrest-config
        +          readOnly: true
        +        - mountPath: /tmp
        +          name: tmp
        +      - command:
        +        - bash
        +        - -ceu
        +        - --
        +        - |-
        +          monitor() {
        +          exec {fd}<> <(:||:)
        +          until read -r -t 5 -u "${fd}"; do
        +            if
        +              [[ "${filename}" -nt "/proc/self/fd/${fd}" ]] &&
        +              pkill -HUP --exact --parent=0 pgbackrest
        +            then
        +              exec {fd}>&- && exec {fd}<> <(:||:)
        +              stat --dereference --format='Loaded configuration dated %y' "${filename}"
        +            elif
        +              { [[ "${directory}" -nt "/proc/self/fd/${fd}" ]] ||
        +                [[ "${authority}" -nt "/proc/self/fd/${fd}" ]]
        +              } &&
        +              pkill -HUP --exact --parent=0 pgbackrest
        +            then
        +              exec {fd}>&- && exec {fd}<> <(:||:)
        +              stat --format='Loaded certificates dated %y' "${directory}"
        +            fi
        +          done
        +          }; export directory="$1" authority="$2" filename="$3"; export -f monitor; exec -a "$0" bash -ceu monitor
        +        - pgbackrest-config
        +        - /etc/pgbackrest/server
        +        - /etc/pgbackrest/conf.d/~postgres-operator/tls-ca.crt
        +        - /etc/pgbackrest/conf.d/~postgres-operator_server.conf
        +        image: docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
        +        imagePullPolicy: Always
        +        name: pgbackrest-config
        +        resources: {}
        +        securityContext:
        +          allowPrivilegeEscalation: false
        +          capabilities:
        +            drop:
        +            - ALL
        +          privileged: false
        +          readOnlyRootFilesystem: true
        +          runAsNonRoot: true
        +          seccompProfile:
        +            type: RuntimeDefault
        +        terminationMessagePath: /dev/termination-log
        +        terminationMessagePolicy: File
        +        volumeMounts:
        +        - mountPath: /etc/pgbackrest/server
        +          name: pgbackrest-server
        +          readOnly: true
        +        - mountPath: /etc/pgbackrest/conf.d
        +          name: pgbackrest-config
        +          readOnly: true
        +        - mountPath: /tmp
        +          name: tmp
        +      dnsPolicy: ClusterFirst
        +      enableServiceLinks: false
        +      initContainers: '[... elided field over 10 lines long ...]'
        +      restartPolicy: Always
        +      schedulerName: default-scheduler
        +      securityContext:
        +        fsGroup: 26
        +        fsGroupChangePolicy: OnRootMismatch
        +      serviceAccount: pg-tde-instance
        +      serviceAccountName: pg-tde-instance
        +      shareProcessNamespace: true
        +      terminationGracePeriodSeconds: 30
        +      topologySpreadConstraints: '[... elided field over 10 lines long ...]'
               volumes:
               - name: cert-volume
        +        projected:
        +          defaultMode: 384
        +          sources:
        +          - secret:
        +              items:
        +              - key: tls.crt
        +                path: tls.crt
        +              - key: tls.key
        +                path: tls.key
        +              - key: ca.crt
        +                path: ca.crt
        +              name: pg-tde-cluster-cert
        +          - secret:
        +              items:
        +              - key: tls.crt
        +                path: replication/tls.crt
        +              - key: tls.key
        +                path: replication/tls.key
        +              - key: ca.crt
        +                path: replication/ca.crt
        +              name: pg-tde-replication-cert
               - name: postgres-data
        -      - name: database-containerinfo
        +        persistentVolumeClaim:
        +          claimName: pg-tde-instance1-92sr-pgdata
        +      - downwardAPI:
        +          defaultMode: 420
        +          items:
        +          - path: cpu_limit
        +            resourceFieldRef:
        +              containerName: database
        +              divisor: 1m
        +              resource: limits.cpu
        +          - path: cpu_request
        +            resourceFieldRef:
        +              containerName: database
        +              divisor: 1m
        +              resource: requests.cpu
        +          - path: mem_limit
        +            resourceFieldRef:
        +              containerName: database
        +              divisor: 1Mi
        +              resource: limits.memory
        +          - path: mem_request
        +            resourceFieldRef:
        +              containerName: database
        +              divisor: 1Mi
        +              resource: requests.memory
        +          - fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.labels
        +            path: labels
        +          - fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.annotations
        +            path: annotations
        +        name: database-containerinfo
               - name: pg-tde
                 projected:
                   defaultMode: 384
        @@ -58,20 +493,86 @@
                       items:
                       - key: token
                         path: token
        -              name: vault-secret-rotated
        +              name: vault-secret
                   - secret:
                       items:
                       - key: ca.crt
                         path: ca.crt
        -              name: vault-secret-rotated
        +              name: vault-secret
               - name: pgbackrest-server
        +        projected:
        +          defaultMode: 420
        +          sources:
        +          - secret:
        +              items:
        +              - key: pgbackrest-server.crt
        +                path: server-tls.crt
        +              - key: pgbackrest-server.key
        +                mode: 384
        +                path: server-tls.key
        +              name: pg-tde-instance1-92sr-certs
               - name: pgbackrest-config
        +        projected:
        +          defaultMode: 420
        +          sources:
        +          - configMap:
        +              items:
        +              - key: pgbackrest_instance.conf
        +                path: pgbackrest_instance.conf
        +              - key: config-hash
        +                path: config-hash
        +              - key: pgbackrest-server.conf
        +                path: ~postgres-operator_server.conf
        +              name: pg-tde-pgbackrest-config
        +          - secret:
        +              items:
        +              - key: pgbackrest.ca-roots
        +                path: ~postgres-operator/tls-ca.crt
        +              - key: pgbackrest-client.crt
        +                path: ~postgres-operator/client-tls.crt
        +              - key: pgbackrest-client.key
        +                mode: 384
        +                path: ~postgres-operator/client-tls.key
        +              name: pg-tde-pgbackrest
               - name: patroni-config
        -      - name: crunchy-bin
        -      - name: tmp
        -      - name: dshm
        +        projected:
        +          defaultMode: 420
        +          sources:
        +          - configMap:
        +              items:
        +              - key: patroni.yaml
        +                path: ~postgres-operator_cluster.yaml
        +              name: pg-tde-config
        +          - configMap:
        +              items:
        +              - key: patroni.yaml
        +                path: ~postgres-operator_instance.yaml
        +              name: pg-tde-instance1-92sr-config
        +          - secret:
        +              items:
        +              - key: patroni.ca-roots
        +                path: ~postgres-operator/patroni.ca-roots
        +              - key: patroni.crt-combined
        +                path: ~postgres-operator/patroni.crt+key
        +              name: pg-tde-instance1-92sr-certs
        +      - emptyDir: {}
        +        name: crunchy-bin
        +      - emptyDir:
        +          sizeLimit: 2Gi
        +        name: tmp
        +      - emptyDir:
        +          medium: Memory
        +        name: dshm
        +  updateStrategy:
        +    type: OnDelete
         status:
        -  observedGeneration: 3
        +  availableReplicas: 1
        +  collisionCount: 0
        +  currentReplicas: 1
        +  currentRevision: pg-tde-instance1-92sr-75959cfd96
        +  observedGeneration: 1
           readyReplicas: 1
           replicas: 1
        +  updateRevision: pg-tde-instance1-92sr-75959cfd96
        +  updatedReplicas: 1
         
        
    case.go:330: resource StatefulSet:kuttl-test-tight-mule/: .spec.template.spec.volumes.projected.sources.secret.name: value mismatch, expected: vault-secret-rotated != actual: vault-secret
    case.go:330: --- StatefulSet:kuttl-test-tight-mule/
        +++ StatefulSet:kuttl-test-tight-mule/pg-tde-instance1-nn9t
        @@ -1,10 +1,21 @@
         apiVersion: apps/v1
         kind: StatefulSet
         metadata:
        +  annotations:
        +    pgv2.percona.com/logcollector-config-hash: d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77
           labels:
        +    app.kubernetes.io/component: pg
        +    app.kubernetes.io/instance: pg-tde
        +    app.kubernetes.io/managed-by: percona-postgresql-operator
        +    app.kubernetes.io/name: percona-postgresql
        +    app.kubernetes.io/part-of: percona-postgresql
        +    pgv2.percona.com/version: 3.1.0
             postgres-operator.crunchydata.com/cluster: pg-tde
             postgres-operator.crunchydata.com/data: postgres
        +    postgres-operator.crunchydata.com/instance: pg-tde-instance1-nn9t
             postgres-operator.crunchydata.com/instance-set: instance1
        +  managedFields: '[... elided field over 10 lines long ...]'
        +  name: pg-tde-instance1-nn9t
           namespace: kuttl-test-tight-mule
           ownerReferences:
           - apiVersion: upstream.pgv2.percona.com/v1beta1
        @@ -12,11 +23,131 @@
             controller: true
             kind: PostgresCluster
             name: pg-tde
        +    uid: 7f4a2880-3777-4397-9b75-3c9bd493a306
         spec:
        +  persistentVolumeClaimRetentionPolicy:
        +    whenDeleted: Retain
        +    whenScaled: Retain
        +  podManagementPolicy: OrderedReady
        +  replicas: 1
        +  revisionHistoryLimit: 0
        +  selector:
        +    matchLabels:
        +      postgres-operator.crunchydata.com/cluster: pg-tde
        +      postgres-operator.crunchydata.com/instance: pg-tde-instance1-nn9t
        +      postgres-operator.crunchydata.com/instance-set: instance1
        +  serviceName: pg-tde-pods
           template:
        +    metadata: '[... elided field over 10 lines long ...]'
             spec:
        +      affinity:
        +        podAntiAffinity:
        +          preferredDuringSchedulingIgnoredDuringExecution:
        +          - podAffinityTerm:
        +              labelSelector:
        +                matchLabels:
        +                  postgres-operator.crunchydata.com/data: postgres
        +              topologyKey: kubernetes.io/hostname
        +            weight: 1
               containers:
        -      - name: database
        +      - command:
        +        - /opt/crunchy/bin/postgres-entrypoint.sh
        +        - patroni
        +        - /etc/patroni
        +        env:
        +        - name: PGDATA
        +          value: /pgdata/pg18
        +        - name: PGHOST
        +          value: /tmp/postgres
        +        - name: PGPORT
        +          value: "5432"
        +        - name: KRB5_CONFIG
        +          value: /etc/postgres/krb5.conf
        +        - name: KRB5RCACHEDIR
        +          value: /tmp
        +        - name: LDAPTLS_CACERT
        +          value: /etc/postgres/ldap/ca.crt
        +        - name: LC_ALL
        +          value: en_US.utf-8
        +        - name: LANG
        +          value: en_US.utf-8
        +        - name: PATRONI_NAME
        +          valueFrom:
        +            fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.name
        +        - name: PATRONI_KUBERNETES_POD_IP
        +          valueFrom:
        +            fieldRef:
        +              apiVersion: v1
        +              fieldPath: status.podIP
        +        - name: PATRONI_KUBERNETES_PORTS
        +          value: |
        +            - name: postgres
        +              port: 5432
        +              protocol: TCP
        +        - name: PATRONI_POSTGRESQL_CONNECT_ADDRESS
        +          value: $(PATRONI_NAME).pg-tde-pods:5432
        +        - name: PATRONI_POSTGRESQL_LISTEN
        +          value: '*:5432'
        +        - name: PATRONI_POSTGRESQL_CONFIG_DIR
        +          value: /pgdata/pg18
        +        - name: PATRONI_POSTGRESQL_DATA_DIR
        +          value: /pgdata/pg18
        +        - name: PATRONI_RESTAPI_CONNECT_ADDRESS
        +          value: $(PATRONI_NAME).pg-tde-pods:8008
        +        - name: PATRONI_RESTAPI_LISTEN
        +          value: '*:8008'
        +        - name: PATRONICTL_CONFIG_FILE
        +          value: /etc/patroni
        +        - name: LD_PRELOAD
        +          value: /usr/lib64/libnss_wrapper.so
        +        - name: NSS_WRAPPER_PASSWD
        +          value: /tmp/nss_wrapper/postgres/passwd
        +        - name: NSS_WRAPPER_GROUP
        +          value: /tmp/nss_wrapper/postgres/group
        +        image: docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
        +        imagePullPolicy: Always
        +        livenessProbe:
        +          exec:
        +            command:
        +            - bash
        +            - -c
        +            - /opt/crunchy/bin/postgres-liveness-check.sh
        +          failureThreshold: 3
        +          initialDelaySeconds: 3
        +          periodSeconds: 10
        +          successThreshold: 1
        +          timeoutSeconds: 5
        +        name: database
        +        ports:
        +        - containerPort: 5432
        +          name: postgres
        +          protocol: TCP
        +        readinessProbe:
        +          exec:
        +            command:
        +            - bash
        +            - -c
        +            - /opt/crunchy/bin/postgres-readiness-check.sh
        +          failureThreshold: 3
        +          initialDelaySeconds: 3
        +          periodSeconds: 10
        +          successThreshold: 1
        +          timeoutSeconds: 5
        +        resources: {}
        +        securityContext:
        +          allowPrivilegeEscalation: false
        +          capabilities:
        +            drop:
        +            - ALL
        +          privileged: false
        +          readOnlyRootFilesystem: true
        +          runAsNonRoot: true
        +          seccompProfile:
        +            type: RuntimeDefault
        +        terminationMessagePath: /dev/termination-log
        +        terminationMessagePolicy: File
                 volumeMounts:
                 - mountPath: /pgconf/tls
                   name: cert-volume
        @@ -41,15 +172,319 @@
                   name: tmp
                 - mountPath: /dev/shm
                   name: dshm
        -      - name: replication-cert-copy
        -      - name: logs
        -      - name: logrotate
        -      - name: pgbackrest
        -      - name: pgbackrest-config
        +      - command:
        +        - bash
        +        - -ceu
        +        - --
        +        - |-
        +          monitor() {
        +          # Parameters for curl when managing autogrow annotation.
