=== RUN kuttl harness.go:469: starting setup harness.go:259: running tests using configured kubeconfig. harness.go:282: Successful connection to cluster at: https://35.232.35.196 harness.go:365: running tests harness.go:78: going to run test suite with timeout of 600 seconds for each step harness.go:377: testsuite: e2e-tests/tests has 60 tests === RUN kuttl/harness === RUN kuttl/harness/cert-management-policy === PAUSE kuttl/harness/cert-management-policy === CONT kuttl/harness/cert-management-policy logger.go:42: 20:30:38 | cert-management-policy | Creating namespace "kuttl-test-stable-swift" logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | starting test step 0-deploy-operator logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | running command: [sh -c set -o errexit set -o xtrace source ../../functions init_temp_dir deploy_cert_manager deploy_operator] logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | + source ../../functions logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ realpath ../../.. logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | ++ CERT_MANAGER_VER=1.20.2 logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | ++ CHAOS_MESH_VER=2.5.1 logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | ++ BUSYBOX_VER=1.36 logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | ++++ pwd logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | ++ test_name=cert-management-policy logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/vars.sh logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | ++++ git rev-parse --abbrev-ref HEAD logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ export GIT_BRANCH=PR-1812 logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ GIT_BRANCH=PR-1812 logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ export VERSION=PR-1812-09e4007fd logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ VERSION=PR-1812-09e4007fd logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ export SKIP_TEST_WARNINGS=true logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ SKIP_TEST_WARNINGS=true logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ export K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ export K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ export K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ export K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | +++ [[ -z '' ]] logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | ++++ detect_k8s_platform logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | ++++ local detected_platform logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | ++++ local xtrace_enabled=false logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | ++++ [[ -o xtrace ]] logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | ++++ xtrace_enabled=true logger.go:42: 20:30:38 | cert-management-policy/0-deploy-operator | ++++ set +o xtrace logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ PLATFORM=gke logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export PLATFORM logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ ! -n '' ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ -n '' ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export PG_VER=18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ PG_VER=18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export PG_DISTRIBUTION= logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ PG_DISTRIBUTION= logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ '' == community ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export BUCKET=pg-operator-testing logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ BUCKET=pg-operator-testing logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export PGOV1_TAG=1.4.0 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ PGOV1_TAG=1.4.0 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export PGOV1_VER=14 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ PGOV1_VER=14 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export CPGO_VERSION=5.8.7 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ CPGO_VERSION=5.8.7 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export MINIO_VER=5.4.0 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ MINIO_VER=5.4.0 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export VAULT_VER=0.32.0 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ VAULT_VER=0.32.0 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export REGISTRY_NAME=docker.io logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ REGISTRY_NAME=docker.io logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | ++++ printenv logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | ++++ grep -E '^IMAGE' logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | ++++ awk -F= '{print $1}' logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | ++++ eval 'echo $IMAGE_BACKREST' logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | ++++ eval 'echo $IMAGE' logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == docker.io/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == percona/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == perconalab/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | ++++ eval 'echo $IMAGE_UPGRADE' logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | ++++ eval 'echo $IMAGE_LOGCOLLECTOR' logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++++ echo perconalab/fluentbit:main-logcollector logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ var_value=perconalab/fluentbit:main-logcollector logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | ++++ eval 'echo $IMAGE_BASE' logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator == percona/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | ++++ eval 'echo $IMAGE_PGBOUNCER' logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | ++++ eval 'echo $IMAGE_POSTGRESQL' logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | ++++ eval 'echo $IMAGE_PMM_SERVER' logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++++ echo perconalab/pmm-server:3-dev-latest logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ var_value=perconalab/pmm-server:3-dev-latest logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | ++++ eval 'echo $IMAGE_PMM_CLIENT' logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++++ echo perconalab/pmm-client:3-dev-latest logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ var_value=perconalab/pmm-client:3-dev-latest logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | ++++ which gdate logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | ++++ which date logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ date=/usr/sbin/date logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | ++++ which gsed logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | ++++ which sed logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | +++ sed=/usr/sbin/sed logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | + init_temp_dir logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | + rm -rf /tmp/kuttl/pg/cert-management-policy logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | + mkdir -p /tmp/kuttl/pg/cert-management-policy logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | + deploy_cert_manager logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | + [[ gke == rancher ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | + destroy_cert_manager logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | + [[ gke == rancher ]] logger.go:42: 20:30:41 | cert-management-policy/0-deploy-operator | + helm uninstall cert-manager -n cert-manager logger.go:42: 20:30:42 | cert-management-policy/0-deploy-operator | + : logger.go:42: 20:30:42 | cert-management-policy/0-deploy-operator | + kubectl get crd -o name logger.go:42: 20:30:42 | cert-management-policy/0-deploy-operator | + grep cert-manager.io logger.go:42: 20:30:42 | cert-management-policy/0-deploy-operator | + xargs -r kubectl delete logger.go:42: 20:30:42 | cert-management-policy/0-deploy-operator | + kubectl get mutatingwebhookconfiguration -o name logger.go:42: 20:30:42 | cert-management-policy/0-deploy-operator | + grep cert-manager logger.go:42: 20:30:42 | cert-management-policy/0-deploy-operator | + xargs kubectl delete logger.go:42: 20:30:43 | cert-management-policy/0-deploy-operator | + : logger.go:42: 20:30:43 | cert-management-policy/0-deploy-operator | + kubectl get validatingwebhookconfiguration -o name logger.go:42: 20:30:43 | cert-management-policy/0-deploy-operator | + grep cert-manager logger.go:42: 20:30:43 | cert-management-policy/0-deploy-operator | + xargs kubectl delete logger.go:42: 20:30:44 | cert-management-policy/0-deploy-operator | + : logger.go:42: 20:30:44 | cert-management-policy/0-deploy-operator | + kubectl get clusterrole,clusterrolebinding -o name logger.go:42: 20:30:44 | cert-management-policy/0-deploy-operator | + grep cert-manager logger.go:42: 20:30:44 | cert-management-policy/0-deploy-operator | + xargs -r kubectl delete logger.go:42: 20:30:45 | cert-management-policy/0-deploy-operator | + kubectl delete namespace cert-manager --grace-period=0 --force=true --ignore-not-found logger.go:42: 20:30:45 | cert-management-policy/0-deploy-operator | + echo 'deploy cert manager' logger.go:42: 20:30:45 | cert-management-policy/0-deploy-operator | deploy cert manager logger.go:42: 20:30:45 | cert-management-policy/0-deploy-operator | + helm repo add jetstack https://charts.jetstack.io --force-update logger.go:42: 20:30:46 | cert-management-policy/0-deploy-operator | "jetstack" has been added to your repositories logger.go:42: 20:30:46 | cert-management-policy/0-deploy-operator | + helm repo update logger.go:42: 20:30:46 | cert-management-policy/0-deploy-operator | Hang tight while we grab the latest from your chart repositories... logger.go:42: 20:30:46 | cert-management-policy/0-deploy-operator | ...Successfully got an update from the "minio" chart repository logger.go:42: 20:30:46 | cert-management-policy/0-deploy-operator | ...Successfully got an update from the "hashicorp" chart repository logger.go:42: 20:30:46 | cert-management-policy/0-deploy-operator | ...Successfully got an update from the "percona" chart repository logger.go:42: 20:30:46 | cert-management-policy/0-deploy-operator | ...Successfully got an update from the "jetstack" chart repository logger.go:42: 20:30:46 | cert-management-policy/0-deploy-operator | ...Successfully got an update from the "chaos-mesh" chart repository logger.go:42: 20:30:46 | cert-management-policy/0-deploy-operator | Update Complete. ⎈Happy Helming!⎈ logger.go:42: 20:30:46 | cert-management-policy/0-deploy-operator | + retry 2 20 helm upgrade --install cert-manager jetstack/cert-manager --namespace cert-manager --create-namespace --version 1.20.2 --set installCRDs=true --set 'extraArgs={--enable-certificate-owner-ref=true}' logger.go:42: 20:30:46 | cert-management-policy/0-deploy-operator | + local max=2 logger.go:42: 20:30:46 | cert-management-policy/0-deploy-operator | + local delay=20 logger.go:42: 20:30:46 | cert-management-policy/0-deploy-operator | + shift 2 logger.go:42: 20:30:46 | cert-management-policy/0-deploy-operator | + local n=1 logger.go:42: 20:30:46 | cert-management-policy/0-deploy-operator | + helm upgrade --install cert-manager jetstack/cert-manager --namespace cert-manager --create-namespace --version 1.20.2 --set installCRDs=true --set 'extraArgs={--enable-certificate-owner-ref=true}' logger.go:42: 20:30:47 | cert-management-policy/0-deploy-operator | Release "cert-manager" does not exist. Installing it now. logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | NAME: cert-manager logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | LAST DEPLOYED: Tue Sep 1 20:30:48 2026 logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | NAMESPACE: cert-manager logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | STATUS: deployed logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | REVISION: 1 logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | TEST SUITE: None logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | NOTES: logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | ⚠️ WARNING: `installCRDs` is deprecated, use `crds.enabled` instead. logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | cert-manager v1.20.2 has been deployed successfully! logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | In order to begin issuing certificates, you will need to set up a ClusterIssuer logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | or Issuer resource (for example, by creating a 'letsencrypt-staging' issuer). logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | More information on the different types of issuers and how to configure them logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | can be found in our documentation: logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | https://cert-manager.io/docs/configuration/ logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | For information on how to configure cert-manager to automatically provision logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | Certificates for Ingress resources, take a look at the `ingress-shim` logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | documentation: logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | https://cert-manager.io/docs/usage/ingress/ logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | For information on how to configure cert-manager to automatically provision logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | Certificates for Gateway API resources, take a look at the `gateway resource` logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | documentation: logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | https://cert-manager.io/docs/usage/gateway/ logger.go:42: 20:31:20 | cert-management-policy/0-deploy-operator | + kubectl label namespace cert-manager certmanager.k8s.io/disable-validation=true logger.go:42: 20:31:21 | cert-management-policy/0-deploy-operator | namespace/cert-manager labeled logger.go:42: 20:31:21 | cert-management-policy/0-deploy-operator | + kubectl label namespace cert-manager e2e.percona.com/managed-by=percona-postgresql-operator-tests --overwrite logger.go:42: 20:31:21 | cert-management-policy/0-deploy-operator | namespace/cert-manager labeled logger.go:42: 20:31:21 | cert-management-policy/0-deploy-operator | + kubectl label deployment -n cert-manager cert-manager cert-manager-webhook cert-manager-cainjector e2e.percona.com/managed-by=percona-postgresql-operator-tests --overwrite logger.go:42: 20:31:22 | cert-management-policy/0-deploy-operator | deployment.apps/cert-manager labeled logger.go:42: 20:31:22 | cert-management-policy/0-deploy-operator | deployment.apps/cert-manager-webhook labeled logger.go:42: 20:31:23 | cert-management-policy/0-deploy-operator | deployment.apps/cert-manager-cainjector labeled logger.go:42: 20:31:23 | cert-management-policy/0-deploy-operator | + kubectl wait deployment cert-manager cert-manager-webhook cert-manager-cainjector --for=condition=available --timeout=100s --namespace