        +          APISERVER="https://kubernetes.default.svc"
        +          SERVICEACCOUNT="/var/run/secrets/kubernetes.io/serviceaccount"
        +          NAMESPACE=$(cat ${SERVICEACCOUNT}/namespace)
        +          TOKEN=$(cat ${SERVICEACCOUNT}/token)
        +          CACERT=${SERVICEACCOUNT}/ca.crt
        +
        +          declare -r directory="/pgconf/tls"
        +          exec {fd}<> <(:||:)
        +          while read -r -t 5 -u "${fd}" ||:; do
        +            # Manage replication certificate.
        +            if [[ "${directory}" -nt "/proc/self/fd/${fd}" ]] &&
        +              install -D --mode=0600 -t "/tmp/replication" "${directory}"/{replication/tls.crt,replication/tls.key,replication/ca.crt} &&
        +              pkill -HUP --exact --parent=1 postgres
        +            then
        +              exec {fd}>&- && exec {fd}<> <(:||:)
        +              stat --format='Loaded certificates dated %y' "${directory}"
        +            fi
        +
        +          done
        +          }; export -f monitor; exec -a "$0" bash -ceu monitor
        +        - replication-cert-copy
        +        image: docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
        +        imagePullPolicy: Always
        +        name: replication-cert-copy
        +        resources: {}
        +        securityContext:
        +          allowPrivilegeEscalation: false
        +          capabilities:
        +            drop:
        +            - ALL
        +          privileged: false
        +          readOnlyRootFilesystem: true
        +          runAsNonRoot: true
        +          seccompProfile:
        +            type: RuntimeDefault
        +        terminationMessagePath: /dev/termination-log
        +        terminationMessagePolicy: File
        +        volumeMounts:
        +        - mountPath: /pgconf/tls
        +          name: cert-volume
        +          readOnly: true
        +        - mountPath: /pgdata
        +          name: postgres-data
        +        - mountPath: /tmp
        +          name: tmp
        +      - args:
        +        - fluent-bit
        +        command:
        +        - /opt/crunchy/logcollector/entrypoint.sh
        +        env:
        +        - name: PG_LOG_DIR
        +          value: /pgdata/pg18/log
        +        - name: PGBACKREST_LOG_DIR
        +          value: /pgdata/pgbackrest/log
        +        - name: POD_NAMESPACE
        +          valueFrom:
        +            fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.namespace
        +        - name: POD_NAME
        +          valueFrom:
        +            fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.name
        +        image: docker.io/perconalab/fluentbit:main-logcollector
        +        imagePullPolicy: IfNotPresent
        +        name: logs
        +        resources: {}
        +        securityContext:
        +          allowPrivilegeEscalation: false
        +          capabilities:
        +            drop:
        +            - ALL
        +          privileged: false
        +          runAsGroup: 26
        +          runAsNonRoot: true
        +          runAsUser: 26
        +          seccompProfile:
        +            type: RuntimeDefault
        +        terminationMessagePath: /dev/termination-log
        +        terminationMessagePolicy: File
        +        volumeMounts:
        +        - mountPath: /pgdata
        +          name: postgres-data
        +        - mountPath: /opt/crunchy
        +          name: crunchy-bin
        +        - mountPath: /tmp
        +          name: tmp
        +      - args:
        +        - logrotate
        +        command:
        +        - /opt/crunchy/logcollector/entrypoint.sh
        +        env:
        +        - name: POD_NAMESPACE
        +          valueFrom:
        +            fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.namespace
        +        - name: POD_NAME
        +          valueFrom:
        +            fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.name
        +        - name: LOGROTATE_SCHEDULE
        +          value: 0 0 * * *
        +        - name: LD_PRELOAD
        +          value: /tmp/nss_wrapper/libnss_wrapper.so
        +        - name: NSS_WRAPPER_PASSWD
        +          value: /tmp/nss_wrapper/postgres/passwd
        +        - name: NSS_WRAPPER_GROUP
        +          value: /tmp/nss_wrapper/postgres/group
        +        image: docker.io/perconalab/fluentbit:main-logcollector
        +        imagePullPolicy: IfNotPresent
        +        name: logrotate
        +        resources: {}
        +        securityContext:
        +          allowPrivilegeEscalation: false
        +          capabilities:
        +            drop:
        +            - ALL
        +          privileged: false
        +          runAsGroup: 26
        +          runAsNonRoot: true
        +          runAsUser: 26
        +          seccompProfile:
        +            type: RuntimeDefault
        +        terminationMessagePath: /dev/termination-log
        +        terminationMessagePolicy: File
        +        volumeMounts:
        +        - mountPath: /pgdata
        +          name: postgres-data
        +        - mountPath: /opt/crunchy
        +          name: crunchy-bin
        +        - mountPath: /tmp
        +          name: tmp
        +      - command:
        +        - pgbackrest
        +        - server
        +        env:
        +        - name: LD_PRELOAD
        +          value: /usr/lib64/libnss_wrapper.so
        +        - name: NSS_WRAPPER_PASSWD
        +          value: /tmp/nss_wrapper/postgres/passwd
        +        - name: NSS_WRAPPER_GROUP
        +          value: /tmp/nss_wrapper/postgres/group
        +        image: docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
        +        imagePullPolicy: Always
        +        livenessProbe:
        +          exec:
        +            command:
        +            - pgbackrest
        +            - server-ping
        +          failureThreshold: 3
        +          periodSeconds: 10
        +          successThreshold: 1
        +          timeoutSeconds: 1
        +        name: pgbackrest
        +        resources: {}
        +        securityContext:
        +          allowPrivilegeEscalation: false
        +          capabilities:
        +            drop:
        +            - ALL
        +          privileged: false
        +          readOnlyRootFilesystem: true
        +          runAsNonRoot: true
        +          seccompProfile:
        +            type: RuntimeDefault
        +        terminationMessagePath: /dev/termination-log
        +        terminationMessagePolicy: File
        +        volumeMounts:
        +        - mountPath: /etc/pgbackrest/server
        +          name: pgbackrest-server
        +          readOnly: true
        +        - mountPath: /pgdata
        +          name: postgres-data
        +        - mountPath: /etc/pgbackrest/conf.d
        +          name: pgbackrest-config
        +          readOnly: true
        +        - mountPath: /tmp
        +          name: tmp
        +      - command:
        +        - bash
        +        - -ceu
        +        - --
        +        - |-
        +          monitor() {
        +          exec {fd}<> <(:||:)
        +          until read -r -t 5 -u "${fd}"; do
        +            if
        +              [[ "${filename}" -nt "/proc/self/fd/${fd}" ]] &&
        +              pkill -HUP --exact --parent=0 pgbackrest
        +            then
        +              exec {fd}>&- && exec {fd}<> <(:||:)
        +              stat --dereference --format='Loaded configuration dated %y' "${filename}"
        +            elif
        +              { [[ "${directory}" -nt "/proc/self/fd/${fd}" ]] ||
        +                [[ "${authority}" -nt "/proc/self/fd/${fd}" ]]
        +              } &&
        +              pkill -HUP --exact --parent=0 pgbackrest
        +            then
        +              exec {fd}>&- && exec {fd}<> <(:||:)
        +              stat --format='Loaded certificates dated %y' "${directory}"
        +            fi
        +          done
        +          }; export directory="$1" authority="$2" filename="$3"; export -f monitor; exec -a "$0" bash -ceu monitor
        +        - pgbackrest-config
        +        - /etc/pgbackrest/server
        +        - /etc/pgbackrest/conf.d/~postgres-operator/tls-ca.crt
        +        - /etc/pgbackrest/conf.d/~postgres-operator_server.conf
        +        image: docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
        +        imagePullPolicy: Always
        +        name: pgbackrest-config
        +        resources: {}
        +        securityContext:
        +          allowPrivilegeEscalation: false
        +          capabilities:
        +            drop:
        +            - ALL
        +          privileged: false
        +          readOnlyRootFilesystem: true
        +          runAsNonRoot: true
        +          seccompProfile:
        +            type: RuntimeDefault
        +        terminationMessagePath: /dev/termination-log
        +        terminationMessagePolicy: File
        +        volumeMounts:
        +        - mountPath: /etc/pgbackrest/server
        +          name: pgbackrest-server
        +          readOnly: true
        +        - mountPath: /etc/pgbackrest/conf.d
        +          name: pgbackrest-config
        +          readOnly: true
        +        - mountPath: /tmp
        +          name: tmp
        +      dnsPolicy: ClusterFirst
        +      enableServiceLinks: false
        +      initContainers: '[... elided field over 10 lines long ...]'
        +      restartPolicy: Always
        +      schedulerName: default-scheduler
        +      securityContext:
        +        fsGroup: 26
        +        fsGroupChangePolicy: OnRootMismatch
        +      serviceAccount: pg-tde-instance
        +      serviceAccountName: pg-tde-instance
        +      shareProcessNamespace: true
        +      terminationGracePeriodSeconds: 30
        +      topologySpreadConstraints: '[... elided field over 10 lines long ...]'
               volumes:
               - name: cert-volume
        +        projected:
        +          defaultMode: 384
        +          sources:
        +          - secret:
        +              items:
        +              - key: tls.crt
        +                path: tls.crt
        +              - key: tls.key
        +                path: tls.key
        +              - key: ca.crt
        +                path: ca.crt
        +              name: pg-tde-cluster-cert
        +          - secret:
        +              items:
        +              - key: tls.crt
        +                path: replication/tls.crt
        +              - key: tls.key
        +                path: replication/tls.key
        +              - key: ca.crt
        +                path: replication/ca.crt
        +              name: pg-tde-replication-cert
               - name: postgres-data
        -      - name: database-containerinfo
        +        persistentVolumeClaim:
        +          claimName: pg-tde-instance1-nn9t-pgdata
        +      - downwardAPI:
        +          defaultMode: 420
        +          items:
        +          - path: cpu_limit
        +            resourceFieldRef:
        +              containerName: database
        +              divisor: 1m
        +              resource: limits.cpu
        +          - path: cpu_request
        +            resourceFieldRef:
        +              containerName: database
        +              divisor: 1m
        +              resource: requests.cpu
        +          - path: mem_limit
        +            resourceFieldRef:
        +              containerName: database
        +              divisor: 1Mi
        +              resource: limits.memory
        +          - path: mem_request
        +            resourceFieldRef:
        +              containerName: database
        +              divisor: 1Mi
        +              resource: requests.memory
        +          - fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.labels
        +            path: labels
        +          - fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.annotations
        +            path: annotations
        +        name: database-containerinfo
               - name: pg-tde
                 projected:
                   defaultMode: 384
        @@ -58,20 +493,86 @@
                       items:
                       - key: token
                         path: token
        -              name: vault-secret-rotated
        +              name: vault-secret
                   - secret:
                       items:
                       - key: ca.crt
                         path: ca.crt
        -              name: vault-secret-rotated
        +              name: vault-secret
               - name: pgbackrest-server
        +        projected:
        +          defaultMode: 420
        +          sources:
        +          - secret:
        +              items:
        +              - key: pgbackrest-server.crt
        +                path: server-tls.crt
        +              - key: pgbackrest-server.key
        +                mode: 384
        +                path: server-tls.key
        +              name: pg-tde-instance1-nn9t-certs
               - name: pgbackrest-config
        +        projected:
        +          defaultMode: 420
        +          sources:
        +          - configMap:
        +              items:
        +              - key: pgbackrest_instance.conf
        +                path: pgbackrest_instance.conf
        +              - key: config-hash
        +                path: config-hash
        +              - key: pgbackrest-server.conf
        +                path: ~postgres-operator_server.conf
        +              name: pg-tde-pgbackrest-config
        +          - secret:
        +              items:
        +              - key: pgbackrest.ca-roots
        +                path: ~postgres-operator/tls-ca.crt
        +              - key: pgbackrest-client.crt
        +                path: ~postgres-operator/client-tls.crt
        +              - key: pgbackrest-client.key
        +                mode: 384
        +                path: ~postgres-operator/client-tls.key
        +              name: pg-tde-pgbackrest
               - name: patroni-config
        -      - name: crunchy-bin
        -      - name: tmp
        -      - name: dshm
        +        projected:
        +          defaultMode: 420
        +          sources:
        +          - configMap:
        +              items:
        +              - key: patroni.yaml
        +                path: ~postgres-operator_cluster.yaml
        +              name: pg-tde-config
        +          - configMap:
        +              items:
        +              - key: patroni.yaml
        +                path: ~postgres-operator_instance.yaml
        +              name: pg-tde-instance1-nn9t-config
        +          - secret:
        +              items:
        +              - key: patroni.ca-roots
        +                path: ~postgres-operator/patroni.ca-roots
        +              - key: patroni.crt-combined
        +                path: ~postgres-operator/patroni.crt+key
        +              name: pg-tde-instance1-nn9t-certs
        +      - emptyDir: {}
        +        name: crunchy-bin
        +      - emptyDir:
        +          sizeLimit: 2Gi
        +        name: tmp
        +      - emptyDir:
        +          medium: Memory
        +        name: dshm
        +  updateStrategy:
        +    type: OnDelete
         status:
        -  observedGeneration: 3
        +  availableReplicas: 1
        +  collisionCount: 0
        +  currentReplicas: 1
        +  currentRevision: pg-tde-instance1-nn9t-556c45bdc5
        +  observedGeneration: 2
           readyReplicas: 1
           replicas: 1
        +  updateRevision: pg-tde-instance1-nn9t-556c45bdc5
        +  updatedReplicas: 1
         
        
    case.go:330: resource StatefulSet:kuttl-test-tight-mule/: .spec.template.spec.volumes.projected.sources.secret.name: value mismatch, expected: vault-secret-rotated != actual: vault-secret
    case.go:330: --- StatefulSet:kuttl-test-tight-mule/
        +++ StatefulSet:kuttl-test-tight-mule/pg-tde-instance1-whvr
        @@ -1,10 +1,21 @@
         apiVersion: apps/v1
         kind: StatefulSet
         metadata:
        +  annotations:
        +    pgv2.percona.com/logcollector-config-hash: d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77
           labels:
        +    app.kubernetes.io/component: pg
        +    app.kubernetes.io/instance: pg-tde
        +    app.kubernetes.io/managed-by: percona-postgresql-operator
        +    app.kubernetes.io/name: percona-postgresql
        +    app.kubernetes.io/part-of: percona-postgresql
        +    pgv2.percona.com/version: 3.1.0
             postgres-operator.crunchydata.com/cluster: pg-tde
             postgres-operator.crunchydata.com/data: postgres
        +    postgres-operator.crunchydata.com/instance: pg-tde-instance1-whvr
             postgres-operator.crunchydata.com/instance-set: instance1
        +  managedFields: '[... elided field over 10 lines long ...]'
        +  name: pg-tde-instance1-whvr
           namespace: kuttl-test-tight-mule
           ownerReferences:
           - apiVersion: upstream.pgv2.percona.com/v1beta1
        @@ -12,11 +23,131 @@
             controller: true
             kind: PostgresCluster
             name: pg-tde
        +    uid: 7f4a2880-3777-4397-9b75-3c9bd493a306
         spec:
        +  persistentVolumeClaimRetentionPolicy:
        +    whenDeleted: Retain
        +    whenScaled: Retain
        +  podManagementPolicy: OrderedReady
        +  replicas: 1
        +  revisionHistoryLimit: 0
        +  selector:
        +    matchLabels:
        +      postgres-operator.crunchydata.com/cluster: pg-tde
        +      postgres-operator.crunchydata.com/instance: pg-tde-instance1-whvr
        +      postgres-operator.crunchydata.com/instance-set: instance1
        +  serviceName: pg-tde-pods
           template:
        +    metadata: '[... elided field over 10 lines long ...]'
             spec:
        +      affinity:
        +        podAntiAffinity:
        +          preferredDuringSchedulingIgnoredDuringExecution:
        +          - podAffinityTerm:
        +              labelSelector:
        +                matchLabels:
        +                  postgres-operator.crunchydata.com/data: postgres
        +              topologyKey: kubernetes.io/hostname
        +            weight: 1
               containers:
        -      - name: database
        +      - command:
        +        - /opt/crunchy/bin/postgres-entrypoint.sh
        +        - patroni
        +        - /etc/patroni
        +        env:
        +        - name: PGDATA
        +          value: /pgdata/pg18
        +        - name: PGHOST
        +          value: /tmp/postgres
        +        - name: PGPORT
        +          value: "5432"
        +        - name: KRB5_CONFIG
        +          value: /etc/postgres/krb5.conf
        +        - name: KRB5RCACHEDIR
        +          value: /tmp
        +        - name: LDAPTLS_CACERT
        +          value: /etc/postgres/ldap/ca.crt
        +        - name: LC_ALL
        +          value: en_US.utf-8
        +        - name: LANG
        +          value: en_US.utf-8
        +        - name: PATRONI_NAME
        +          valueFrom:
        +            fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.name
        +        - name: PATRONI_KUBERNETES_POD_IP
        +          valueFrom:
        +            fieldRef:
        +              apiVersion: v1
        +              fieldPath: status.podIP
        +        - name: PATRONI_KUBERNETES_PORTS
        +          value: |
        +            - name: postgres
        +              port: 5432
        +              protocol: TCP
        +        - name: PATRONI_POSTGRESQL_CONNECT_ADDRESS
        +          value: $(PATRONI_NAME).pg-tde-pods:5432
        +        - name: PATRONI_POSTGRESQL_LISTEN
        +          value: '*:5432'
        +        - name: PATRONI_POSTGRESQL_CONFIG_DIR
        +          value: /pgdata/pg18
        +        - name: PATRONI_POSTGRESQL_DATA_DIR
        +          value: /pgdata/pg18
        +        - name: PATRONI_RESTAPI_CONNECT_ADDRESS
        +          value: $(PATRONI_NAME).pg-tde-pods:8008
        +        - name: PATRONI_RESTAPI_LISTEN
        +          value: '*:8008'
        +        - name: PATRONICTL_CONFIG_FILE
        +          value: /etc/patroni
        +        - name: LD_PRELOAD
        +          value: /usr/lib64/libnss_wrapper.so
        +        - name: NSS_WRAPPER_PASSWD
        +          value: /tmp/nss_wrapper/postgres/passwd
        +        - name: NSS_WRAPPER_GROUP
        +          value: /tmp/nss_wrapper/postgres/group
        +        image: docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
        +        imagePullPolicy: Always
        +        livenessProbe:
        +          exec:
        +            command:
        +            - bash
        +            - -c
        +            - /opt/crunchy/bin/postgres-liveness-check.sh
        +          failureThreshold: 3
        +          initialDelaySeconds: 3
        +          periodSeconds: 10
        +          successThreshold: 1
        +          timeoutSeconds: 5
        +        name: database
        +        ports:
        +        - containerPort: 5432
        +          name: postgres
        +          protocol: TCP
        +        readinessProbe:
        +          exec:
        +            command:
        +            - bash
        +            - -c
        +            - /opt/crunchy/bin/postgres-readiness-check.sh
        +          failureThreshold: 3
        +          initialDelaySeconds: 3
        +          periodSeconds: 10
        +          successThreshold: 1
        +          timeoutSeconds: 5
        +        resources: {}
        +        securityContext:
        +          allowPrivilegeEscalation: false
        +          capabilities:
        +            drop:
        +            - ALL
        +          privileged: false
        +          readOnlyRootFilesystem: true
        +          runAsNonRoot: true
        +          seccompProfile:
        +            type: RuntimeDefault
        +        terminationMessagePath: /dev/termination-log
        +        terminationMessagePolicy: File
                 volumeMounts:
                 - mountPath: /pgconf/tls
                   name: cert-volume
        @@ -41,15 +172,319 @@
                   name: tmp
                 - mountPath: /dev/shm
                   name: dshm
        -      - name: replication-cert-copy
        -      - name: logs
        -      - name: logrotate
        -      - name: pgbackrest
        -      - name: pgbackrest-config
        +      - command:
        +        - bash
        +        - -ceu
        +        - --
        +        - |-
        +          monitor() {
        +          # Parameters for curl when managing autogrow annotation.
        +          APISERVER="https://kubernetes.default.svc"
        +          SERVICEACCOUNT="/var/run/secrets/kubernetes.io/serviceaccount"
        +          NAMESPACE=$(cat ${SERVICEACCOUNT}/namespace)
        +          TOKEN=$(cat ${SERVICEACCOUNT}/token)
        +          CACERT=${SERVICEACCOUNT}/ca.crt
        +
        +          declare -r directory="/pgconf/tls"
        +          exec {fd}<> <(:||:)
        +          while read -r -t 5 -u "${fd}" ||:; do
        +            # Manage replication certificate.