cert-manager logger.go:42: 20:31:23 | cert-management-policy/0-deploy-operator | deployment.apps/cert-manager condition met logger.go:42: 20:31:24 | cert-management-policy/0-deploy-operator | deployment.apps/cert-manager-webhook condition met logger.go:42: 20:31:24 | cert-management-policy/0-deploy-operator | deployment.apps/cert-manager-cainjector condition met logger.go:42: 20:31:24 | cert-management-policy/0-deploy-operator | + echo 'Waiting for cert-manager webhook to be ready...' logger.go:42: 20:31:24 | cert-management-policy/0-deploy-operator | Waiting for cert-manager webhook to be ready... logger.go:42: 20:31:24 | cert-management-policy/0-deploy-operator | + kubectl get validatingwebhookconfiguration cert-manager-webhook -o 'jsonpath={.webhooks[0].clientConfig.caBundle}' logger.go:42: 20:31:24 | cert-management-policy/0-deploy-operator | + grep -q '[A-Za-z0-9+/=]' logger.go:42: 20:31:25 | cert-management-policy/0-deploy-operator | + echo 'Waiting for cert-manager mutating webhook to be ready...' logger.go:42: 20:31:25 | cert-management-policy/0-deploy-operator | Waiting for cert-manager mutating webhook to be ready... logger.go:42: 20:31:25 | cert-management-policy/0-deploy-operator | + kubectl get mutatingwebhookconfiguration cert-manager-webhook -o 'jsonpath={.webhooks[0].clientConfig.caBundle}' logger.go:42: 20:31:25 | cert-management-policy/0-deploy-operator | + grep -q '[A-Za-z0-9+/=]' logger.go:42: 20:31:25 | cert-management-policy/0-deploy-operator | + echo 'Waiting for cert-manager webhook service to have endpoints...' logger.go:42: 20:31:25 | cert-management-policy/0-deploy-operator | Waiting for cert-manager webhook service to have endpoints... logger.go:42: 20:31:25 | cert-management-policy/0-deploy-operator | + kubectl -n cert-manager get endpoints cert-manager-webhook -o 'jsonpath={.subsets[*].addresses}' logger.go:42: 20:31:25 | cert-management-policy/0-deploy-operator | + grep -q . logger.go:42: 20:31:25 | cert-management-policy/0-deploy-operator | Warning: v1 Endpoints is deprecated in v1.33+; use discovery.k8s.io/v1 EndpointSlice logger.go:42: 20:31:25 | cert-management-policy/0-deploy-operator | + deploy_operator logger.go:42: 20:31:25 | cert-management-policy/0-deploy-operator | + local cw_prefix= logger.go:42: 20:31:25 | cert-management-policy/0-deploy-operator | + destroy_operator logger.go:42: 20:31:25 | cert-management-policy/0-deploy-operator | + kubectl -n pg-operator delete deployment percona-postgresql-operator --force --grace-period=0 logger.go:42: 20:31:26 | cert-management-policy/0-deploy-operator | Warning: Immediate deletion does not wait for confirmation that the running resource has been terminated. The resource may continue to run on the cluster indefinitely. logger.go:42: 20:31:26 | cert-management-policy/0-deploy-operator | Error from server (NotFound): deployments.apps "percona-postgresql-operator" not found logger.go:42: 20:31:26 | cert-management-policy/0-deploy-operator | + true logger.go:42: 20:31:26 | cert-management-policy/0-deploy-operator | + [[ -n pg-operator ]] logger.go:42: 20:31:26 | cert-management-policy/0-deploy-operator | + kubectl delete namespace pg-operator --force --grace-period=0 --ignore-not-found logger.go:42: 20:31:26 | cert-management-policy/0-deploy-operator | Warning: Immediate deletion does not wait for confirmation that the running resource has been terminated. The resource may continue to run on the cluster indefinitely. logger.go:42: 20:31:26 | cert-management-policy/0-deploy-operator | + [[ -n pg-operator ]] logger.go:42: 20:31:26 | cert-management-policy/0-deploy-operator | + create_namespace pg-operator logger.go:42: 20:31:26 | cert-management-policy/0-deploy-operator | + local namespace=pg-operator logger.go:42: 20:31:26 | cert-management-policy/0-deploy-operator | + [[ gke == openshift ]] logger.go:42: 20:31:26 | cert-management-policy/0-deploy-operator | + kubectl delete namespace pg-operator --ignore-not-found logger.go:42: 20:31:27 | cert-management-policy/0-deploy-operator | + kubectl wait --for=delete namespace pg-operator logger.go:42: 20:31:28 | cert-management-policy/0-deploy-operator | + kubectl create namespace pg-operator logger.go:42: 20:31:28 | cert-management-policy/0-deploy-operator | namespace/pg-operator created logger.go:42: 20:31:28 | cert-management-policy/0-deploy-operator | + cw_prefix=cw- logger.go:42: 20:31:28 | cert-management-policy/0-deploy-operator | + kubectl -n pg-operator apply --server-side --force-conflicts -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy/crd.yaml logger.go:42: 20:31:29 | cert-management-policy/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/crunchybridgeclusters.upstream.pgv2.percona.com serverside-applied logger.go:42: 20:31:29 | cert-management-policy/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/perconapgbackups.pgv2.percona.com serverside-applied logger.go:42: 20:31:31 | cert-management-policy/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/perconapgclusters.pgv2.percona.com serverside-applied logger.go:42: 20:31:31 | cert-management-policy/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/perconapgrestores.pgv2.percona.com serverside-applied logger.go:42: 20:31:31 | cert-management-policy/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/perconapgupgrades.pgv2.percona.com serverside-applied logger.go:42: 20:31:31 | cert-management-policy/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/pgadmins.upstream.pgv2.percona.com serverside-applied logger.go:42: 20:31:31 | cert-management-policy/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/pgupgrades.upstream.pgv2.percona.com serverside-applied logger.go:42: 20:31:34 | cert-management-policy/0-deploy-operator | customresourcedefinition.apiextensions.k8s.io/postgresclusters.upstream.pgv2.percona.com serverside-applied logger.go:42: 20:31:34 | cert-management-policy/0-deploy-operator | + kubectl -n pg-operator apply --server-side --force-conflicts -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy/cw-rbac.yaml logger.go:42: 20:31:35 | cert-management-policy/0-deploy-operator | serviceaccount/percona-postgresql-operator serverside-applied logger.go:42: 20:31:35 | cert-management-policy/0-deploy-operator | clusterrole.rbac.authorization.k8s.io/percona-postgresql-operator serverside-applied logger.go:42: 20:31:36 | cert-management-policy/0-deploy-operator | clusterrolebinding.rbac.authorization.k8s.io/percona-postgresql-operator serverside-applied logger.go:42: 20:31:36 | cert-management-policy/0-deploy-operator | + local disable_telemetry=true logger.go:42: 20:31:36 | cert-management-policy/0-deploy-operator | + '[' cert-management-policy == telemetry-transfer ']' logger.go:42: 20:31:36 | cert-management-policy/0-deploy-operator | + yq eval '.spec.template.spec.containers[0].image = "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd"' /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy/cw-operator.yaml logger.go:42: 20:31:36 | cert-management-policy/0-deploy-operator | + yq eval '(.spec.template.spec.containers[] | select(.name=="operator") | .env[] | select(.name=="DISABLE_TELEMETRY") | .value) = "true"' - logger.go:42: 20:31:36 | cert-management-policy/0-deploy-operator | + yq eval '(.spec.template.spec.containers[] | select(.name=="operator") | .env[] | select(.name=="LOG_LEVEL") | .value) = "DEBUG"' - logger.go:42: 20:31:36 | cert-management-policy/0-deploy-operator | + yq eval '(.spec.template.spec.containers[] | select(.name=="operator") | .env[] | select(.name=="PGO_FEATURE_GATES") | .value) = ""' - logger.go:42: 20:31:36 | cert-management-policy/0-deploy-operator | + kubectl -n pg-operator apply -f - logger.go:42: 20:31:37 | cert-management-policy/0-deploy-operator | deployment.apps/percona-postgresql-operator created logger.go:42: 20:31:38 | cert-management-policy/0-deploy-operator | running command: [sh -c kubectl assert exist-enhanced deployment percona-postgresql-operator -n ${OPERATOR_NS:-$NAMESPACE} --field-selector status.readyReplicas=1] logger.go:42: 20:31:38 | cert-management-policy/0-deploy-operator | ASSERT deployment percona-postgresql-operator matching field criteria 'status.readyReplicas=1' should exist. logger.go:42: 20:31:39 | cert-management-policy/0-deploy-operator | ASSERT FAIL Resource(s) not found. logger.go:42: 20:31:40 | cert-management-policy/0-deploy-operator | running command: [sh -c kubectl assert exist-enhanced deployment percona-postgresql-operator -n ${OPERATOR_NS:-$NAMESPACE} --field-selector status.readyReplicas=1] logger.go:42: 20:31:40 | cert-management-policy/0-deploy-operator | ASSERT deployment percona-postgresql-operator matching field criteria 'status.readyReplicas=1' should exist. logger.go:42: 20:31:41 | cert-management-policy/0-deploy-operator | ASSERT FAIL Resource(s) not found. logger.go:42: 20:31:42 | cert-management-policy/0-deploy-operator | running command: [sh -c kubectl assert exist-enhanced deployment percona-postgresql-operator -n ${OPERATOR_NS:-$NAMESPACE} --field-selector status.readyReplicas=1] logger.go:42: 20:31:42 | cert-management-policy/0-deploy-operator | ASSERT deployment percona-postgresql-operator matching field criteria 'status.readyReplicas=1' should exist. logger.go:42: 20:31:43 | cert-management-policy/0-deploy-operator | ASSERT FAIL Resource(s) not found. logger.go:42: 20:31:44 | cert-management-policy/0-deploy-operator | running command: [sh -c kubectl assert exist-enhanced deployment percona-postgresql-operator -n ${OPERATOR_NS:-$NAMESPACE} --field-selector status.readyReplicas=1] logger.go:42: 20:31:44 | cert-management-policy/0-deploy-operator | ASSERT deployment percona-postgresql-operator matching field criteria 'status.readyReplicas=1' should exist. logger.go:42: 20:31:45 | cert-management-policy/0-deploy-operator | INFO Found 1 resource(s). logger.go:42: 20:31:45 | cert-management-policy/0-deploy-operator | NAME NAMESPACE COL0 logger.go:42: 20:31:45 | cert-management-policy/0-deploy-operator | percona-postgresql-operator pg-operator 1 logger.go:42: 20:31:45 | cert-management-policy/0-deploy-operator | ASSERT PASS logger.go:42: 20:31:45 | cert-management-policy/0-deploy-operator | test step completed 0-deploy-operator logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | starting test step 1-create-cluster logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | running command: [sh -c set -o errexit set -o xtrace source ../../functions get_cr "cert-management-policy" \ | yq '.spec.tls.certManagementPolicy = "userProvidedOnly"' \ | yq '.spec.proxy.pgBouncer.replicas = 1' \ | yq '.spec.instances[].replicas = 3' \ | kubectl -n "$NAMESPACE" apply -f -] logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | + source ../../functions logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ realpath ../../.. logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | ++ CERT_MANAGER_VER=1.20.2 logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | ++ CHAOS_MESH_VER=2.5.1 logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | ++ BUSYBOX_VER=1.36 logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | ++++ pwd logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | ++ test_name=cert-management-policy logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/vars.sh logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | ++++ git rev-parse --abbrev-ref HEAD logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ export GIT_BRANCH=PR-1812 logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ GIT_BRANCH=PR-1812 logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ export VERSION=PR-1812-09e4007fd logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ VERSION=PR-1812-09e4007fd logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ export SKIP_TEST_WARNINGS=true logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ SKIP_TEST_WARNINGS=true logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ export K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ export K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ export K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ export K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | +++ [[ -z '' ]] logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | ++++ detect_k8s_platform logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | ++++ local detected_platform logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | ++++ local xtrace_enabled=false logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | ++++ [[ -o xtrace ]] logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | ++++ xtrace_enabled=true logger.go:42: 20:31:45 | cert-management-policy/1-create-cluster | ++++ set +o xtrace logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ PLATFORM=gke logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export PLATFORM logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ ! -n '' ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ -n '' ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export PG_VER=18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ PG_VER=18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export PG_DISTRIBUTION= logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ PG_DISTRIBUTION= logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ '' == community ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export BUCKET=pg-operator-testing logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ BUCKET=pg-operator-testing logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export PGOV1_TAG=1.4.0 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ PGOV1_TAG=1.4.0 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export PGOV1_VER=14 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ PGOV1_VER=14 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export CPGO_VERSION=5.8.7 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ CPGO_VERSION=5.8.7 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export MINIO_VER=5.4.0 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ MINIO_VER=5.4.0 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export VAULT_VER=0.32.0 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ VAULT_VER=0.32.0 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export REGISTRY_NAME=docker.io logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ REGISTRY_NAME=docker.io logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | ++++ printenv logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | ++++ grep -E '^IMAGE' logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | ++++ awk -F= '{print $1}' logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | ++++ eval 'echo $IMAGE_BACKREST' logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | ++++ eval 'echo $IMAGE' logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == docker.io/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == percona/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == perconalab/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | ++++ eval 'echo $IMAGE_UPGRADE' logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++++ echo perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | ++++ eval 'echo $IMAGE_LOGCOLLECTOR' logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++++ echo perconalab/fluentbit:main-logcollector logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ var_value=perconalab/fluentbit:main-logcollector logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | ++++ eval 'echo $IMAGE_BASE' logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++++ echo perconalab/percona-postgresql-operator logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ var_value=perconalab/percona-postgresql-operator logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator == percona/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | ++++ eval 'echo $IMAGE_PGBOUNCER' logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | ++++ eval 'echo $IMAGE_POSTGRESQL' logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | ++++ eval 'echo $IMAGE_PMM_SERVER' logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++++ echo perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ var_value=perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | ++++ eval 'echo $IMAGE_PMM_CLIENT' logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++++ echo perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ var_value=perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | ++++ which gdate logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | ++++ which date logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ date=/usr/sbin/date logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | ++++ which gsed logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | ++++ which sed logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | +++ sed=/usr/sbin/sed logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + get_cr cert-management-policy logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + yq '.spec.tls.certManagementPolicy = "userProvidedOnly"' logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + local cr_name=cert-management-policy logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + local repo_path= logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + local source_path= logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + local platform=gke logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + local cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf/cert-management-policy.yaml logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + local platform_cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf/cert-management-policy-gke.yaml logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + local spaces_cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf/cert-management-policy-spaces.yaml logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + [[ -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf/cert-management-policy-gke.yaml ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + [[ gke == doks ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + yq '.spec.proxy.pgBouncer.replicas = 1' logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + crs=('/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy/cr.yaml') logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + local crs logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + [[ -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf/cert-management-policy.yaml ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + yq '.spec.instances[].replicas = 3' logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + yq eval-all $'\n\t\tselect(fileIndex == 0) * (select(fileIndex == 1) // {}) |\n\t\t.metadata.name = "cert-management-policy" |\n\t\t.metadata.labels = {"e2e":"cert-management-policy"} |\n\t\t.spec.postgresVersion = 18 |\n\t\t.spec.users += [{"name":"postgres","password":{"type":"AlphaNumeric"}}] |\n\t\t.spec.users += [{"name":"cert-management-policy","password":{"type":"AlphaNumeric"}}] |\n\t\t.spec.image = "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" |\n\t\t.spec.initContainer.image = "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd" |\n\t\t.spec.backups.pgbackrest.image = "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" |\n\t\t.spec.proxy.pgBouncer.image = "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" |\n\t\t.spec.logcollector.image = "docker.io/perconalab/fluentbit:main-logcollector" |\n\t\t.spec.pmm.image = "docker.io/perconalab/pmm-client:3-dev-latest" |\n\t\t.spec.pmm.secret = "cert-management-policy-pmm-secret" |\n\t\t.spec.pmm.customClusterName = "cert-management-policy-pmm-custom-name" |\n\t\t.spec.pmm.postgresParams = "--environment=dev-postgres"\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy/cr.yaml logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + kubectl -n kuttl-test-stable-swift apply -f - logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + /usr/sbin/sed -i 's|||g' /tmp/kuttl/pg/cert-management-policy/cr.yaml logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + /usr/sbin/sed -i 's|||g' /tmp/kuttl/pg/cert-management-policy/cr.yaml logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + /usr/sbin/sed -i 's||pg-operator-testing|g' /tmp/kuttl/pg/cert-management-policy/cr.yaml logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + /usr/sbin/sed -i 's||docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd|g' /tmp/kuttl/pg/cert-management-policy/cr.yaml logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + [[ gke == openshift ]] logger.go:42: 20:31:47 | cert-management-policy/1-create-cluster | + cat /tmp/kuttl/pg/cert-management-policy/cr.yaml logger.go:42: 20:31:49 | cert-management-policy/1-create-cluster | perconapgcluster.pgv2.percona.com/cert-management-policy created logger.go:42: 20:31:50 | cert-management-policy/1-create-cluster | test step completed 1-create-cluster logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | starting test step 2-create-root-ca logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | running command: [sh -c set -o errexit set -o pipefail set -o xtrace source ../../functions cluster="cert-management-policy" issue_root_ca kubectl -n "$NAMESPACE" create secret generic "${cluster}-cluster-ca-cert" \ --from-file=root.crt="$TEMP_DIR/root-ca.crt" \ --from-file=root.key="$TEMP_DIR/root-ca.key" \ --dry-run=client -o yaml \ | kubectl label --local -f - -o yaml \ postgres-operator.crunchydata.com/cluster="$cluster" \ | kubectl -n "$NAMESPACE" apply -f - secret="${cluster}-cluster-ca-cert" checksum=$(kubectl -n "$NAMESPACE" get secret "$secret" -o json \ | jq --compact-output --sort-keys '.data' \ | sha256sum | awk '{print $1}') kubectl -n "$NAMESPACE" annotate secret "$secret" \ e2e.percona.com/secret-checksum="$checksum" \ --overwrite] logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | + source ../../functions logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ realpath ../../.. logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | ++ CERT_MANAGER_VER=1.20.2 logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | ++ CHAOS_MESH_VER=2.5.1 logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | ++ BUSYBOX_VER=1.36 logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | ++++ pwd logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | ++ test_name=cert-management-policy logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/vars.sh logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | ++++ git rev-parse --abbrev-ref HEAD logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ export GIT_BRANCH=PR-1812 logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ GIT_BRANCH=PR-1812 logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ export VERSION=PR-1812-09e4007fd logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ VERSION=PR-1812-09e4007fd logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ export SKIP_TEST_WARNINGS=true logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ SKIP_TEST_WARNINGS=true logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ export K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ export K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ export K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ export K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | +++ [[ -z '' ]] logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | ++++ detect_k8s_platform logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | ++++ local detected_platform logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | ++++ local xtrace_enabled=false logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | ++++ [[ -o xtrace ]] logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | ++++ xtrace_enabled=true logger.go:42: 20:31:50 | cert-management-policy/2-create-root-ca | ++++ set +o xtrace logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ PLATFORM=gke logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export PLATFORM logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ ! -n '' ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ -n '' ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export PG_VER=18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ PG_VER=18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export PG_DISTRIBUTION= logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ PG_DISTRIBUTION= logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ '' == community ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export BUCKET=pg-operator-testing logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ BUCKET=pg-operator-testing logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export PGOV1_TAG=1.4.0 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ PGOV1_TAG=1.4.0 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export PGOV1_VER=14 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ PGOV1_VER=14 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export CPGO_VERSION=5.8.7 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ CPGO_VERSION=5.8.7 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export MINIO_VER=5.4.0 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ MINIO_VER=5.4.0 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export VAULT_VER=0.32.0 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ VAULT_VER=0.32.0 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export REGISTRY_NAME=docker.io logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ REGISTRY_NAME=docker.io logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | ++++ printenv logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | ++++ grep -E '^IMAGE' logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | ++++ awk -F= '{print $1}' logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | ++++ eval 'echo $IMAGE_BACKREST' logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | ++++ eval 'echo $IMAGE' logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ var_value=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == docker.io/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == percona/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == perconalab/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | ++++ eval 'echo $IMAGE_UPGRADE' logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++++ echo perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | ++++ eval 'echo $IMAGE_LOGCOLLECTOR' logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++++ echo perconalab/fluentbit:main-logcollector logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ var_value=perconalab/fluentbit:main-logcollector logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | ++++ eval 'echo $IMAGE_BASE' logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++++ echo perconalab/percona-postgresql-operator logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ var_value=perconalab/percona-postgresql-operator logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator == percona/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ new_value=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | ++++ eval 'echo $IMAGE_PGBOUNCER' logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | ++++ eval 'echo $IMAGE_POSTGRESQL' logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | ++++ eval 'echo $IMAGE_PMM_SERVER' logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++++ echo perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ var_value=perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | ++++ eval 'echo $IMAGE_PMM_CLIENT' logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++++ echo perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ var_value=perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]] logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | ++++ which gdate logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | ++++ which date logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ date=/usr/sbin/date logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | ++++ which gsed logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | ++++ which sed logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | +++ sed=/usr/sbin/sed logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | + cluster=cert-management-policy logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | + issue_root_ca logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | + openssl ecparam -name prime256v1 -genkey -noout -out /tmp/kuttl/pg/cert-management-policy/root-ca.key logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | + openssl req -new -x509 -key /tmp/kuttl/pg/cert-management-policy/root-ca.key -days 3650 -sha384 -config /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf/tls-root-ca.conf -out /tmp/kuttl/pg/cert-management-policy/root-ca.crt logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | + openssl verify -CAfile /tmp/kuttl/pg/cert-management-policy/root-ca.crt /tmp/kuttl/pg/cert-management-policy/root-ca.crt logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | /tmp/kuttl/pg/cert-management-policy/root-ca.crt: OK logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | + kubectl -n kuttl-test-stable-swift create secret generic cert-management-policy-cluster-ca-cert --from-file=root.crt=/tmp/kuttl/pg/cert-management-policy/root-ca.crt --from-file=root.key=/tmp/kuttl/pg/cert-management-policy/root-ca.key --dry-run=client -o yaml logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | + kubectl label --local -f - -o yaml postgres-operator.crunchydata.com/cluster=cert-management-policy logger.go:42: 20:31:52 | cert-management-policy/2-create-root-ca | + kubectl -n kuttl-test-stable-swift apply -f - logger.go:42: 20:31:53 | cert-management-policy/2-create-root-ca | secret/cert-management-policy-cluster-ca-cert created logger.go:42: 20:31:53 | cert-management-policy/2-create-root-ca | + secret=cert-management-policy-cluster-ca-cert logger.go:42: 20:31:53 | cert-management-policy/2-create-root-ca | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-cluster-ca-cert -o json logger.go:42: 20:31:53 | cert-management-policy/2-create-root-ca | ++ jq --compact-output --sort-keys .data logger.go:42: 20:31:53 | cert-management-policy/2-create-root-ca | ++ sha256sum logger.go:42: 20:31:53 | cert-management-policy/2-create-root-ca | ++ awk '{print $1}' logger.go:42: 20:31:54 | cert-management-policy/2-create-root-ca | + checksum=1ffb8b858223a4320c152bce415becd3b2bbba978b14834e895f2e09f2f77b95 logger.go:42: 20:31:54 | cert-management-policy/2-create-root-ca | + kubectl -n kuttl-test-stable-swift annotate secret cert-management-policy-cluster-ca-cert e2e.percona.com/secret-checksum=1ffb8b858223a4320c152bce415becd3b2bbba978b14834e895f2e09f2f77b95 --overwrite logger.go:42: 20:31:55 | cert-management-policy/2-create-root-ca | secret/cert-management-policy-cluster-ca-cert annotated logger.go:42: 20:31:55 | cert-management-policy/2-create-root-ca | test step completed 2-create-root-ca logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | starting test step 3-create-postgres-certificate logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | running command: [sh -c set -o errexit set -o pipefail set -o xtrace source ../../functions cluster="cert-management-policy" primary="${cluster}-primary" replicas="${cluster}-replicas" primary_names=( "${primary}.