        +            if [[ "${directory}" -nt "/proc/self/fd/${fd}" ]] &&
        +              install -D --mode=0600 -t "/tmp/replication" "${directory}"/{replication/tls.crt,replication/tls.key,replication/ca.crt} &&
        +              pkill -HUP --exact --parent=1 postgres
        +            then
        +              exec {fd}>&- && exec {fd}<> <(:||:)
        +              stat --format='Loaded certificates dated %y' "${directory}"
        +            fi
        +
        +          done
        +          }; export -f monitor; exec -a "$0" bash -ceu monitor
        +        - replication-cert-copy
        +        image: docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres
        +        imagePullPolicy: Always
        +        name: replication-cert-copy
        +        resources: {}
        +        securityContext:
        +          allowPrivilegeEscalation: false
        +          capabilities:
        +            drop:
        +            - ALL
        +          privileged: false
        +          readOnlyRootFilesystem: true
        +          runAsNonRoot: true
        +          seccompProfile:
        +            type: RuntimeDefault
        +        terminationMessagePath: /dev/termination-log
        +        terminationMessagePolicy: File
        +        volumeMounts:
        +        - mountPath: /pgconf/tls
        +          name: cert-volume
        +          readOnly: true
        +        - mountPath: /pgdata
        +          name: postgres-data
        +        - mountPath: /tmp
        +          name: tmp
        +      - args:
        +        - fluent-bit
        +        command:
        +        - /opt/crunchy/logcollector/entrypoint.sh
        +        env:
        +        - name: PG_LOG_DIR
        +          value: /pgdata/pg18/log
        +        - name: PGBACKREST_LOG_DIR
        +          value: /pgdata/pgbackrest/log
        +        - name: POD_NAMESPACE
        +          valueFrom:
        +            fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.namespace
        +        - name: POD_NAME
        +          valueFrom:
        +            fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.name
        +        image: docker.io/perconalab/fluentbit:main-logcollector
        +        imagePullPolicy: IfNotPresent
        +        name: logs
        +        resources: {}
        +        securityContext:
        +          allowPrivilegeEscalation: false
        +          capabilities:
        +            drop:
        +            - ALL
        +          privileged: false
        +          runAsGroup: 26
        +          runAsNonRoot: true
        +          runAsUser: 26
        +          seccompProfile:
        +            type: RuntimeDefault
        +        terminationMessagePath: /dev/termination-log
        +        terminationMessagePolicy: File
        +        volumeMounts:
        +        - mountPath: /pgdata
        +          name: postgres-data
        +        - mountPath: /opt/crunchy
        +          name: crunchy-bin
        +        - mountPath: /tmp
        +          name: tmp
        +      - args:
        +        - logrotate
        +        command:
        +        - /opt/crunchy/logcollector/entrypoint.sh
        +        env:
        +        - name: POD_NAMESPACE
        +          valueFrom:
        +            fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.namespace
        +        - name: POD_NAME
        +          valueFrom:
        +            fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.name
        +        - name: LOGROTATE_SCHEDULE
        +          value: 0 0 * * *
        +        - name: LD_PRELOAD
        +          value: /tmp/nss_wrapper/libnss_wrapper.so
        +        - name: NSS_WRAPPER_PASSWD
        +          value: /tmp/nss_wrapper/postgres/passwd
        +        - name: NSS_WRAPPER_GROUP
        +          value: /tmp/nss_wrapper/postgres/group
        +        image: docker.io/perconalab/fluentbit:main-logcollector
        +        imagePullPolicy: IfNotPresent
        +        name: logrotate
        +        resources: {}
        +        securityContext:
        +          allowPrivilegeEscalation: false
        +          capabilities:
        +            drop:
        +            - ALL
        +          privileged: false
        +          runAsGroup: 26
        +          runAsNonRoot: true
        +          runAsUser: 26
        +          seccompProfile:
        +            type: RuntimeDefault
        +        terminationMessagePath: /dev/termination-log
        +        terminationMessagePolicy: File
        +        volumeMounts:
        +        - mountPath: /pgdata
        +          name: postgres-data
        +        - mountPath: /opt/crunchy
        +          name: crunchy-bin
        +        - mountPath: /tmp
        +          name: tmp
        +      - command:
        +        - pgbackrest
        +        - server
        +        env:
        +        - name: LD_PRELOAD
        +          value: /usr/lib64/libnss_wrapper.so
        +        - name: NSS_WRAPPER_PASSWD
        +          value: /tmp/nss_wrapper/postgres/passwd
        +        - name: NSS_WRAPPER_GROUP
        +          value: /tmp/nss_wrapper/postgres/group
        +        image: docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
        +        imagePullPolicy: Always
        +        livenessProbe:
        +          exec:
        +            command:
        +            - pgbackrest
        +            - server-ping
        +          failureThreshold: 3
        +          periodSeconds: 10
        +          successThreshold: 1
        +          timeoutSeconds: 1
        +        name: pgbackrest
        +        resources: {}
        +        securityContext:
        +          allowPrivilegeEscalation: false
        +          capabilities:
        +            drop:
        +            - ALL
        +          privileged: false
        +          readOnlyRootFilesystem: true
        +          runAsNonRoot: true
        +          seccompProfile:
        +            type: RuntimeDefault
        +        terminationMessagePath: /dev/termination-log
        +        terminationMessagePolicy: File
        +        volumeMounts:
        +        - mountPath: /etc/pgbackrest/server
        +          name: pgbackrest-server
        +          readOnly: true
        +        - mountPath: /pgdata
        +          name: postgres-data
        +        - mountPath: /etc/pgbackrest/conf.d
        +          name: pgbackrest-config
        +          readOnly: true
        +        - mountPath: /tmp
        +          name: tmp
        +      - command:
        +        - bash
        +        - -ceu
        +        - --
        +        - |-
        +          monitor() {
        +          exec {fd}<> <(:||:)
        +          until read -r -t 5 -u "${fd}"; do
        +            if
        +              [[ "${filename}" -nt "/proc/self/fd/${fd}" ]] &&
        +              pkill -HUP --exact --parent=0 pgbackrest
        +            then
        +              exec {fd}>&- && exec {fd}<> <(:||:)
        +              stat --dereference --format='Loaded configuration dated %y' "${filename}"
        +            elif
        +              { [[ "${directory}" -nt "/proc/self/fd/${fd}" ]] ||
        +                [[ "${authority}" -nt "/proc/self/fd/${fd}" ]]
        +              } &&
        +              pkill -HUP --exact --parent=0 pgbackrest
        +            then
        +              exec {fd}>&- && exec {fd}<> <(:||:)
        +              stat --format='Loaded certificates dated %y' "${directory}"
        +            fi
        +          done
        +          }; export directory="$1" authority="$2" filename="$3"; export -f monitor; exec -a "$0" bash -ceu monitor
        +        - pgbackrest-config
        +        - /etc/pgbackrest/server
        +        - /etc/pgbackrest/conf.d/~postgres-operator/tls-ca.crt
        +        - /etc/pgbackrest/conf.d/~postgres-operator_server.conf
        +        image: docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18
        +        imagePullPolicy: Always
        +        name: pgbackrest-config
        +        resources: {}
        +        securityContext:
        +          allowPrivilegeEscalation: false
        +          capabilities:
        +            drop:
        +            - ALL
        +          privileged: false
        +          readOnlyRootFilesystem: true
        +          runAsNonRoot: true
        +          seccompProfile:
        +            type: RuntimeDefault
        +        terminationMessagePath: /dev/termination-log
        +        terminationMessagePolicy: File
        +        volumeMounts:
        +        - mountPath: /etc/pgbackrest/server
        +          name: pgbackrest-server
        +          readOnly: true
        +        - mountPath: /etc/pgbackrest/conf.d
        +          name: pgbackrest-config
        +          readOnly: true
        +        - mountPath: /tmp
        +          name: tmp
        +      dnsPolicy: ClusterFirst
        +      enableServiceLinks: false
        +      initContainers: '[... elided field over 10 lines long ...]'
        +      restartPolicy: Always
        +      schedulerName: default-scheduler
        +      securityContext:
        +        fsGroup: 26
        +        fsGroupChangePolicy: OnRootMismatch
        +      serviceAccount: pg-tde-instance
        +      serviceAccountName: pg-tde-instance
        +      shareProcessNamespace: true
        +      terminationGracePeriodSeconds: 30
        +      topologySpreadConstraints: '[... elided field over 10 lines long ...]'
               volumes:
               - name: cert-volume
        +        projected:
        +          defaultMode: 384
        +          sources:
        +          - secret:
        +              items:
        +              - key: tls.crt
        +                path: tls.crt
        +              - key: tls.key
        +                path: tls.key
        +              - key: ca.crt
        +                path: ca.crt
        +              name: pg-tde-cluster-cert
        +          - secret:
        +              items:
        +              - key: tls.crt
        +                path: replication/tls.crt
        +              - key: tls.key
        +                path: replication/tls.key
        +              - key: ca.crt
        +                path: replication/ca.crt
        +              name: pg-tde-replication-cert
               - name: postgres-data
        -      - name: database-containerinfo
        +        persistentVolumeClaim:
        +          claimName: pg-tde-instance1-whvr-pgdata
        +      - downwardAPI:
        +          defaultMode: 420
        +          items:
        +          - path: cpu_limit
        +            resourceFieldRef:
        +              containerName: database
        +              divisor: 1m
        +              resource: limits.cpu
        +          - path: cpu_request
        +            resourceFieldRef:
        +              containerName: database
        +              divisor: 1m
        +              resource: requests.cpu
        +          - path: mem_limit
        +            resourceFieldRef:
        +              containerName: database
        +              divisor: 1Mi
        +              resource: limits.memory
        +          - path: mem_request
        +            resourceFieldRef:
        +              containerName: database
        +              divisor: 1Mi
        +              resource: requests.memory
        +          - fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.labels
        +            path: labels
        +          - fieldRef:
        +              apiVersion: v1
        +              fieldPath: metadata.annotations
        +            path: annotations
        +        name: database-containerinfo
               - name: pg-tde
                 projected:
                   defaultMode: 384
        @@ -58,20 +493,86 @@
                       items:
                       - key: token
                         path: token
        -              name: vault-secret-rotated
        +              name: vault-secret
                   - secret:
                       items:
                       - key: ca.crt
                         path: ca.crt
        -              name: vault-secret-rotated
        +              name: vault-secret
               - name: pgbackrest-server
        +        projected:
        +          defaultMode: 420
        +          sources:
        +          - secret:
        +              items:
        +              - key: pgbackrest-server.crt
        +                path: server-tls.crt
        +              - key: pgbackrest-server.key
        +                mode: 384
        +                path: server-tls.key
        +              name: pg-tde-instance1-whvr-certs
               - name: pgbackrest-config
        +        projected:
        +          defaultMode: 420
        +          sources:
        +          - configMap:
        +              items:
        +              - key: pgbackrest_instance.conf
        +                path: pgbackrest_instance.conf
        +              - key: config-hash
        +                path: config-hash
        +              - key: pgbackrest-server.conf
        +                path: ~postgres-operator_server.conf
        +              name: pg-tde-pgbackrest-config
        +          - secret:
        +              items:
        +              - key: pgbackrest.ca-roots
        +                path: ~postgres-operator/tls-ca.crt
        +              - key: pgbackrest-client.crt
        +                path: ~postgres-operator/client-tls.crt
        +              - key: pgbackrest-client.key
        +                mode: 384
        +                path: ~postgres-operator/client-tls.key
        +              name: pg-tde-pgbackrest
               - name: patroni-config
        -      - name: crunchy-bin
        -      - name: tmp
        -      - name: dshm
        +        projected:
        +          defaultMode: 420
        +          sources:
        +          - configMap:
        +              items:
        +              - key: patroni.yaml
        +                path: ~postgres-operator_cluster.yaml
        +              name: pg-tde-config
        +          - configMap:
        +              items:
        +              - key: patroni.yaml
        +                path: ~postgres-operator_instance.yaml
        +              name: pg-tde-instance1-whvr-config
        +          - secret:
        +              items:
        +              - key: patroni.ca-roots
        +                path: ~postgres-operator/patroni.ca-roots
        +              - key: patroni.crt-combined
        +                path: ~postgres-operator/patroni.crt+key
        +              name: pg-tde-instance1-whvr-certs
        +      - emptyDir: {}
        +        name: crunchy-bin
        +      - emptyDir:
        +          sizeLimit: 2Gi
        +        name: tmp
        +      - emptyDir:
        +          medium: Memory
        +        name: dshm
        +  updateStrategy:
        +    type: OnDelete
         status:
        -  observedGeneration: 3
        +  availableReplicas: 1
        +  collisionCount: 0
        +  currentReplicas: 1
        +  currentRevision: pg-tde-instance1-whvr-5f69bf6585
        +  observedGeneration: 2
           readyReplicas: 1
           replicas: 1
        +  updateRevision: pg-tde-instance1-whvr-5f69bf6585
        +  updatedReplicas: 1
         
        
    case.go:330: resource StatefulSet:kuttl-test-tight-mule/: .spec.template.spec.volumes.projected.sources.secret.name: value mismatch, expected: vault-secret-rotated != actual: vault-secret
    case.go:330: command "condStatus=$(kubectl -n \"${NAMESPACE}\" get pg pg-tde -o jsonpath='{..." failed, exit status 1
    logger.go:42: 21:12:29 | pg-tde | pg-tde events from ns kuttl-test-tight-mule:
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:00:39 +0000 UTC	Normal	Pod pg-client-65d98588cc-w55wt	Binding	Scheduled	Successfully assigned kuttl-test-tight-mule/pg-client-65d98588cc-w55wt to gke-jen-pg-1773-5cca644c-default-pool-3286f4cc-8w08	default-scheduler	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:00:39 +0000 UTC	Normal	Pod pg-client-65d98588cc-w55wt.spec.containers{pg-client}		Pulling	Pulling image "perconalab/percona-distribution-postgresql:16"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:00:39 +0000 UTC	Normal	Pod pg-client-65d98588cc-w55wt.spec.containers{pg-client}		Pulled	Successfully pulled image "perconalab/percona-distribution-postgresql:16" in 155ms (156ms including waiting). Image size: 445181537 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:00:39 +0000 UTC	Normal	Pod pg-client-65d98588cc-w55wt.spec.containers{pg-client}		Created	Created container: pg-client	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:00:39 +0000 UTC	Normal	Pod pg-client-65d98588cc-w55wt.spec.containers{pg-client}		Started	Started container pg-client	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:00:39 +0000 UTC	Normal	ReplicaSet.apps pg-client-65d98588cc		SuccessfulCreate	Created pod: pg-client-65d98588cc-w55wt	replicaset-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:00:39 +0000 UTC	Normal	Deployment.apps pg-client		ScalingReplicaSet	Scaled up replica set pg-client-65d98588cc from 0 to 1	deployment-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:50 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-cluster-ca-cert		Issuing	Issuing certificate as Secret does not exist	cert-manager-certificates-trigger	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:50 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-cluster-ca-cert		Generated	Stored new private key in temporary Secret resource "pg-tde-cluster-ca-cert-znq7z"	cert-manager-certificates-key-manager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-cluster-ca-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-selfsigned	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-cluster-ca-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-acme	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-cluster-ca-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-ca	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-cluster-ca-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-venafi	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-cluster-ca-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-vault	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-cluster-ca-cert-1		cert-manager.io	Certificate request has been approved by cert-manager.io	cert-manager-certificaterequests-approver	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-cluster-ca-cert-1		CertificateIssued	Certificate fetched from issuer successfully	cert-manager-certificaterequests-issuer-selfsigned	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-cluster-ca-cert		Requested	Created new CertificateRequest resource "pg-tde-cluster-ca-cert-1"	cert-manager-certificates-request-manager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-cluster-ca-cert		Issuing	The certificate has been successfully issued	cert-manager-certificates-issuing	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-replication-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-vault	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-replication-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-venafi	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-replication-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-selfsigned	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-replication-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-acme	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-replication-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-ca	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-replication-cert-1		cert-manager.io	Certificate request has been approved by cert-manager.io	cert-manager-certificaterequests-approver	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-replication-cert-1		IssuerNotFound	Referenced "Issuer" not found: issuer.cert-manager.io "pg-tde-tls-issuer" not found	cert-manager-certificaterequests-issuer-venafi	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-replication-cert-1		IssuerNotFound	Referenced "Issuer" not found: issuer.cert-manager.io "pg-tde-tls-issuer" not found	cert-manager-certificaterequests-issuer-acme	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-replication-cert-1		IssuerNotFound	Referenced "Issuer" not found: issuer.cert-manager.io "pg-tde-tls-issuer" not found	cert-manager-certificaterequests-issuer-vault	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-replication-cert-1		IssuerNotFound	Referenced "Issuer" not found: issuer.cert-manager.io "pg-tde-tls-issuer" not found	cert-manager-certificaterequests-issuer-selfsigned	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-replication-cert-1		IssuerNotFound	Referenced "Issuer" not found: issuer.cert-manager.io "pg-tde-tls-issuer" not found	cert-manager-certificaterequests-issuer-ca	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-replication-cert		Issuing	Issuing certificate as Secret does not exist	cert-manager-certificates-trigger	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-replication-cert		Generated	Stored new private key in temporary Secret resource "pg-tde-replication-cert-jdg7r"	cert-manager-certificates-key-manager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-replication-cert		Requested	Created new CertificateRequest resource "pg-tde-replication-cert-1"	cert-manager-certificates-request-manager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:51 +0000 UTC	Normal	Issuer.cert-manager.io pg-tde-tls-issuer		KeyPairVerified	Signing CA verified	cert-manager-issuers	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-cluster-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-ca	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-cluster-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-venafi	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-cluster-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-selfsigned	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-cluster-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-vault	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-cluster-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-acme	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-cluster-cert		Issuing	Issuing certificate as Secret does not exist	cert-manager-certificates-trigger	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-cluster-cert		Generated	Stored new private key in temporary Secret resource "pg-tde-cluster-cert-bsq5z"	cert-manager-certificates-key-manager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-cluster-cert		Requested	Created new CertificateRequest resource "pg-tde-cluster-cert-1"	cert-manager-certificates-request-manager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	PersistentVolumeClaim pg-tde-instance1-92sr-pgdata		WaitForFirstConsumer	waiting for first consumer to be created before binding	persistentvolume-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	PersistentVolumeClaim pg-tde-instance1-92sr-pgdata		ExternalProvisioning	Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered.	persistentvolume-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	PersistentVolumeClaim pg-tde-instance1-92sr-pgdata		Provisioning	External provisioner is provisioning volume for claim "kuttl-test-tight-mule/pg-tde-instance1-92sr-pgdata"	pd.csi.storage.gke.io_gke-a851c6b85bd94039b558-55a1-d54b-vm_11a9ce3b-af05-4d5c-a838-edb576aa0784	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	StatefulSet.apps pg-tde-instance1-92sr		SuccessfulCreate	create Pod pg-tde-instance1-92sr-0 in StatefulSet pg-tde-instance1-92sr successful	statefulset-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	PersistentVolumeClaim pg-tde-instance1-nn9t-pgdata		WaitForFirstConsumer	waiting for first consumer to be created before binding	persistentvolume-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	StatefulSet.apps pg-tde-instance1-nn9t		SuccessfulCreate	create Pod pg-tde-instance1-nn9t-0 in StatefulSet pg-tde-instance1-nn9t successful	statefulset-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	PersistentVolumeClaim pg-tde-instance1-whvr-pgdata		WaitForFirstConsumer	waiting for first consumer to be created before binding	persistentvolume-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	PersistentVolumeClaim pg-tde-instance1-whvr-pgdata		ExternalProvisioning	Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered.	persistentvolume-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	PersistentVolumeClaim pg-tde-instance1-whvr-pgdata		Provisioning	External provisioner is provisioning volume for claim "kuttl-test-tight-mule/pg-tde-instance1-whvr-pgdata"	pd.csi.storage.gke.io_gke-a851c6b85bd94039b558-55a1-d54b-vm_11a9ce3b-af05-4d5c-a838-edb576aa0784	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	StatefulSet.apps pg-tde-instance1-whvr		SuccessfulCreate	create Pod pg-tde-instance1-whvr-0 in StatefulSet pg-tde-instance1-whvr successful	statefulset-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-replication-cert-1		CertificateIssued	Certificate fetched from issuer successfully	cert-manager-certificaterequests-issuer-ca	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:52 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-replication-cert		Issuing	The certificate has been successfully issued	cert-manager-certificates-issuing	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:53 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-cluster-cert-1		cert-manager.io	Certificate request has been approved by cert-manager.io	cert-manager-certificaterequests-approver	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:53 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-cluster-cert-1		CertificateIssued	Certificate fetched from issuer successfully	cert-manager-certificaterequests-issuer-ca	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:53 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-instance1-92sr-cert		Issuing	Issuing certificate as Secret does not exist	cert-manager-certificates-trigger	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:53 +0000 UTC	Normal	PersistentVolumeClaim pg-tde-instance1-nn9t-pgdata		ExternalProvisioning	Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered.	persistentvolume-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:53 +0000 UTC	Normal	PersistentVolumeClaim pg-tde-instance1-nn9t-pgdata		Provisioning	External provisioner is provisioning volume for claim "kuttl-test-tight-mule/pg-tde-instance1-nn9t-pgdata"	pd.csi.storage.gke.io_gke-a851c6b85bd94039b558-55a1-d54b-vm_11a9ce3b-af05-4d5c-a838-edb576aa0784	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:53 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-instance1-whvr-cert		Issuing	Issuing certificate as Secret does not exist	cert-manager-certificates-trigger	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:53 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-instance1-whvr-cert		Generated	Stored new private key in temporary Secret resource "pg-tde-instance1-whvr-cert-4szs9"	cert-manager-certificates-key-manager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:53 +0000 UTC	Warning	Pod pg-tde-repo-host-0	Scheduling	FailedScheduling	0/3 nodes are available: persistentvolumeclaim "pg-tde-repo1" not found. preemption: 0/3 nodes are available: 3 Preemption is not helpful for scheduling.	default-scheduler	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:53 +0000 UTC	Normal	Pod pg-tde-repo-host-0		NotTriggerScaleUp	Pod didn't trigger scale-up: 	cluster-autoscaler	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:53 +0000 UTC	Normal	StatefulSet.apps pg-tde-repo-host		SuccessfulCreate	create Pod pg-tde-repo-host-0 in StatefulSet pg-tde-repo-host successful	statefulset-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:53 +0000 UTC	Normal	PersistentVolumeClaim pg-tde-repo1		WaitForPodScheduled	waiting for pod pg-tde-repo-host-0 to be scheduled	persistentvolume-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:53 +0000 UTC	Normal	PersistentVolumeClaim pg-tde-repo1		ExternalProvisioning	Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered.	persistentvolume-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:53 +0000 UTC	Normal	PersistentVolumeClaim pg-tde-repo1		Provisioning	External provisioner is provisioning volume for claim "kuttl-test-tight-mule/pg-tde-repo1"	pd.csi.storage.gke.io_gke-a851c6b85bd94039b558-55a1-d54b-vm_11a9ce3b-af05-4d5c-a838-edb576aa0784	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:53 +0000 UTC	Normal	PostgresCluster.upstream.pgv2.percona.com pg-tde		RepoHostCreated	created pgBackRest repository host StatefulSet/pg-tde-repo-host	postgrescluster-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:54 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-cluster-cert		Issuing	The certificate has been successfully issued	cert-manager-certificates-issuing	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:54 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-instance1-92sr-cert		Generated	Stored new private key in temporary Secret resource "pg-tde-instance1-92sr-cert-zd6lv"	cert-manager-certificates-key-manager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:54 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-instance1-nn9t-cert		Issuing	Issuing certificate as Secret does not exist	cert-manager-certificates-trigger	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:54 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-4wxbc	Binding	Scheduled	Successfully assigned kuttl-test-tight-mule/pg-tde-pgbouncer-678bc6687-4wxbc to gke-jen-pg-1773-5cca644c-default-pool-3286f4cc-srm7	default-scheduler	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:54 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-4wxbc.spec.initContainers{pgbouncer-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:54 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-dw86q	Binding	Scheduled	Successfully assigned kuttl-test-tight-mule/pg-tde-pgbouncer-678bc6687-dw86q to gke-jen-pg-1773-5cca644c-default-pool-3286f4cc-8w08	default-scheduler	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:54 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-dw86q.spec.initContainers{pgbouncer-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:54 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-s2th5	Binding	Scheduled	Successfully assigned kuttl-test-tight-mule/pg-tde-pgbouncer-678bc6687-s2th5 to gke-jen-pg-1773-5cca644c-default-pool-3286f4cc-r510	default-scheduler	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:54 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-s2th5.spec.initContainers{pgbouncer-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:54 +0000 UTC	Normal	ReplicaSet.apps pg-tde-pgbouncer-678bc6687		SuccessfulCreate	Created pod: pg-tde-pgbouncer-678bc6687-s2th5	replicaset-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:54 +0000 UTC	Normal	ReplicaSet.apps pg-tde-pgbouncer-678bc6687		SuccessfulCreate	Created pod: pg-tde-pgbouncer-678bc6687-4wxbc	replicaset-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:54 +0000 UTC	Normal	ReplicaSet.apps pg-tde-pgbouncer-678bc6687		SuccessfulCreate	Created pod: pg-tde-pgbouncer-678bc6687-dw86q	replicaset-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:54 +0000 UTC	Normal	Deployment.apps pg-tde-pgbouncer		ScalingReplicaSet	Scaled up replica set pg-tde-pgbouncer-678bc6687 from 0 to 3	deployment-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:54 +0000 UTC	Normal	PodDisruptionBudget.policy pg-tde-pgbouncer		NoPods	No matching pods found	controllermanager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:55 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-instance1-nn9t-cert		Generated	Stored new private key in temporary Secret resource "pg-tde-instance1-nn9t-cert-lcvp7"	cert-manager-certificates-key-manager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:55 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-whvr-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-vault	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:55 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-whvr-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-acme	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:55 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-whvr-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-ca	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:55 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-whvr-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-venafi	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:55 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-whvr-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-selfsigned	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:55 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-instance1-whvr-cert		Requested	Created new CertificateRequest resource "pg-tde-instance1-whvr-cert-1"	cert-manager-certificates-request-manager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:55 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-4wxbc.spec.initContainers{pgbouncer-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd" in 165ms (165ms including waiting). Image size: 86000056 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:55 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-4wxbc.spec.initContainers{pgbouncer-init}		Created	Created container: pgbouncer-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:55 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-4wxbc.spec.initContainers{pgbouncer-init}		Started	Started container pgbouncer-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:55 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-4wxbc.spec.containers{pgbouncer}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:55 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-dw86q.spec.initContainers{pgbouncer-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd" in 139ms (139ms including waiting). Image size: 86000056 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:55 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-dw86q.spec.initContainers{pgbouncer-init}		Created	Created container: pgbouncer-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:55 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-dw86q.spec.initContainers{pgbouncer-init}		Started	Started container pgbouncer-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:55 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-dw86q.spec.containers{pgbouncer}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:55 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-s2th5.spec.initContainers{pgbouncer-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd" in 189ms (189ms including waiting). Image size: 86000056 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:55 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-s2th5.spec.initContainers{pgbouncer-init}		Created	Created container: pgbouncer-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:55 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-s2th5.spec.initContainers{pgbouncer-init}		Started	Started container pgbouncer-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:55 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-pgbouncer-cert		Issuing	Issuing certificate as Secret does not exist	cert-manager-certificates-trigger	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0	Binding	Scheduled	Successfully assigned kuttl-test-tight-mule/pg-tde-instance1-92sr-0 to gke-jen-pg-1773-5cca644c-default-pool-3286f4cc-r510	