${NAMESPACE}.svc.cluster.local" "${primary}.${NAMESPACE}.svc" "${primary}.${NAMESPACE}" "$primary" ) replica_names=( "${replicas}.${NAMESPACE}.svc.cluster.local" "${replicas}.${NAMESPACE}.svc" "${replicas}.${NAMESPACE}" "$replicas" ) issue_certificate postgres \ "$primary" serverAuth \ "${primary_names[@]}" "${replica_names[@]}" kubectl -n "$NAMESPACE" create secret generic "${cluster}-cluster-cert" \ --from-file=tls.crt="$TEMP_DIR/postgres.crt" \ --from-file=tls.key="$TEMP_DIR/postgres.key" \ --from-file=ca.crt="$TEMP_DIR/root-ca.crt" \ --dry-run=client -o yaml \ | kubectl label --local -f - -o yaml \ postgres-operator.crunchydata.com/cluster="$cluster" \ | kubectl -n "$NAMESPACE" apply -f - secret="${cluster}-cluster-cert" checksum=$(kubectl -n "$NAMESPACE" get secret "$secret" -o json \ | jq --compact-output --sort-keys '.data' \ | sha256sum | awk '{print $1}') kubectl -n "$NAMESPACE" annotate secret "$secret" \ e2e.percona.com/secret-checksum="$checksum" \ --overwrite] logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | + source ../../functions logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ realpath ../../.. logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | ++ CERT_MANAGER_VER=1.20.2 logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | ++ CHAOS_MESH_VER=2.5.1 logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | ++ BUSYBOX_VER=1.36 logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | ++++ pwd logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | ++ test_name=cert-management-policy logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/vars.sh logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | ++++ git rev-parse --abbrev-ref HEAD logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ export GIT_BRANCH=PR-1812 logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ GIT_BRANCH=PR-1812 logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ export VERSION=PR-1812-09e4007fd logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ VERSION=PR-1812-09e4007fd logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ export SKIP_TEST_WARNINGS=true logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ SKIP_TEST_WARNINGS=true logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ export K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ export K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ export K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ export K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | +++ [[ -z '' ]] logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | ++++ detect_k8s_platform logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | ++++ local detected_platform logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | ++++ local xtrace_enabled=false logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | ++++ [[ -o xtrace ]] logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | ++++ xtrace_enabled=true logger.go:42: 20:31:55 | cert-management-policy/3-create-postgres-certificate | ++++ set +o xtrace logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ PLATFORM=gke logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export PLATFORM logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ ! -n '' ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ -n '' ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export PG_VER=18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ PG_VER=18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export PG_DISTRIBUTION= logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ PG_DISTRIBUTION= logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ '' == community ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export BUCKET=pg-operator-testing logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ BUCKET=pg-operator-testing logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export PGOV1_TAG=1.4.0 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ PGOV1_TAG=1.4.0 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export PGOV1_VER=14 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ PGOV1_VER=14 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export CPGO_VERSION=5.8.7 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ CPGO_VERSION=5.8.7 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export MINIO_VER=5.4.0 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ MINIO_VER=5.4.0 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export VAULT_VER=0.32.0 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ VAULT_VER=0.32.0 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export REGISTRY_NAME=docker.io logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ REGISTRY_NAME=docker.io logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | ++++ printenv logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | ++++ grep -E '^IMAGE' logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | ++++ awk -F= '{print $1}' logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | ++++ eval 'echo $IMAGE_BACKREST' logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | ++++ eval 'echo $IMAGE' logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ var_value=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == docker.io/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == percona/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == perconalab/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | ++++ eval 'echo $IMAGE_UPGRADE' logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++++ echo perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | ++++ eval 'echo $IMAGE_LOGCOLLECTOR' logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++++ echo perconalab/fluentbit:main-logcollector logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ var_value=perconalab/fluentbit:main-logcollector logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | ++++ eval 'echo $IMAGE_BASE' logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++++ echo perconalab/percona-postgresql-operator logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ var_value=perconalab/percona-postgresql-operator logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator == percona/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | ++++ eval 'echo $IMAGE_PGBOUNCER' logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | ++++ eval 'echo $IMAGE_POSTGRESQL' logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | ++++ eval 'echo $IMAGE_PMM_SERVER' logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++++ echo perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ var_value=perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | ++++ eval 'echo $IMAGE_PMM_CLIENT' logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++++ echo perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ var_value=perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]] logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | ++++ which gdate logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | ++++ which date logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ date=/usr/sbin/date logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | ++++ which gsed logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | ++++ which sed logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | +++ sed=/usr/sbin/sed logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + cluster=cert-management-policy logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + primary=cert-management-policy-primary logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + replicas=cert-management-policy-replicas logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + primary_names=("${primary}.${NAMESPACE}.svc.cluster.local" "${primary}.${NAMESPACE}.svc" "${primary}.${NAMESPACE}" "$primary") logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + replica_names=("${replicas}.${NAMESPACE}.svc.cluster.local" "${replicas}.${NAMESPACE}.svc" "${replicas}.${NAMESPACE}" "$replicas") logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + issue_certificate postgres cert-management-policy-primary serverAuth cert-management-policy-primary.kuttl-test-stable-swift.svc.cluster.local cert-management-policy-primary.kuttl-test-stable-swift.svc cert-management-policy-primary.kuttl-test-stable-swift cert-management-policy-primary cert-management-policy-replicas.kuttl-test-stable-swift.svc.cluster.local cert-management-policy-replicas.kuttl-test-stable-swift.svc cert-management-policy-replicas.kuttl-test-stable-swift cert-management-policy-replicas logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + local name=postgres logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + local common_name=cert-management-policy-primary logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + local purpose=serverAuth logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + shift 3 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + (( 30 > 64 )) logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + awk -v common_name=cert-management-policy-primary -v purpose=serverAuth $'\n\t\t{sub("", common_name); sub("", purpose); print}\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf/tls-certificate.conf logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + local index=1 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + local dns_name logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + for dns_name in "$@" logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + printf 'DNS.%d = %s\n' 1 cert-management-policy-primary.kuttl-test-stable-swift.svc.cluster.local logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + index=2 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + for dns_name in "$@" logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + printf 'DNS.%d = %s\n' 2 cert-management-policy-primary.kuttl-test-stable-swift.svc logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + index=3 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + for dns_name in "$@" logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + printf 'DNS.%d = %s\n' 3 cert-management-policy-primary.kuttl-test-stable-swift logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + index=4 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + for dns_name in "$@" logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + printf 'DNS.%d = %s\n' 4 cert-management-policy-primary logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + index=5 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + for dns_name in "$@" logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + printf 'DNS.%d = %s\n' 5 cert-management-policy-replicas.kuttl-test-stable-swift.svc.cluster.local logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + index=6 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + for dns_name in "$@" logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + printf 'DNS.%d = %s\n' 6 cert-management-policy-replicas.kuttl-test-stable-swift.svc logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + index=7 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + for dns_name in "$@" logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + printf 'DNS.%d = %s\n' 7 cert-management-policy-replicas.kuttl-test-stable-swift logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + index=8 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + for dns_name in "$@" logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + printf 'DNS.%d = %s\n' 8 cert-management-policy-replicas logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + index=9 logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + openssl ecparam -name prime256v1 -genkey -noout -out /tmp/kuttl/pg/cert-management-policy/postgres.key logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + openssl req -new -key /tmp/kuttl/pg/cert-management-policy/postgres.key -out /tmp/kuttl/pg/cert-management-policy/postgres.csr -config /tmp/kuttl/pg/cert-management-policy/postgres.conf logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + openssl x509 -req -in /tmp/kuttl/pg/cert-management-policy/postgres.csr -CA /tmp/kuttl/pg/cert-management-policy/root-ca.crt -CAkey /tmp/kuttl/pg/cert-management-policy/root-ca.key -CAcreateserial -days 365 -sha384 -extensions extensions -extfile /tmp/kuttl/pg/cert-management-policy/postgres.conf -out /tmp/kuttl/pg/cert-management-policy/postgres.crt logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | Certificate request self-signature ok logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | subject=CN=cert-management-policy-primary logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + kubectl label --local -f - -o yaml postgres-operator.crunchydata.com/cluster=cert-management-policy logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + kubectl -n kuttl-test-stable-swift create secret generic cert-management-policy-cluster-cert --from-file=tls.crt=/tmp/kuttl/pg/cert-management-policy/postgres.crt --from-file=tls.key=/tmp/kuttl/pg/cert-management-policy/postgres.key --from-file=ca.crt=/tmp/kuttl/pg/cert-management-policy/root-ca.crt --dry-run=client -o yaml logger.go:42: 20:31:56 | cert-management-policy/3-create-postgres-certificate | + kubectl -n kuttl-test-stable-swift apply -f - logger.go:42: 20:31:58 | cert-management-policy/3-create-postgres-certificate | secret/cert-management-policy-cluster-cert created logger.go:42: 20:31:58 | cert-management-policy/3-create-postgres-certificate | + secret=cert-management-policy-cluster-cert logger.go:42: 20:31:58 | cert-management-policy/3-create-postgres-certificate | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-cluster-cert -o json logger.go:42: 20:31:58 | cert-management-policy/3-create-postgres-certificate | ++ jq --compact-output --sort-keys .data logger.go:42: 20:31:58 | cert-management-policy/3-create-postgres-certificate | ++ sha256sum logger.go:42: 20:31:58 | cert-management-policy/3-create-postgres-certificate | ++ awk '{print $1}' logger.go:42: 20:31:58 | cert-management-policy/3-create-postgres-certificate | + checksum=57ec3a55e331a71f61849bac162722898de8c37ed1009d8e2ec607536b5827c6 logger.go:42: 20:31:58 | cert-management-policy/3-create-postgres-certificate | + kubectl -n kuttl-test-stable-swift annotate secret cert-management-policy-cluster-cert e2e.percona.com/secret-checksum=57ec3a55e331a71f61849bac162722898de8c37ed1009d8e2ec607536b5827c6 --overwrite logger.go:42: 20:31:59 | cert-management-policy/3-create-postgres-certificate | secret/cert-management-policy-cluster-cert annotated logger.go:42: 20:31:59 | cert-management-policy/3-create-postgres-certificate | test step completed 3-create-postgres-certificate logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | starting test step 4-create-replication-certificate logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | running command: [sh -c set -o errexit set -o pipefail set -o xtrace source ../../functions cluster="cert-management-policy" issue_certificate replication _crunchyrepl clientAuth _crunchyrepl kubectl -n "$NAMESPACE" create secret generic "${cluster}-replication-cert" \ --from-file=tls.crt="$TEMP_DIR/replication.crt" \ --from-file=tls.key="$TEMP_DIR/replication.key" \ --from-file=ca.crt="$TEMP_DIR/root-ca.crt" \ --dry-run=client -o yaml \ | kubectl label --local -f - -o yaml \ postgres-operator.crunchydata.com/cluster="$cluster" \ | kubectl -n "$NAMESPACE" apply -f - secret="${cluster}-replication-cert" checksum=$(kubectl -n "$NAMESPACE" get secret "$secret" -o json \ | jq --compact-output --sort-keys '.data' \ | sha256sum | awk '{print $1}') kubectl -n "$NAMESPACE" annotate secret "$secret" \ e2e.percona.com/secret-checksum="$checksum" \ --overwrite] logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | + source ../../functions logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ realpath ../../.. logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | ++ CERT_MANAGER_VER=1.20.2 logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | ++ CHAOS_MESH_VER=2.5.1 logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | ++ BUSYBOX_VER=1.36 logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | ++++ pwd logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | ++ test_name=cert-management-policy logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/vars.sh logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | ++++ git rev-parse --abbrev-ref HEAD logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ export GIT_BRANCH=PR-1812 logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ GIT_BRANCH=PR-1812 logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ export VERSION=PR-1812-09e4007fd logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ VERSION=PR-1812-09e4007fd logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ export SKIP_TEST_WARNINGS=true logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ SKIP_TEST_WARNINGS=true logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ export K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ export K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ export K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ export K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | +++ [[ -z '' ]] logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | ++++ detect_k8s_platform logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | ++++ local detected_platform logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | ++++ local xtrace_enabled=false logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | ++++ [[ -o xtrace ]] logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | ++++ xtrace_enabled=true logger.go:42: 20:31:59 | cert-management-policy/4-create-replication-certificate | ++++ set +o xtrace logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ PLATFORM=gke logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export PLATFORM logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ ! -n '' ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ -n '' ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export PG_VER=18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ PG_VER=18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export PG_DISTRIBUTION= logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ PG_DISTRIBUTION= logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ '' == community ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export BUCKET=pg-operator-testing logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ BUCKET=pg-operator-testing logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export PGOV1_TAG=1.4.0 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ PGOV1_TAG=1.4.0 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export PGOV1_VER=14 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ PGOV1_VER=14 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export CPGO_VERSION=5.8.7 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ CPGO_VERSION=5.8.7 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export MINIO_VER=5.4.0 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ MINIO_VER=5.4.0 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export VAULT_VER=0.32.0 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ VAULT_VER=0.32.0 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export REGISTRY_NAME=docker.io logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ REGISTRY_NAME=docker.io logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | ++++ printenv logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | ++++ grep -E '^IMAGE' logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | ++++ awk -F= '{print $1}' logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | ++++ eval 'echo $IMAGE_BACKREST' logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | ++++ eval 'echo $IMAGE' logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ var_value=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == docker.io/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == percona/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == perconalab/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | ++++ eval 'echo $IMAGE_UPGRADE' logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++++ echo perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | ++++ eval 'echo $IMAGE_LOGCOLLECTOR' logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++++ echo perconalab/fluentbit:main-logcollector logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ var_value=perconalab/fluentbit:main-logcollector logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | ++++ eval 'echo $IMAGE_BASE' logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++++ echo perconalab/percona-postgresql-operator logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ var_value=perconalab/percona-postgresql-operator logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator == percona/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | ++++ eval 'echo $IMAGE_PGBOUNCER' logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | ++++ eval 'echo $IMAGE_POSTGRESQL' logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | ++++ eval 'echo $IMAGE_PMM_SERVER' logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++++ echo perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ var_value=perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | ++++ eval 'echo $IMAGE_PMM_CLIENT' logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++++ echo perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ var_value=perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]] logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | ++++ which gdate logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | ++++ which date logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ date=/usr/sbin/date logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | ++++ which gsed logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | ++++ which sed logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | +++ sed=/usr/sbin/sed logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | + cluster=cert-management-policy logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | + issue_certificate replication _crunchyrepl clientAuth _crunchyrepl logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | + local name=replication logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | + local common_name=_crunchyrepl logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | + local purpose=clientAuth logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | + shift 3 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | + (( 12 > 64 )) logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | + awk -v common_name=_crunchyrepl -v purpose=clientAuth $'\n\t\t{sub("", common_name); sub("", purpose); print}\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf/tls-certificate.conf logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | + local index=1 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | + local dns_name logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | + for dns_name in "$@" logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | + printf 'DNS.%d = %s\n' 1 _crunchyrepl logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | + index=2 logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | + openssl ecparam -name prime256v1 -genkey -noout -out /tmp/kuttl/pg/cert-management-policy/replication.key logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | + openssl req -new -key /tmp/kuttl/pg/cert-management-policy/replication.key -out /tmp/kuttl/pg/cert-management-policy/replication.csr -config /tmp/kuttl/pg/cert-management-policy/replication.conf logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | + openssl x509 -req -in /tmp/kuttl/pg/cert-management-policy/replication.csr -CA /tmp/kuttl/pg/cert-management-policy/root-ca.crt -CAkey /tmp/kuttl/pg/cert-management-policy/root-ca.key -CAcreateserial -days 365 -sha384 -extensions extensions -extfile /tmp/kuttl/pg/cert-management-policy/replication.conf -out /tmp/kuttl/pg/cert-management-policy/replication.crt logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | Certificate request self-signature ok logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | subject=CN=_crunchyrepl logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | + kubectl -n kuttl-test-stable-swift create secret generic cert-management-policy-replication-cert --from-file=tls.crt=/tmp/kuttl/pg/cert-management-policy/replication.crt --from-file=tls.key=/tmp/kuttl/pg/cert-management-policy/replication.key --from-file=ca.crt=/tmp/kuttl/pg/cert-management-policy/root-ca.crt --dry-run=client -o yaml logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | + kubectl label --local -f - -o yaml postgres-operator.crunchydata.com/cluster=cert-management-policy logger.go:42: 20:32:01 | cert-management-policy/4-create-replication-certificate | + kubectl -n kuttl-test-stable-swift apply -f - logger.go:42: 20:32:02 | cert-management-policy/4-create-replication-certificate | secret/cert-management-policy-replication-cert created logger.go:42: 20:32:02 | cert-management-policy/4-create-replication-certificate | + secret=cert-management-policy-replication-cert logger.go:42: 20:32:02 | cert-management-policy/4-create-replication-certificate | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-replication-cert -o json logger.go:42: 20:32:02 | cert-management-policy/4-create-replication-certificate | ++ jq --compact-output --sort-keys .data logger.go:42: 20:32:02 | cert-management-policy/4-create-replication-certificate | ++ sha256sum logger.go:42: 20:32:02 | cert-management-policy/4-create-replication-certificate | ++ awk '{print $1}' logger.go:42: 20:32:02 | cert-management-policy/4-create-replication-certificate | + checksum=d6186cd4b3d58383263d9c432927693ff36fe1c3895212534d69c99b2886d50b logger.go:42: 20:32:02 | cert-management-policy/4-create-replication-certificate | + kubectl -n kuttl-test-stable-swift annotate secret cert-management-policy-replication-cert e2e.percona.com/secret-checksum=d6186cd4b3d58383263d9c432927693ff36fe1c3895212534d69c99b2886d50b --overwrite logger.go:42: 20:32:03 | cert-management-policy/4-create-replication-certificate | secret/cert-management-policy-replication-cert annotated logger.go:42: 20:32:03 | cert-management-policy/4-create-replication-certificate | test step completed 4-create-replication-certificate logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | starting test step 5-create-pgbackrest-certificates logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | running command: [sh -c set -o errexit set -o pipefail set -o xtrace source ../../functions cluster="cert-management-policy" cluster_uid=$(kubectl -n "$NAMESPACE" get postgrescluster "$cluster" \ -o jsonpath='{.metadata.uid}') pgbackrest_client="pgbackrest@${cluster_uid}" issue_certificate pgbackrest-client \ "$pgbackrest_client" clientAuth "$pgbackrest_client" repo_name="${cluster}-repo-host-0.${cluster}-pods" issue_certificate pgbackrest-repo \ "${cluster}-repo-host" serverAuth \ "${repo_name}.${NAMESPACE}.svc.cluster.local" \ "${repo_name}.${NAMESPACE}.svc" \ "${repo_name}.