default-scheduler	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-92sr-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-vault	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-92sr-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-selfsigned	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-92sr-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-venafi	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-92sr-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-acme	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-92sr-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-ca	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-instance1-92sr-cert		Requested	Created new CertificateRequest resource "pg-tde-instance1-92sr-cert-1"	cert-manager-certificates-request-manager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	PersistentVolumeClaim pg-tde-instance1-92sr-pgdata		ProvisioningSucceeded	Successfully provisioned volume pvc-27b92463-c92d-45f3-9171-93a8798d8068	pd.csi.storage.gke.io_gke-a851c6b85bd94039b558-55a1-d54b-vm_11a9ce3b-af05-4d5c-a838-edb576aa0784	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-nn9t-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-vault	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-nn9t-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-acme	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-instance1-nn9t-cert		Requested	Created new CertificateRequest resource "pg-tde-instance1-nn9t-cert-1"	cert-manager-certificates-request-manager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	PersistentVolumeClaim pg-tde-instance1-nn9t-pgdata		ProvisioningSucceeded	Successfully provisioned volume pvc-269842fc-d9d2-421f-a5de-b1d6d1b3f2fb	pd.csi.storage.gke.io_gke-a851c6b85bd94039b558-55a1-d54b-vm_11a9ce3b-af05-4d5c-a838-edb576aa0784	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-whvr-cert-1		cert-manager.io	Certificate request has been approved by cert-manager.io	cert-manager-certificaterequests-approver	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-whvr-cert-1		CertificateIssued	Certificate fetched from issuer successfully	cert-manager-certificaterequests-issuer-ca	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	PersistentVolumeClaim pg-tde-instance1-whvr-pgdata		ProvisioningSucceeded	Successfully provisioned volume pvc-43a8406b-1e77-4849-8541-9e248af354ec	pd.csi.storage.gke.io_gke-a851c6b85bd94039b558-55a1-d54b-vm_11a9ce3b-af05-4d5c-a838-edb576aa0784	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-pgbackrest-client-cert		Issuing	Issuing certificate as Secret does not exist	cert-manager-certificates-trigger	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-4wxbc.spec.containers{pgbouncer}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 135ms (135ms including waiting). Image size: 84604288 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-4wxbc.spec.containers{pgbouncer}		Created	Created container: pgbouncer	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-4wxbc.spec.containers{pgbouncer}		Started	Started container pgbouncer	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-4wxbc.spec.containers{pgbouncer-config}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-4wxbc.spec.containers{pgbouncer-config}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 152ms (152ms including waiting). Image size: 84604288 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-4wxbc.spec.containers{pgbouncer-config}		Created	Created container: pgbouncer-config	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-4wxbc.spec.containers{pgbouncer-config}		Started	Started container pgbouncer-config	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-dw86q.spec.containers{pgbouncer}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 157ms (157ms including waiting). Image size: 84604288 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-dw86q.spec.containers{pgbouncer}		Created	Created container: pgbouncer	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-dw86q.spec.containers{pgbouncer}		Started	Started container pgbouncer	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-dw86q.spec.containers{pgbouncer-config}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-dw86q.spec.containers{pgbouncer-config}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 131ms (131ms including waiting). Image size: 84604288 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-dw86q.spec.containers{pgbouncer-config}		Created	Created container: pgbouncer-config	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-dw86q.spec.containers{pgbouncer-config}		Started	Started container pgbouncer-config	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-s2th5.spec.containers{pgbouncer}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-s2th5.spec.containers{pgbouncer}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 121ms (121ms including waiting). Image size: 84604288 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-s2th5.spec.containers{pgbouncer}		Created	Created container: pgbouncer	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-s2th5.spec.containers{pgbouncer}		Started	Started container pgbouncer	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-s2th5.spec.containers{pgbouncer-config}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:56 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-pgbouncer-cert		Generated	Stored new private key in temporary Secret resource "pg-tde-pgbouncer-cert-hhn5r"	cert-manager-certificates-key-manager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Warning	Pod pg-tde-instance1-92sr-0		FailedMount	MountVolume.SetUp failed for volume "patroni-config" : secret "pg-tde-instance1-92sr-certs" not found	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Warning	Pod pg-tde-instance1-92sr-0		FailedMount	MountVolume.SetUp failed for volume "pgbackrest-server" : secret "pg-tde-instance1-92sr-certs" not found	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-92sr-cert-1		cert-manager.io	Certificate request has been approved by cert-manager.io	cert-manager-certificaterequests-approver	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0	Binding	Scheduled	Successfully assigned kuttl-test-tight-mule/pg-tde-instance1-nn9t-0 to gke-jen-pg-1773-5cca644c-default-pool-3286f4cc-srm7	default-scheduler	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Warning	Pod pg-tde-instance1-nn9t-0		FailedMount	MountVolume.SetUp failed for volume "pgbackrest-server" : secret "pg-tde-instance1-nn9t-certs" not found	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Warning	Pod pg-tde-instance1-nn9t-0		FailedMount	MountVolume.SetUp failed for volume "patroni-config" : secret "pg-tde-instance1-nn9t-certs" not found	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-nn9t-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-selfsigned	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-nn9t-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-ca	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-nn9t-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-venafi	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-nn9t-cert-1		cert-manager.io	Certificate request has been approved by cert-manager.io	cert-manager-certificaterequests-approver	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0	Binding	Scheduled	Successfully assigned kuttl-test-tight-mule/pg-tde-instance1-whvr-0 to gke-jen-pg-1773-5cca644c-default-pool-3286f4cc-8w08	default-scheduler	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-pgbackrest-client-cert		Generated	Stored new private key in temporary Secret resource "pg-tde-pgbackrest-client-cert-j6sqw"	cert-manager-certificates-key-manager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-pgbackrest-client-cert		Requested	Created new CertificateRequest resource "pg-tde-pgbackrest-client-cert-1"	cert-manager-certificates-request-manager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-pgbackrest-repo-cert		Issuing	Issuing certificate as Secret does not exist	cert-manager-certificates-trigger	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-pgbackrest-repo-cert		Generated	Stored new private key in temporary Secret resource "pg-tde-pgbackrest-repo-cert-l5vv6"	cert-manager-certificates-key-manager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-s2th5.spec.containers{pgbouncer-config}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 134ms (134ms including waiting). Image size: 84604288 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-s2th5.spec.containers{pgbouncer-config}		Created	Created container: pgbouncer-config	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Normal	Pod pg-tde-pgbouncer-678bc6687-s2th5.spec.containers{pgbouncer-config}		Started	Started container pgbouncer-config	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Normal	Pod pg-tde-repo-host-0	Binding	Scheduled	Successfully assigned kuttl-test-tight-mule/pg-tde-repo-host-0 to gke-jen-pg-1773-5cca644c-default-pool-3286f4cc-8w08	default-scheduler	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:57 +0000 UTC	Normal	PersistentVolumeClaim pg-tde-repo1		ProvisioningSucceeded	Successfully provisioned volume pvc-33b15306-1074-4a5e-9915-e01cf44efcbc	pd.csi.storage.gke.io_gke-a851c6b85bd94039b558-55a1-d54b-vm_11a9ce3b-af05-4d5c-a838-edb576aa0784	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:58 +0000 UTC	Warning	Pod pg-tde-instance1-92sr-0		FailedMount	MountVolume.SetUp failed for volume "patroni-config" : references non-existent secret key: patroni.ca-roots	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:58 +0000 UTC	Warning	Pod pg-tde-instance1-92sr-0		FailedMount	MountVolume.SetUp failed for volume "pgbackrest-server" : references non-existent secret key: pgbackrest-server.crt	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:58 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-92sr-cert-1		CertificateIssued	Certificate fetched from issuer successfully	cert-manager-certificaterequests-issuer-ca	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:58 +0000 UTC	Warning	Pod pg-tde-instance1-nn9t-0		FailedMount	MountVolume.SetUp failed for volume "patroni-config" : references non-existent secret key: patroni.ca-roots	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:58 +0000 UTC	Warning	Pod pg-tde-instance1-nn9t-0		FailedMount	MountVolume.SetUp failed for volume "pgbackrest-server" : references non-existent secret key: pgbackrest-server.crt	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:58 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-instance1-whvr-cert		Issuing	The certificate has been successfully issued	cert-manager-certificates-issuing	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:58 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbackrest-client-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-vault	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:58 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbackrest-client-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-venafi	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:58 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbackrest-client-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-selfsigned	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:58 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbackrest-client-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-acme	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:58 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbackrest-client-cert-1		cert-manager.io	Certificate request has been approved by cert-manager.io	cert-manager-certificaterequests-approver	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:58 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbackrest-repo-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-vault	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:58 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbackrest-repo-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-venafi	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:58 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-pgbackrest-repo-cert		Requested	Created new CertificateRequest resource "pg-tde-pgbackrest-repo-cert-1"	cert-manager-certificates-request-manager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:59 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-instance1-92sr-cert		Issuing	The certificate has been successfully issued	cert-manager-certificates-issuing	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:59 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-instance1-nn9t-cert-1		CertificateIssued	Certificate fetched from issuer successfully	cert-manager-certificaterequests-issuer-ca	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:59 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbackrest-repo-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-acme	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:59 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbackrest-repo-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-selfsigned	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:59 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbackrest-repo-cert-1		cert-manager.io	Certificate request has been approved by cert-manager.io	cert-manager-certificaterequests-approver	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:59 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbouncer-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-selfsigned	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:59 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbouncer-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-vault	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:59 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbouncer-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-acme	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:59 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbouncer-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-venafi	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:01:59 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-pgbouncer-cert		Requested	Created new CertificateRequest resource "pg-tde-pgbouncer-cert-1"	cert-manager-certificates-request-manager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:00 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-instance1-nn9t-cert		Issuing	The certificate has been successfully issued	cert-manager-certificates-issuing	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:00 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbackrest-client-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-ca	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:00 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbackrest-repo-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-ca	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:00 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbouncer-cert-1		cert-manager.io	Certificate request has been approved by cert-manager.io	cert-manager-certificaterequests-approver	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:01 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbackrest-client-cert-1		CertificateIssued	Certificate fetched from issuer successfully	cert-manager-certificaterequests-issuer-ca	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:01 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-pgbackrest-client-cert		Issuing	The certificate has been successfully issued	cert-manager-certificates-issuing	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:01 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-pgbackrest-repo-cert		Issuing	The certificate has been successfully issued	cert-manager-certificates-issuing	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:01 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbouncer-cert-1		WaitingForApproval	Not signing CertificateRequest until it is Approved	cert-manager-certificaterequests-issuer-ca	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:02 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbackrest-repo-cert-1		CertificateIssued	Certificate fetched from issuer successfully	cert-manager-certificaterequests-issuer-ca	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:02 +0000 UTC	Normal	CertificateRequest.cert-manager.io pg-tde-pgbouncer-cert-1		CertificateIssued	Certificate fetched from issuer successfully	cert-manager-certificaterequests-issuer-ca	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:02 +0000 UTC	Normal	Certificate.cert-manager.io pg-tde-pgbouncer-cert		Issuing	The certificate has been successfully issued	cert-manager-certificates-issuing	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:05 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0		SuccessfulAttachVolume	AttachVolume.Attach succeeded for volume "pvc-27b92463-c92d-45f3-9171-93a8798d8068" 	attachdetach-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:05 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0		SuccessfulAttachVolume	AttachVolume.Attach succeeded for volume "pvc-269842fc-d9d2-421f-a5de-b1d6d1b3f2fb" 	attachdetach-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:06 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{database-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:06 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{database-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd" in 166ms (166ms including waiting). Image size: 86000056 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:06 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{database-init}		Created	Created container: database-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:06 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{database-init}		Started	Started container database-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:06 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0		SuccessfulAttachVolume	AttachVolume.Attach