${NAMESPACE}" \ "$repo_name" kubectl -n "$NAMESPACE" create secret generic "${cluster}-pgbackrest" \ --from-file=pgbackrest.ca-roots="$TEMP_DIR/root-ca.crt" \ --from-file=pgbackrest-client.crt="$TEMP_DIR/pgbackrest-client.crt" \ --from-file=pgbackrest-client.key="$TEMP_DIR/pgbackrest-client.key" \ --from-file=pgbackrest-repo-host.crt="$TEMP_DIR/pgbackrest-repo.crt" \ --from-file=pgbackrest-repo-host.key="$TEMP_DIR/pgbackrest-repo.key" \ --dry-run=client -o yaml \ | kubectl label --local -f - -o yaml \ postgres-operator.crunchydata.com/cluster="$cluster" \ | kubectl -n "$NAMESPACE" apply -f - secret="${cluster}-pgbackrest" checksum=$(kubectl -n "$NAMESPACE" get secret "$secret" -o json \ | jq --compact-output --sort-keys '.data' \ | sha256sum | awk '{print $1}') kubectl -n "$NAMESPACE" annotate secret "$secret" \ e2e.percona.com/secret-checksum="$checksum" \ --overwrite] logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | + source ../../functions logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ realpath ../../.. logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | ++ CERT_MANAGER_VER=1.20.2 logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | ++ CHAOS_MESH_VER=2.5.1 logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | ++ BUSYBOX_VER=1.36 logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | ++++ pwd logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | ++ test_name=cert-management-policy logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/vars.sh logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | ++++ git rev-parse --abbrev-ref HEAD logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ export GIT_BRANCH=PR-1812 logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ GIT_BRANCH=PR-1812 logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ export VERSION=PR-1812-09e4007fd logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ VERSION=PR-1812-09e4007fd logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ export SKIP_TEST_WARNINGS=true logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ SKIP_TEST_WARNINGS=true logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ export K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ export K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ export K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ export K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ -z '' ]] logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | ++++ detect_k8s_platform logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | ++++ local detected_platform logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | ++++ local xtrace_enabled=false logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | ++++ [[ -o xtrace ]] logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | ++++ xtrace_enabled=true logger.go:42: 20:32:03 | cert-management-policy/5-create-pgbackrest-certificates | ++++ set +o xtrace logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ PLATFORM=gke logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export PLATFORM logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ ! -n '' ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ -n '' ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export PG_VER=18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ PG_VER=18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export PG_DISTRIBUTION= logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ PG_DISTRIBUTION= logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ '' == community ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export BUCKET=pg-operator-testing logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ BUCKET=pg-operator-testing logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export PGOV1_TAG=1.4.0 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ PGOV1_TAG=1.4.0 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export PGOV1_VER=14 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ PGOV1_VER=14 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export CPGO_VERSION=5.8.7 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ CPGO_VERSION=5.8.7 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export MINIO_VER=5.4.0 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ MINIO_VER=5.4.0 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export VAULT_VER=0.32.0 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ VAULT_VER=0.32.0 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export REGISTRY_NAME=docker.io logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ REGISTRY_NAME=docker.io logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | ++++ printenv logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | ++++ grep -E '^IMAGE' logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | ++++ awk -F= '{print $1}' logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | ++++ eval 'echo $IMAGE_BACKREST' logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | ++++ eval 'echo $IMAGE' logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ var_value=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == docker.io/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == percona/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == perconalab/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | ++++ eval 'echo $IMAGE_UPGRADE' logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++++ echo perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | ++++ eval 'echo $IMAGE_LOGCOLLECTOR' logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++++ echo perconalab/fluentbit:main-logcollector logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ var_value=perconalab/fluentbit:main-logcollector logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | ++++ eval 'echo $IMAGE_BASE' logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++++ echo perconalab/percona-postgresql-operator logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ var_value=perconalab/percona-postgresql-operator logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator == percona/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | ++++ eval 'echo $IMAGE_PGBOUNCER' logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | ++++ eval 'echo $IMAGE_POSTGRESQL' logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | ++++ eval 'echo $IMAGE_PMM_SERVER' logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++++ echo perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ var_value=perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | ++++ eval 'echo $IMAGE_PMM_CLIENT' logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++++ echo perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ var_value=perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]] logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | ++++ which gdate logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | ++++ which date logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ date=/usr/sbin/date logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | ++++ which gsed logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | ++++ which sed logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | +++ sed=/usr/sbin/sed logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | + cluster=cert-management-policy logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | ++ kubectl -n kuttl-test-stable-swift get postgrescluster cert-management-policy -o 'jsonpath={.metadata.uid}' logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | + cluster_uid=bfa032ba-ea17-41e0-ba2d-5456e324f531 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | + pgbackrest_client=pgbackrest@bfa032ba-ea17-41e0-ba2d-5456e324f531 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | + issue_certificate pgbackrest-client pgbackrest@bfa032ba-ea17-41e0-ba2d-5456e324f531 clientAuth pgbackrest@bfa032ba-ea17-41e0-ba2d-5456e324f531 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | + local name=pgbackrest-client logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | + local common_name=pgbackrest@bfa032ba-ea17-41e0-ba2d-5456e324f531 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | + local purpose=clientAuth logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | + shift 3 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | + (( 47 > 64 )) logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | + awk -v common_name=pgbackrest@bfa032ba-ea17-41e0-ba2d-5456e324f531 -v purpose=clientAuth $'\n\t\t{sub("", common_name); sub("", purpose); print}\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf/tls-certificate.conf logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | + local index=1 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | + local dns_name logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | + for dns_name in "$@" logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | + printf 'DNS.%d = %s\n' 1 pgbackrest@bfa032ba-ea17-41e0-ba2d-5456e324f531 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | + index=2 logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | + openssl ecparam -name prime256v1 -genkey -noout -out /tmp/kuttl/pg/cert-management-policy/pgbackrest-client.key logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | + openssl req -new -key /tmp/kuttl/pg/cert-management-policy/pgbackrest-client.key -out /tmp/kuttl/pg/cert-management-policy/pgbackrest-client.csr -config /tmp/kuttl/pg/cert-management-policy/pgbackrest-client.conf logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | + openssl x509 -req -in /tmp/kuttl/pg/cert-management-policy/pgbackrest-client.csr -CA /tmp/kuttl/pg/cert-management-policy/root-ca.crt -CAkey /tmp/kuttl/pg/cert-management-policy/root-ca.key -CAcreateserial -days 365 -sha384 -extensions extensions -extfile /tmp/kuttl/pg/cert-management-policy/pgbackrest-client.conf -out /tmp/kuttl/pg/cert-management-policy/pgbackrest-client.crt logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | Certificate request self-signature ok logger.go:42: 20:32:05 | cert-management-policy/5-create-pgbackrest-certificates | subject=CN=pgbackrest@bfa032ba-ea17-41e0-ba2d-5456e324f531 logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + repo_name=cert-management-policy-repo-host-0.cert-management-policy-pods logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + issue_certificate pgbackrest-repo cert-management-policy-repo-host serverAuth cert-management-policy-repo-host-0.cert-management-policy-pods.kuttl-test-stable-swift.svc.cluster.local cert-management-policy-repo-host-0.cert-management-policy-pods.kuttl-test-stable-swift.svc cert-management-policy-repo-host-0.cert-management-policy-pods.kuttl-test-stable-swift cert-management-policy-repo-host-0.cert-management-policy-pods logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + local name=pgbackrest-repo logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + local common_name=cert-management-policy-repo-host logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + local purpose=serverAuth logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + shift 3 logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + (( 32 > 64 )) logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + awk -v common_name=cert-management-policy-repo-host -v purpose=serverAuth $'\n\t\t{sub("", common_name); sub("", purpose); print}\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf/tls-certificate.conf logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + local index=1 logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + local dns_name logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + for dns_name in "$@" logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + printf 'DNS.%d = %s\n' 1 cert-management-policy-repo-host-0.cert-management-policy-pods.kuttl-test-stable-swift.svc.cluster.local logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + index=2 logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + for dns_name in "$@" logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + printf 'DNS.%d = %s\n' 2 cert-management-policy-repo-host-0.cert-management-policy-pods.kuttl-test-stable-swift.svc logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + index=3 logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + for dns_name in "$@" logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + printf 'DNS.%d = %s\n' 3 cert-management-policy-repo-host-0.cert-management-policy-pods.kuttl-test-stable-swift logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + index=4 logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + for dns_name in "$@" logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + printf 'DNS.%d = %s\n' 4 cert-management-policy-repo-host-0.cert-management-policy-pods logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + index=5 logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + openssl ecparam -name prime256v1 -genkey -noout -out /tmp/kuttl/pg/cert-management-policy/pgbackrest-repo.key logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + openssl req -new -key /tmp/kuttl/pg/cert-management-policy/pgbackrest-repo.key -out /tmp/kuttl/pg/cert-management-policy/pgbackrest-repo.csr -config /tmp/kuttl/pg/cert-management-policy/pgbackrest-repo.conf logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + openssl x509 -req -in /tmp/kuttl/pg/cert-management-policy/pgbackrest-repo.csr -CA /tmp/kuttl/pg/cert-management-policy/root-ca.crt -CAkey /tmp/kuttl/pg/cert-management-policy/root-ca.key -CAcreateserial -days 365 -sha384 -extensions extensions -extfile /tmp/kuttl/pg/cert-management-policy/pgbackrest-repo.conf -out /tmp/kuttl/pg/cert-management-policy/pgbackrest-repo.crt logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | Certificate request self-signature ok logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | subject=CN=cert-management-policy-repo-host logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + kubectl -n kuttl-test-stable-swift create secret generic cert-management-policy-pgbackrest --from-file=pgbackrest.ca-roots=/tmp/kuttl/pg/cert-management-policy/root-ca.crt --from-file=pgbackrest-client.crt=/tmp/kuttl/pg/cert-management-policy/pgbackrest-client.crt --from-file=pgbackrest-client.key=/tmp/kuttl/pg/cert-management-policy/pgbackrest-client.key --from-file=pgbackrest-repo-host.crt=/tmp/kuttl/pg/cert-management-policy/pgbackrest-repo.crt --from-file=pgbackrest-repo-host.key=/tmp/kuttl/pg/cert-management-policy/pgbackrest-repo.key --dry-run=client -o yaml logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + kubectl label --local -f - -o yaml postgres-operator.crunchydata.com/cluster=cert-management-policy logger.go:42: 20:32:06 | cert-management-policy/5-create-pgbackrest-certificates | + kubectl -n kuttl-test-stable-swift apply -f - logger.go:42: 20:32:07 | cert-management-policy/5-create-pgbackrest-certificates | secret/cert-management-policy-pgbackrest created logger.go:42: 20:32:07 | cert-management-policy/5-create-pgbackrest-certificates | + secret=cert-management-policy-pgbackrest logger.go:42: 20:32:07 | cert-management-policy/5-create-pgbackrest-certificates | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbackrest -o json logger.go:42: 20:32:07 | cert-management-policy/5-create-pgbackrest-certificates | ++ jq --compact-output --sort-keys .data logger.go:42: 20:32:07 | cert-management-policy/5-create-pgbackrest-certificates | ++ sha256sum logger.go:42: 20:32:07 | cert-management-policy/5-create-pgbackrest-certificates | ++ awk '{print $1}' logger.go:42: 20:32:08 | cert-management-policy/5-create-pgbackrest-certificates | + checksum=312802d9d7d525adfa67fa843378d1d74eccda12fc353a4c9f4af89269c56716 logger.go:42: 20:32:08 | cert-management-policy/5-create-pgbackrest-certificates | + kubectl -n kuttl-test-stable-swift annotate secret cert-management-policy-pgbackrest e2e.percona.com/secret-checksum=312802d9d7d525adfa67fa843378d1d74eccda12fc353a4c9f4af89269c56716 --overwrite logger.go:42: 20:32:08 | cert-management-policy/5-create-pgbackrest-certificates | secret/cert-management-policy-pgbackrest annotated logger.go:42: 20:32:08 | cert-management-policy/5-create-pgbackrest-certificates | test step completed 5-create-pgbackrest-certificates logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | starting test step 6-create-pgbouncer-certificate logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | running command: [sh -c set -o errexit set -o pipefail set -o xtrace source ../../functions cluster="cert-management-policy" pgbouncer="${cluster}-pgbouncer" pgbouncer_names=( "${pgbouncer}.${NAMESPACE}.svc.cluster.local" "${pgbouncer}.${NAMESPACE}.svc" "${pgbouncer}.