succeeded for volume "pvc-43a8406b-1e77-4849-8541-9e248af354ec" 	attachdetach-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:07 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{postgres-startup}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:07 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{postgres-startup}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 135ms (135ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:07 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{postgres-startup}		Created	Created container: postgres-startup	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:07 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{postgres-startup}		Started	Started container postgres-startup	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:07 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{database-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:07 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{database-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd" in 164ms (164ms including waiting). Image size: 86000056 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:07 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{database-init}		Created	Created container: database-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:07 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{database-init}		Started	Started container database-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:07 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{postgres-startup}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:07 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{database-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:07 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{database-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd" in 162ms (162ms including waiting). Image size: 86000056 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:07 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{database-init}		Created	Created container: database-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:07 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{database-init}		Started	Started container database-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:08 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:08 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 152ms (152ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:08 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{nss-wrapper-init-logcollector}		Created	Created container: nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:08 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{nss-wrapper-init-logcollector}		Started	Started container nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:08 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{postgres-startup}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 227ms (227ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:08 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{postgres-startup}		Created	Created container: postgres-startup	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:08 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{postgres-startup}		Started	Started container postgres-startup	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:08 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:08 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{postgres-startup}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:09 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{nss-wrapper-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:09 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{nss-wrapper-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 150ms (150ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:09 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{nss-wrapper-init}		Created	Created container: nss-wrapper-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:09 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{nss-wrapper-init}		Started	Started container nss-wrapper-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:09 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 166ms (166ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:09 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{nss-wrapper-init-logcollector}		Created	Created container: nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:09 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{nss-wrapper-init-logcollector}		Started	Started container nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:09 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{nss-wrapper-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:09 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{postgres-startup}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 154ms (154ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:09 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{postgres-startup}		Created	Created container: postgres-startup	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:09 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{postgres-startup}		Started	Started container postgres-startup	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:09 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:10 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.containers{database}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:10 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.containers{database}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 140ms (140ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:10 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.containers{database}		Created	Created container: database	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:10 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.containers{database}		Started	Started container database	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:10 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{nss-wrapper-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 154ms (154ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:10 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{nss-wrapper-init}		Created	Created container: nss-wrapper-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:10 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{nss-wrapper-init}		Started	Started container nss-wrapper-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:10 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.containers{database}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:10 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 142ms (142ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:10 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{nss-wrapper-init-logcollector}		Created	Created container: nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:10 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{nss-wrapper-init-logcollector}		Started	Started container nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:10 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{nss-wrapper-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:11 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.containers{replication-cert-copy}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:11 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.containers{replication-cert-copy}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 146ms (146ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:11 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.containers{replication-cert-copy}		Created	Created container: replication-cert-copy	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:11 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.containers{replication-cert-copy}		Started	Started container replication-cert-copy	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:11 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.containers{logs}		Pulled	Container image "docker.io/perconalab/fluentbit:main-logcollector" already present on machine	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:11 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.containers{database}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 179ms (179ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:11 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.containers{database}		Created	Created container: database	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:11 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.containers{database}		Started	Started container database	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:11 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.containers{replication-cert-copy}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:11 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.containers{replication-cert-copy}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 168ms (168ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:11 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.containers{replication-cert-copy}		Created	Created container: replication-cert-copy	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:11 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.containers{replication-cert-copy}		Started	Started container replication-cert-copy	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:11 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.containers{logs}		Pulled	Container image "docker.io/perconalab/fluentbit:main-logcollector" already present on machine	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:11 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{nss-wrapper-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 174ms (174ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:11 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{nss-wrapper-init}		Created	Created container: nss-wrapper-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:11 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{nss-wrapper-init}		Started	Started container nss-wrapper-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:11 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.containers{database}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:12 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.containers{database}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 146ms (146ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:12 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.containers{database}		Created	Created container: database	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:12 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.containers{database}		Started	Started container database	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:12 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.containers{replication-cert-copy}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:12 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.containers{replication-cert-copy}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 172ms (172ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:12 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.containers{replication-cert-copy}		Created	Created container: replication-cert-copy	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:12 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.containers{replication-cert-copy}		Started	Started container replication-cert-copy	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:12 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.containers{logs}		Pulled	Container image "docker.io/perconalab/fluentbit:main-logcollector" already present on machine	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:12 +0000 UTC	Normal	Pod pg-tde-repo-host-0		SuccessfulAttachVolume	AttachVolume.Attach succeeded for volume "pvc-33b15306-1074-4a5e-9915-e01cf44efcbc" 	attachdetach-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:13 +0000 UTC	Warning	Pod pg-tde-instance1-92sr-0.spec.containers{database}		Unhealthy	Readiness probe failed: 	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:14 +0000 UTC	Normal	Pod pg-tde-repo-host-0.spec.initContainers{pgbackrest-log-dir}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:14 +0000 UTC	Normal	Pod pg-tde-repo-host-0.spec.initContainers{pgbackrest-log-dir}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 124ms (124ms including waiting). Image size: 122685992 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:14 +0000 UTC	Normal	Pod pg-tde-repo-host-0.spec.initContainers{pgbackrest-log-dir}		Created	Created container: pgbackrest-log-dir	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:14 +0000 UTC	Normal	Pod pg-tde-repo-host-0.spec.initContainers{pgbackrest-log-dir}		Started	Started container pgbackrest-log-dir	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:15 +0000 UTC	Warning	Pod pg-tde-instance1-whvr-0.spec.containers{database}		Unhealthy	Readiness probe failed: 	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:15 +0000 UTC	Normal	Pod pg-tde-repo-host-0.spec.initContainers{nss-wrapper-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:15 +0000 UTC	Normal	Pod pg-tde-repo-host-0.spec.initContainers{nss-wrapper-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 153ms (153ms including waiting). Image size: 122685992 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:15 +0000 UTC	Normal	Pod pg-tde-repo-host-0.spec.initContainers{nss-wrapper-init}		Created	Created container: nss-wrapper-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:15 +0000 UTC	Normal	Pod pg-tde-repo-host-0.spec.initContainers{nss-wrapper-init}		Started	Started container nss-wrapper-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:16 +0000 UTC	Normal	Pod pg-tde-repo-host-0.spec.containers{pgbackrest}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:16 +0000 UTC	Normal	Pod pg-tde-repo-host-0.spec.containers{pgbackrest}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 144ms (144ms including waiting). Image size: 122685992 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:16 +0000 UTC	Normal	Pod pg-tde-repo-host-0.spec.containers{pgbackrest}		Created	Created container: pgbackrest	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:16 +0000 UTC	Normal	Pod pg-tde-repo-host-0.spec.containers{pgbackrest}		Started	Started container pgbackrest	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:16 +0000 UTC	Normal	Pod pg-tde-repo-host-0.spec.containers{pgbackrest-config}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:16 +0000 UTC	Normal	Pod pg-tde-repo-host-0.spec.containers{pgbackrest-config}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 151ms (151ms including waiting). Image size: 122685992 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:16 +0000 UTC	Normal	Pod pg-tde-repo-host-0.spec.containers{pgbackrest-config}		Created	Created container: pgbackrest-config	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:16 +0000 UTC	Normal	Pod pg-tde-repo-host-0.spec.containers{pgbackrest-config}		Started	Started container pgbackrest-config	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:19 +0000 UTC	Warning	Pod pg-tde-instance1-nn9t-0.spec.containers{database}		Unhealthy	Readiness probe failed: 	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:19 +0000 UTC	Normal	PostgresCluster.upstream.pgv2.percona.com pg-tde		StanzasCreated	pgBackRest stanza creation completed successfully	postgrescluster-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:20 +0000 UTC	Normal	Pod pg-tde-backup-84rb-mjkpn	Binding	Scheduled	Successfully assigned kuttl-test-tight-mule/pg-tde-backup-84rb-mjkpn to gke-jen-pg-1773-5cca644c-default-pool-3286f4cc-r510	default-scheduler	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:20 +0000 UTC	Normal	Pod pg-tde-backup-84rb-mjkpn.spec.initContainers{pgbackrest-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:20 +0000 UTC	Normal	Pod pg-tde-backup-84rb-mjkpn.spec.initContainers{pgbackrest-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd" in 199ms (199ms including waiting). Image size: 86000056 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:20 +0000 UTC	Normal	Pod pg-tde-backup-84rb-mjkpn.spec.initContainers{pgbackrest-init}		Created	Created container: pgbackrest-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:20 +0000 UTC	Normal	Job.batch pg-tde-backup-84rb		SuccessfulCreate	Created pod: pg-tde-backup-84rb-mjkpn	job-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:21 +0000 UTC	Normal	Pod pg-tde-backup-84rb-mjkpn.spec.initContainers{pgbackrest-init}		Started	Started container pgbackrest-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:21 +0000 UTC	Normal	Pod pg-tde-backup-84rb-mjkpn.spec.containers{pgbackrest}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:21 +0000 UTC	Normal	Pod pg-tde-backup-84rb-mjkpn.spec.containers{pgbackrest}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 124ms (124ms including waiting). Image size: 122685992 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:21 +0000 UTC	Normal	Pod pg-tde-backup-84rb-mjkpn.spec.containers{pgbackrest}		Created	Created container: pgbackrest	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:22 +0000 UTC	Normal	Pod pg-tde-backup-84rb-mjkpn.spec.containers{pgbackrest}		Started	Started container pgbackrest	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:23 +0000 UTC	Warning	PostgresCluster.upstream.pgv2.percona.com pg-tde		UnableToCreateStanzas	repo1-path = /pgbackrest/repo1
        2026-08-21 21:02:23.272 P00  ERROR: [050]: unable to acquire lock on file '/tmp/pgbackrest/db-backup-1.lock': Resource temporarily unavailable
                                            HINT: is another pgBackRest process running?
        2026-08-21 21:02:23.473 P00  ERROR: [050]: unable to acquire lock on file '/tmp/pgbackrest/db-backup-1.lock': Resource temporarily unavailable
                                            HINT: is another pgBackRest process running?