${NAMESPACE}" "$pgbouncer" ) issue_certificate pgbouncer \ "$pgbouncer" serverAuth "${pgbouncer_names[@]}" kubectl -n "$NAMESPACE" create secret generic "${cluster}-pgbouncer" \ --from-file=pgbouncer-frontend.ca-roots="$TEMP_DIR/root-ca.crt" \ --from-file=pgbouncer-frontend.crt="$TEMP_DIR/pgbouncer.crt" \ --from-file=pgbouncer-frontend.key="$TEMP_DIR/pgbouncer.key" \ --dry-run=client -o yaml \ | kubectl label --local -f - -o yaml \ postgres-operator.crunchydata.com/cluster="$cluster" \ | kubectl -n "$NAMESPACE" apply -f - secret="${cluster}-pgbouncer" checksum=$(kubectl -n "$NAMESPACE" get secret "$secret" -o json \ | jq --compact-output --sort-keys \ '.data | with_entries(select(.key | startswith("pgbouncer-frontend.")))' \ | sha256sum | awk '{print $1}') kubectl -n "$NAMESPACE" annotate secret "$secret" \ e2e.percona.com/secret-checksum="$checksum" \ --overwrite] logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | + source ../../functions logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ realpath ../../.. logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | ++ CERT_MANAGER_VER=1.20.2 logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | ++ CHAOS_MESH_VER=2.5.1 logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | ++ BUSYBOX_VER=1.36 logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | ++++ pwd logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | ++ test_name=cert-management-policy logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/vars.sh logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | ++++ git rev-parse --abbrev-ref HEAD logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ export GIT_BRANCH=PR-1812 logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ GIT_BRANCH=PR-1812 logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ export VERSION=PR-1812-09e4007fd logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ VERSION=PR-1812-09e4007fd logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ export SKIP_TEST_WARNINGS=true logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ SKIP_TEST_WARNINGS=true logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ export K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ export K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ export K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ export K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ -z '' ]] logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | ++++ detect_k8s_platform logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | ++++ local detected_platform logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | ++++ local xtrace_enabled=false logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | ++++ [[ -o xtrace ]] logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | ++++ xtrace_enabled=true logger.go:42: 20:32:08 | cert-management-policy/6-create-pgbouncer-certificate | ++++ set +o xtrace logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ PLATFORM=gke logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export PLATFORM logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ ! -n '' ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ -n '' ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export PG_VER=18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ PG_VER=18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export PG_DISTRIBUTION= logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ PG_DISTRIBUTION= logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ '' == community ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export BUCKET=pg-operator-testing logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ BUCKET=pg-operator-testing logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export PGOV1_TAG=1.4.0 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ PGOV1_TAG=1.4.0 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export PGOV1_VER=14 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ PGOV1_VER=14 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export CPGO_VERSION=5.8.7 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ CPGO_VERSION=5.8.7 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export MINIO_VER=5.4.0 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ MINIO_VER=5.4.0 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export VAULT_VER=0.32.0 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ VAULT_VER=0.32.0 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export REGISTRY_NAME=docker.io logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ REGISTRY_NAME=docker.io logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | ++++ printenv logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | ++++ grep -E '^IMAGE' logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | ++++ awk -F= '{print $1}' logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | ++++ eval 'echo $IMAGE_BACKREST' logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | ++++ eval 'echo $IMAGE' logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ var_value=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == docker.io/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == percona/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == perconalab/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | ++++ eval 'echo $IMAGE_UPGRADE' logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++++ echo perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | ++++ eval 'echo $IMAGE_LOGCOLLECTOR' logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++++ echo perconalab/fluentbit:main-logcollector logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ var_value=perconalab/fluentbit:main-logcollector logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | ++++ eval 'echo $IMAGE_BASE' logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++++ echo perconalab/percona-postgresql-operator logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ var_value=perconalab/percona-postgresql-operator logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator == percona/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | ++++ eval 'echo $IMAGE_PGBOUNCER' logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | ++++ eval 'echo $IMAGE_POSTGRESQL' logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | ++++ eval 'echo $IMAGE_PMM_SERVER' logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++++ echo perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ var_value=perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | ++++ eval 'echo $IMAGE_PMM_CLIENT' logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++++ echo perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ var_value=perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]] logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | ++++ which gdate logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | ++++ which date logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ date=/usr/sbin/date logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | ++++ which gsed logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | ++++ which sed logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | +++ sed=/usr/sbin/sed logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + cluster=cert-management-policy logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + pgbouncer=cert-management-policy-pgbouncer logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + pgbouncer_names=("${pgbouncer}.${NAMESPACE}.svc.cluster.local" "${pgbouncer}.${NAMESPACE}.svc" "${pgbouncer}.${NAMESPACE}" "$pgbouncer") logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + issue_certificate pgbouncer cert-management-policy-pgbouncer serverAuth cert-management-policy-pgbouncer.kuttl-test-stable-swift.svc.cluster.local cert-management-policy-pgbouncer.kuttl-test-stable-swift.svc cert-management-policy-pgbouncer.kuttl-test-stable-swift cert-management-policy-pgbouncer logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + local name=pgbouncer logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + local common_name=cert-management-policy-pgbouncer logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + local purpose=serverAuth logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + shift 3 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + (( 32 > 64 )) logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + awk -v common_name=cert-management-policy-pgbouncer -v purpose=serverAuth $'\n\t\t{sub("", common_name); sub("", purpose); print}\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf/tls-certificate.conf logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + local index=1 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + local dns_name logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + for dns_name in "$@" logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + printf 'DNS.%d = %s\n' 1 cert-management-policy-pgbouncer.kuttl-test-stable-swift.svc.cluster.local logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + index=2 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + for dns_name in "$@" logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + printf 'DNS.%d = %s\n' 2 cert-management-policy-pgbouncer.kuttl-test-stable-swift.svc logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + index=3 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + for dns_name in "$@" logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + printf 'DNS.%d = %s\n' 3 cert-management-policy-pgbouncer.kuttl-test-stable-swift logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + index=4 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + for dns_name in "$@" logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + printf 'DNS.%d = %s\n' 4 cert-management-policy-pgbouncer logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + index=5 logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + openssl ecparam -name prime256v1 -genkey -noout -out /tmp/kuttl/pg/cert-management-policy/pgbouncer.key logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + openssl req -new -key /tmp/kuttl/pg/cert-management-policy/pgbouncer.key -out /tmp/kuttl/pg/cert-management-policy/pgbouncer.csr -config /tmp/kuttl/pg/cert-management-policy/pgbouncer.conf logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + openssl x509 -req -in /tmp/kuttl/pg/cert-management-policy/pgbouncer.csr -CA /tmp/kuttl/pg/cert-management-policy/root-ca.crt -CAkey /tmp/kuttl/pg/cert-management-policy/root-ca.key -CAcreateserial -days 365 -sha384 -extensions extensions -extfile /tmp/kuttl/pg/cert-management-policy/pgbouncer.conf -out /tmp/kuttl/pg/cert-management-policy/pgbouncer.crt logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | Certificate request self-signature ok logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | subject=CN=cert-management-policy-pgbouncer logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + kubectl -n kuttl-test-stable-swift create secret generic cert-management-policy-pgbouncer --from-file=pgbouncer-frontend.ca-roots=/tmp/kuttl/pg/cert-management-policy/root-ca.crt --from-file=pgbouncer-frontend.crt=/tmp/kuttl/pg/cert-management-policy/pgbouncer.crt --from-file=pgbouncer-frontend.key=/tmp/kuttl/pg/cert-management-policy/pgbouncer.key --dry-run=client -o yaml logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + kubectl label --local -f - -o yaml postgres-operator.crunchydata.com/cluster=cert-management-policy logger.go:42: 20:32:10 | cert-management-policy/6-create-pgbouncer-certificate | + kubectl -n kuttl-test-stable-swift apply -f - logger.go:42: 20:32:11 | cert-management-policy/6-create-pgbouncer-certificate | secret/cert-management-policy-pgbouncer created logger.go:42: 20:32:11 | cert-management-policy/6-create-pgbouncer-certificate | + secret=cert-management-policy-pgbouncer logger.go:42: 20:32:11 | cert-management-policy/6-create-pgbouncer-certificate | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:32:11 | cert-management-policy/6-create-pgbouncer-certificate | ++ jq --compact-output --sort-keys '.data | with_entries(select(.key | startswith("pgbouncer-frontend.")))' logger.go:42: 20:32:11 | cert-management-policy/6-create-pgbouncer-certificate | ++ sha256sum logger.go:42: 20:32:11 | cert-management-policy/6-create-pgbouncer-certificate | ++ awk '{print $1}' logger.go:42: 20:32:12 | cert-management-policy/6-create-pgbouncer-certificate | + checksum=6e43dbdb62d79b05bac8ef2ed4e0bf843676838aef1cfef2900b504b2c7824a0 logger.go:42: 20:32:12 | cert-management-policy/6-create-pgbouncer-certificate | + kubectl -n kuttl-test-stable-swift annotate secret cert-management-policy-pgbouncer e2e.percona.com/secret-checksum=6e43dbdb62d79b05bac8ef2ed4e0bf843676838aef1cfef2900b504b2c7824a0 --overwrite logger.go:42: 20:32:13 | cert-management-policy/6-create-pgbouncer-certificate | secret/cert-management-policy-pgbouncer annotated logger.go:42: 20:32:13 | cert-management-policy/6-create-pgbouncer-certificate | test step completed 6-create-pgbouncer-certificate logger.go:42: 20:32:13 | cert-management-policy/7- | starting test step 7- logger.go:42: 20:32:17 | cert-management-policy/7- | test step completed 7- logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | starting test step 8-create-instance-certificate logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | running command: [sh -c set -o errexit set -o pipefail set -o xtrace source ../../functions cluster="cert-management-policy" statefulsets=$(kubectl -n "$NAMESPACE" get statefulset \ -l postgres-operator.crunchydata.com/cluster="$cluster",postgres-operator.crunchydata.com/data=postgres \ -o json) jq -e '.items | length == 3' <<<"$statefulsets" >/dev/null instances=$(jq -r '.items[].metadata.name' <<<"$statefulsets" | sort) for instance in $instances; do instance_service=$(kubectl -n "$NAMESPACE" get statefulset "$instance" \ -o jsonpath='{.spec.serviceName}') instance_name="${instance}-0.${instance_service}" instance_names=( "${instance_name}.${NAMESPACE}.svc.cluster.local" "${instance_name}.${NAMESPACE}.svc" "${instance_name}.