         : command terminated with exit code 50	postgrescluster-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:02:51 +0000 UTC	Normal	Job.batch pg-tde-backup-84rb		Completed	Job completed	job-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:03:15 +0000 UTC	Normal	Job.batch pg-tde-backup-klt9		SuccessfulCreate	Created pod: pg-tde-backup-klt9-mck5c	job-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:03:16 +0000 UTC	Normal	Pod pg-tde-backup-klt9-mck5c	Binding	Scheduled	Successfully assigned kuttl-test-tight-mule/pg-tde-backup-klt9-mck5c to gke-jen-pg-1773-5cca644c-default-pool-3286f4cc-r510	default-scheduler	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:03:16 +0000 UTC	Normal	Pod pg-tde-backup-klt9-mck5c.spec.initContainers{pgbackrest-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:03:16 +0000 UTC	Normal	Pod pg-tde-backup-klt9-mck5c.spec.initContainers{pgbackrest-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd" in 141ms (141ms including waiting). Image size: 86000056 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:03:16 +0000 UTC	Normal	Pod pg-tde-backup-klt9-mck5c.spec.initContainers{pgbackrest-init}		Created	Created container: pgbackrest-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:03:16 +0000 UTC	Normal	Pod pg-tde-backup-klt9-mck5c.spec.initContainers{pgbackrest-init}		Started	Started container pgbackrest-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:03:17 +0000 UTC	Normal	Pod pg-tde-backup-klt9-mck5c.spec.containers{pgbackrest}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:03:18 +0000 UTC	Normal	Pod pg-tde-backup-klt9-mck5c.spec.containers{pgbackrest}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 123ms (123ms including waiting). Image size: 122685992 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:03:18 +0000 UTC	Normal	Pod pg-tde-backup-klt9-mck5c.spec.containers{pgbackrest}		Created	Created container: pgbackrest	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:03:18 +0000 UTC	Normal	Pod pg-tde-backup-klt9-mck5c.spec.containers{pgbackrest}		Started	Started container pgbackrest	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:05:10 +0000 UTC	Normal	Job.batch pg-tde-backup-klt9		Completed	Job completed	job-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:05:42 +0000 UTC	Normal	PodDisruptionBudget.policy pg-tde-set-instance1		NoPods	No matching pods found	controllermanager	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:05:43 +0000 UTC	Normal	Pod pg-tde-pgbackrest-restore-v4bqp	Binding	Scheduled	Successfully assigned kuttl-test-tight-mule/pg-tde-pgbackrest-restore-v4bqp to gke-jen-pg-1773-5cca644c-default-pool-3286f4cc-r510	default-scheduler	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:05:43 +0000 UTC	Normal	Job.batch pg-tde-pgbackrest-restore		SuccessfulCreate	Created pod: pg-tde-pgbackrest-restore-v4bqp	job-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:05:58 +0000 UTC	Normal	Pod pg-tde-pgbackrest-restore-v4bqp		SuccessfulAttachVolume	AttachVolume.Attach succeeded for volume "pvc-27b92463-c92d-45f3-9171-93a8798d8068" 	attachdetach-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:00 +0000 UTC	Normal	Pod pg-tde-pgbackrest-restore-v4bqp.spec.initContainers{nss-wrapper-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:00 +0000 UTC	Normal	Pod pg-tde-pgbackrest-restore-v4bqp.spec.initContainers{nss-wrapper-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 306ms (306ms including waiting). Image size: 122685992 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:00 +0000 UTC	Normal	Pod pg-tde-pgbackrest-restore-v4bqp.spec.initContainers{nss-wrapper-init}		Created	Created container: nss-wrapper-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:00 +0000 UTC	Normal	Pod pg-tde-pgbackrest-restore-v4bqp.spec.initContainers{nss-wrapper-init}		Started	Started container nss-wrapper-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:01 +0000 UTC	Normal	Pod pg-tde-pgbackrest-restore-v4bqp.spec.containers{pgbackrest-restore}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:01 +0000 UTC	Normal	Pod pg-tde-pgbackrest-restore-v4bqp.spec.containers{pgbackrest-restore}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 151ms (151ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:01 +0000 UTC	Normal	Pod pg-tde-pgbackrest-restore-v4bqp.spec.containers{pgbackrest-restore}		Created	Created container: pgbackrest-restore	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:01 +0000 UTC	Normal	Pod pg-tde-pgbackrest-restore-v4bqp.spec.containers{pgbackrest-restore}		Started	Started container pgbackrest-restore	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:11 +0000 UTC	Normal	Job.batch pg-tde-pgbackrest-restore		Completed	Job completed	job-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:13 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0	Binding	Scheduled	Successfully assigned kuttl-test-tight-mule/pg-tde-instance1-92sr-0 to gke-jen-pg-1773-5cca644c-default-pool-3286f4cc-r510	default-scheduler	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:13 +0000 UTC	Normal	StatefulSet.apps pg-tde-instance1-92sr		SuccessfulCreate	create Pod pg-tde-instance1-92sr-0 in StatefulSet pg-tde-instance1-92sr successful	statefulset-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:15 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{database-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:15 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{database-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd" in 161ms (161ms including waiting). Image size: 86000056 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:15 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{database-init}		Created	Created container: database-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:15 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{database-init}		Started	Started container database-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:16 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{postgres-startup}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:16 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{postgres-startup}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 116ms (116ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:16 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{postgres-startup}		Created	Created container: postgres-startup	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:16 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{postgres-startup}		Started	Started container postgres-startup	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:17 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:17 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 128ms (128ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:17 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{nss-wrapper-init-logcollector}		Created	Created container: nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:17 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{nss-wrapper-init-logcollector}		Started	Started container nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:18 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{nss-wrapper-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:18 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{nss-wrapper-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 135ms (135ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:18 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{nss-wrapper-init}		Created	Created container: nss-wrapper-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:18 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.initContainers{nss-wrapper-init}		Started	Started container nss-wrapper-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:19 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.containers{database}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:19 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.containers{database}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 161ms (161ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:19 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.containers{database}		Created	Created container: database	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:19 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.containers{database}		Started	Started container database	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:19 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.containers{replication-cert-copy}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:20 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.containers{replication-cert-copy}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 144ms (144ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:20 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.containers{replication-cert-copy}		Created	Created container: replication-cert-copy	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:20 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.containers{replication-cert-copy}		Started	Started container replication-cert-copy	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:20 +0000 UTC	Normal	Pod pg-tde-instance1-92sr-0.spec.containers{logs}		Pulled	Container image "docker.io/perconalab/fluentbit:main-logcollector" already present on machine	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:22 +0000 UTC	Warning	Pod pg-tde-instance1-92sr-0.spec.containers{database}		Unhealthy	Readiness probe failed: 	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:28 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0	Binding	Scheduled	Successfully assigned kuttl-test-tight-mule/pg-tde-instance1-nn9t-0 to gke-jen-pg-1773-5cca644c-default-pool-3286f4cc-srm7	default-scheduler	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:28 +0000 UTC	Normal	StatefulSet.apps pg-tde-instance1-nn9t		SuccessfulCreate	create Pod pg-tde-instance1-nn9t-0 in StatefulSet pg-tde-instance1-nn9t successful	statefulset-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:29 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0	Binding	Scheduled	Successfully assigned kuttl-test-tight-mule/pg-tde-instance1-whvr-0 to gke-jen-pg-1773-5cca644c-default-pool-3286f4cc-8w08	default-scheduler	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:29 +0000 UTC	Normal	StatefulSet.apps pg-tde-instance1-whvr		SuccessfulCreate	create Pod pg-tde-instance1-whvr-0 in StatefulSet pg-tde-instance1-whvr successful	statefulset-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:36 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0		SuccessfulAttachVolume	AttachVolume.Attach succeeded for volume "pvc-269842fc-d9d2-421f-a5de-b1d6d1b3f2fb" 	attachdetach-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:37 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{database-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:37 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{database-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd" in 150ms (150ms including waiting). Image size: 86000056 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:37 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{database-init}		Created	Created container: database-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:37 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{database-init}		Started	Started container database-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:37 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0		SuccessfulAttachVolume	AttachVolume.Attach succeeded for volume "pvc-43a8406b-1e77-4849-8541-9e248af354ec" 	attachdetach-controller	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:38 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{postgres-startup}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:39 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{postgres-startup}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 143ms (143ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:39 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{postgres-startup}		Created	Created container: postgres-startup	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:39 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{postgres-startup}		Started	Started container postgres-startup	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:39 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:40 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 144ms (144ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:40 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{nss-wrapper-init-logcollector}		Created	Created container: nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:40 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{nss-wrapper-init-logcollector}		Started	Started container nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:40 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{nss-wrapper-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:40 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{database-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:40 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{database-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1773-5cca644cd" in 142ms (142ms including waiting). Image size: 86000056 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:40 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{database-init}		Created	Created container: database-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:40 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{database-init}		Started	Started container database-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:41 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{nss-wrapper-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 128ms (128ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:41 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{nss-wrapper-init}		Created	Created container: nss-wrapper-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:41 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.initContainers{nss-wrapper-init}		Started	Started container nss-wrapper-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:41 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.containers{database}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:41 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{postgres-startup}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:41 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{postgres-startup}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 144ms (144ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:41 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{postgres-startup}		Created	Created container: postgres-startup	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:41 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{postgres-startup}		Started	Started container postgres-startup	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:42 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.containers{database}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 132ms (132ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:42 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.containers{database}		Created	Created container: database	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:42 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.containers{database}		Started	Started container database	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:42 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.containers{replication-cert-copy}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:42 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.containers{replication-cert-copy}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 153ms (153ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:42 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.containers{replication-cert-copy}		Created	Created container: replication-cert-copy	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:42 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.containers{replication-cert-copy}		Started	Started container replication-cert-copy	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:42 +0000 UTC	Normal	Pod pg-tde-instance1-nn9t-0.spec.containers{logs}		Pulled	Container image "docker.io/perconalab/fluentbit:main-logcollector" already present on machine	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:42 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:42 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{nss-wrapper-init-logcollector}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 128ms (128ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:42 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{nss-wrapper-init-logcollector}		Created	Created container: nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:42 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{nss-wrapper-init-logcollector}		Started	Started container nss-wrapper-init-logcollector	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:43 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{nss-wrapper-init}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:43 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{nss-wrapper-init}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 137ms (137ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:43 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{nss-wrapper-init}		Created	Created container: nss-wrapper-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:43 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.initContainers{nss-wrapper-init}		Started	Started container nss-wrapper-init	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:44 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.containers{database}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:44 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.containers{database}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 143ms (143ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:44 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.containers{database}		Created	Created container: database	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:44 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.containers{database}		Started	Started container database	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:44 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.containers{replication-cert-copy}		Pulling	Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres"	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:45 +0000 UTC	Warning	Pod pg-tde-instance1-nn9t-0.spec.containers{database}		Unhealthy	Readiness probe failed: 	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:45 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.containers{replication-cert-copy}		Pulled	Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 119ms (119ms including waiting). Image size: 449182289 bytes.	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:45 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.containers{replication-cert-copy}		Created	Created container: replication-cert-copy	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:45 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.containers{replication-cert-copy}		Started	Started container replication-cert-copy	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:45 +0000 UTC	Normal	Pod pg-tde-instance1-whvr-0.spec.containers{logs}		Pulled	Container image "docker.io/perconalab/fluentbit:main-logcollector" already present on machine	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:06:47 +0000 UTC	Warning	Pod pg-tde-instance1-whvr-0.spec.containers{database}		Unhealthy	Readiness probe failed: 	kubelet	
    logger.go:42: 21:12:29 | pg-tde | 2026-08-21 21:07:31 +0000 UTC	Warning	PostgresCluster.upstream.pgv2.percona.com pg-tde		PGTDEVaultProviderChangeFailed	command terminated with exit code 3	postgrescluster-controller	
    logger.go:42: 21:12:29 | pg-tde | Deleting namespace "kuttl-test-tight-mule"
=== NAME  kuttl
    harness.go:404: run tests finished
    harness.go:511: cleaning up
    harness.go:568: removing temp folder: ""
--- FAIL: kuttl (804.99s)
    --- FAIL: kuttl/harness (0.00s)
        --- FAIL: kuttl/harness/pg-tde (804.20s)
FAIL