${NAMESPACE}" "$instance_name" ) issue_certificate "$instance" \ "${instance}-0" serverAuth \ "${instance_names[@]}" cp "$TEMP_DIR/${instance}.key" "$TEMP_DIR/${instance}.patroni.crt-combined" cat "$TEMP_DIR/${instance}.crt" >>"$TEMP_DIR/${instance}.patroni.crt-combined" kubectl -n "$NAMESPACE" create secret generic "${instance}-certs" \ --from-file=dns.crt="$TEMP_DIR/${instance}.crt" \ --from-file=dns.key="$TEMP_DIR/${instance}.key" \ --from-file=patroni.ca-roots="$TEMP_DIR/root-ca.crt" \ --from-file=patroni.crt-combined="$TEMP_DIR/${instance}.patroni.crt-combined" \ --from-file=pgbackrest-server.crt="$TEMP_DIR/${instance}.crt" \ --from-file=pgbackrest-server.key="$TEMP_DIR/${instance}.key" \ --dry-run=client -o yaml \ | kubectl label --local -f - -o yaml \ postgres-operator.crunchydata.com/cluster="$cluster" \ postgres-operator.crunchydata.com/instance="$instance" \ postgres-operator.crunchydata.com/instance-set=instance1 \ | kubectl -n "$NAMESPACE" apply -f - secret="${instance}-certs" checksum=$(kubectl -n "$NAMESPACE" get secret "$secret" -o json \ | jq --compact-output --sort-keys '.data' \ | sha256sum | awk '{print $1}') kubectl -n "$NAMESPACE" annotate secret "$secret" \ e2e.percona.com/secret-checksum="$checksum" \ --overwrite done] logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | + source ../../functions logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ realpath ../../.. logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | ++ CERT_MANAGER_VER=1.20.2 logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | ++ CHAOS_MESH_VER=2.5.1 logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | ++ BUSYBOX_VER=1.36 logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | ++++ pwd logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | ++ test_name=cert-management-policy logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/vars.sh logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | ++++ git rev-parse --abbrev-ref HEAD logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ export GIT_BRANCH=PR-1812 logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ GIT_BRANCH=PR-1812 logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ export VERSION=PR-1812-09e4007fd logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ VERSION=PR-1812-09e4007fd logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ export SKIP_TEST_WARNINGS=true logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ SKIP_TEST_WARNINGS=true logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ export K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ export K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ export K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ export K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | +++ [[ -z '' ]] logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | ++++ detect_k8s_platform logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | ++++ local detected_platform logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | ++++ local xtrace_enabled=false logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | ++++ [[ -o xtrace ]] logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | ++++ xtrace_enabled=true logger.go:42: 20:32:17 | cert-management-policy/8-create-instance-certificate | ++++ set +o xtrace logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ PLATFORM=gke logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export PLATFORM logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ ! -n '' ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ -n '' ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export PG_VER=18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ PG_VER=18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export PG_DISTRIBUTION= logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ PG_DISTRIBUTION= logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ '' == community ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export BUCKET=pg-operator-testing logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ BUCKET=pg-operator-testing logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export PGOV1_TAG=1.4.0 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ PGOV1_TAG=1.4.0 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export PGOV1_VER=14 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ PGOV1_VER=14 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export CPGO_VERSION=5.8.7 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ CPGO_VERSION=5.8.7 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export MINIO_VER=5.4.0 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ MINIO_VER=5.4.0 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export VAULT_VER=0.32.0 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ VAULT_VER=0.32.0 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export REGISTRY_NAME=docker.io logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ REGISTRY_NAME=docker.io logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++++ printenv logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++++ grep -E '^IMAGE' logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++++ awk -F= '{print $1}' logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++++ eval 'echo $IMAGE_BACKREST' logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++++ eval 'echo $IMAGE' logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ var_value=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == docker.io/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == percona/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == perconalab/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++++ eval 'echo $IMAGE_UPGRADE' logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++++ echo perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++++ eval 'echo $IMAGE_LOGCOLLECTOR' logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++++ echo perconalab/fluentbit:main-logcollector logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ var_value=perconalab/fluentbit:main-logcollector logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++++ eval 'echo $IMAGE_BASE' logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++++ echo perconalab/percona-postgresql-operator logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ var_value=perconalab/percona-postgresql-operator logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator == percona/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++++ eval 'echo $IMAGE_PGBOUNCER' logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++++ eval 'echo $IMAGE_POSTGRESQL' logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++++ eval 'echo $IMAGE_PMM_SERVER' logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++++ echo perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ var_value=perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++++ eval 'echo $IMAGE_PMM_CLIENT' logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++++ echo perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ var_value=perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]] logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++++ which gdate logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++++ which date logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ date=/usr/sbin/date logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++++ which gsed logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++++ which sed logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | +++ sed=/usr/sbin/sed logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | + cluster=cert-management-policy logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++ kubectl -n kuttl-test-stable-swift get statefulset -l postgres-operator.crunchydata.com/cluster=cert-management-policy,postgres-operator.crunchydata.com/data=postgres -o json logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | + statefulsets=$'{\n "apiVersion": "v1",\n "items": [\n {\n "apiVersion": "apps/v1",\n "kind": "StatefulSet",\n "metadata": {\n "annotations": {\n "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n },\n "creationTimestamp": "2026-09-01T20:32:12Z",\n "generation": 1,\n "labels": {\n "app.kubernetes.io/component": "pg",\n "app.kubernetes.io/instance": "cert-management-policy",\n "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n "app.kubernetes.io/name": "percona-postgresql",\n "app.kubernetes.io/part-of": "percona-postgresql",\n "pgv2.percona.com/version": "3.1.0",\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n "postgres-operator.crunchydata.com/data": "postgres",\n "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-49wh",\n "postgres-operator.crunchydata.com/instance-set": "instance1"\n },\n "name": "cert-management-policy-instance1-49wh",\n "namespace": "kuttl-test-stable-swift",\n "ownerReferences": [\n {\n "apiVersion": "upstream.pgv2.percona.com/v1beta1",\n "blockOwnerDeletion": true,\n "controller": true,\n "kind": "PostgresCluster",\n "name": "cert-management-policy",\n "uid": "bfa032ba-ea17-41e0-ba2d-5456e324f531"\n }\n ],\n "resourceVersion": "1788294733397295011",\n "uid": "0cbf21a3-7fcf-4611-9163-9c24a6c68d72"\n },\n "spec": {\n "persistentVolumeClaimRetentionPolicy": {\n "whenDeleted": "Retain",\n "whenScaled": "Retain"\n },\n "podManagementPolicy": "OrderedReady",\n "replicas": 1,\n "revisionHistoryLimit": 0,\n "selector": {\n "matchLabels": {\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-49wh",\n "postgres-operator.crunchydata.com/instance-set": "instance1"\n }\n },\n "serviceName": "cert-management-policy-pods",\n "template": {\n "metadata": {\n "annotations": {\n "kubectl.kubernetes.io/default-container": "database",\n "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n },\n "labels": {\n "app.kubernetes.io/component": "pg",\n "app.kubernetes.io/instance": "cert-management-policy",\n "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n "app.kubernetes.io/name": "percona-postgresql",\n "app.kubernetes.io/part-of": "percona-postgresql",\n "pgv2.percona.com/version": "3.1.0",\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n "postgres-operator.crunchydata.com/data": "postgres",\n "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-49wh",\n "postgres-operator.crunchydata.com/instance-set": "instance1",\n "postgres-operator.crunchydata.com/patroni": "cert-management-policy-ha"\n }\n },\n "spec": {\n "affinity": {\n "podAntiAffinity": {\n "preferredDuringSchedulingIgnoredDuringExecution": [\n {\n "podAffinityTerm": {\n "labelSelector": {\n "matchLabels": {\n "postgres-operator.crunchydata.com/data": "postgres"\n }\n },\n "topologyKey": "kubernetes.io/hostname"\n },\n "weight": 1\n }\n ]\n }\n },\n "containers": [\n {\n "command": [\n "/opt/crunchy/bin/postgres-entrypoint.sh",\n "patroni",\n "/etc/patroni"\n ],\n "env": [\n {\n "name": "PGDATA",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PGHOST",\n "value": "/tmp/postgres"\n },\n {\n "name": "PGPORT",\n "value": "5432"\n },\n {\n "name": "KRB5_CONFIG",\n "value": "/etc/postgres/krb5.conf"\n },\n {\n "name": "KRB5RCACHEDIR",\n "value": "/tmp"\n },\n {\n "name": "LDAPTLS_CACERT",\n "value": "/etc/postgres/ldap/ca.crt"\n },\n {\n "name": "LC_ALL",\n "value": "en_US.utf-8"\n },\n {\n "name": "LANG",\n "value": "en_US.utf-8"\n },\n {\n "name": "PATRONI_NAME",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.name"\n }\n }\n },\n {\n "name": "PATRONI_KUBERNETES_POD_IP",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "status.podIP"\n }\n }\n },\n {\n "name": "PATRONI_KUBERNETES_PORTS",\n "value": "- name: postgres\\n port: 5432\\n protocol: TCP\\n"\n },\n {\n "name": "PATRONI_POSTGRESQL_CONNECT_ADDRESS",\n "value": "$(PATRONI_NAME).cert-management-policy-pods:5432"\n },\n {\n "name": "PATRONI_POSTGRESQL_LISTEN",\n "value": "*:5432"\n },\n {\n "name": "PATRONI_POSTGRESQL_CONFIG_DIR",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PATRONI_POSTGRESQL_DATA_DIR",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PATRONI_RESTAPI_CONNECT_ADDRESS",\n "value": "$(PATRONI_NAME).cert-management-policy-pods:8008"\n },\n {\n "name": "PATRONI_RESTAPI_LISTEN",\n "value": "*:8008"\n },\n {\n "name": "PATRONICTL_CONFIG_FILE",\n "value": "/etc/patroni"\n },\n {\n "name": "LD_PRELOAD",\n "value": "/usr/lib64/libnss_wrapper.so"\n },\n {\n "name": "NSS_WRAPPER_PASSWD",\n "value": "/tmp/nss_wrapper/postgres/passwd"\n },\n {\n "name": "NSS_WRAPPER_GROUP",\n "value": "/tmp/nss_wrapper/postgres/group"\n }\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "livenessProbe": {\n "exec": {\n "command": [\n "bash",\n "-c",\n "/opt/crunchy/bin/postgres-liveness-check.sh"\n ]\n },\n "failureThreshold": 3,\n "initialDelaySeconds": 3,\n "periodSeconds": 10,\n "successThreshold": 1,\n "timeoutSeconds": 5\n },\n "name": "database",\n "ports": [\n {\n "containerPort": 5432,\n "name": "postgres",\n "protocol": "TCP"\n }\n ],\n "readinessProbe": {\n "exec": {\n "command": [\n "bash",\n "-c",\n "/opt/crunchy/bin/postgres-readiness-check.sh"\n ]\n },\n "failureThreshold": 3,\n "initialDelaySeconds": 3,\n "periodSeconds": 10,\n "successThreshold": 1,\n "timeoutSeconds": 5\n },\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgconf/tls",\n "name": "cert-volume",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/etc/database-containerinfo",\n "name": "database-containerinfo",\n "readOnly": true\n },\n {\n "mountPath": "/etc/pgbackrest/conf.d",\n "name": "pgbackrest-config",\n "readOnly": true\n },\n {\n "mountPath": "/etc/patroni",\n "name": "patroni-config",\n "readOnly": true\n },\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n },\n {\n "mountPath": "/dev/shm",\n "name": "dshm"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-ceu",\n "--",\n "monitor() {\\n# Parameters for curl when managing autogrow annotation.\\nAPISERVER=\\"https://kubernetes.default.svc\\"\\nSERVICEACCOUNT=\\"/var/run/secrets/kubernetes.io/serviceaccount\\"\\nNAMESPACE=$(cat ${SERVICEACCOUNT}/namespace)\\nTOKEN=$(cat ${SERVICEACCOUNT}/token)\\nCACERT=${SERVICEACCOUNT}/ca.crt\\n\\ndeclare -r directory=\\"/pgconf/tls\\"\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nwhile read -r -t 5 -u \\"${fd}\\" ||:; do\\n # Manage replication certificate.\\n if [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n install -D --mode=0600 -t \\"/tmp/replication\\" \\"${directory}\\"/{replication/tls.crt,replication/tls.key,replication/ca.crt} \\u0026\\u0026\\n pkill -HUP --exact --parent=1 postgres\\n then\\n exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n fi\\n\\ndone\\n}; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n "replication-cert-copy"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "replication-cert-copy",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgconf/tls",\n "name": "cert-volume",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "args": [\n "fluent-bit"\n ],\n "command": [\n "/opt/crunchy/logcollector/entrypoint.sh"\n ],\n "env": [\n {\n "name": "PG_LOG_DIR",\n "value": "/pgdata/pg18/log"\n },\n {\n "name": "PGBACKREST_LOG_DIR",\n "value": "/pgdata/pgbackrest/log"\n },\n {\n "name": "POD_NAMESPACE",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.namespace"\n }\n }\n },\n {\n "name": "POD_NAME",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.name"\n }\n }\n }\n ],\n "image": "docker.io/perconalab/fluentbit:main-logcollector",\n "imagePullPolicy": "IfNotPresent",\n "name": "logs",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "runAsGroup": 26,\n "runAsNonRoot": true,\n "runAsUser": 26,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "args": [\n "logrotate"\n ],\n "command": [\n "/opt/crunchy/logcollector/entrypoint.sh"\n ],\n "env": [\n {\n "name": "POD_NAMESPACE",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.namespace"\n }\n }\n },\n {\n "name": "POD_NAME",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.name"\n }\n }\n },\n {\n "name": "LOGROTATE_SCHEDULE",\n "value": "0 0 * * *"\n },\n {\n "name": "LD_PRELOAD",\n "value": "/tmp/nss_wrapper/libnss_wrapper.so"\n },\n {\n "name": "NSS_WRAPPER_PASSWD",\n "value": "/tmp/nss_wrapper/postgres/passwd"\n },\n {\n "name": "NSS_WRAPPER_GROUP",\n "value": "/tmp/nss_wrapper/postgres/group"\n }\n ],\n "image": "docker.io/perconalab/fluentbit:main-logcollector",\n "imagePullPolicy": "IfNotPresent",\n "name": "logrotate",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "runAsGroup": 26,\n "runAsNonRoot": true,\n "runAsUser": 26,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "pgbackrest",\n "server"\n ],\n "env": [\n {\n "name": "LD_PRELOAD",\n "value": "/usr/lib64/libnss_wrapper.so"\n },\n {\n "name": "NSS_WRAPPER_PASSWD",\n "value": "/tmp/nss_wrapper/postgres/passwd"\n },\n {\n "name": "NSS_WRAPPER_GROUP",\n "value": "/tmp/nss_wrapper/postgres/group"\n }\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n "imagePullPolicy": "Always",\n "livenessProbe": {\n "exec": {\n "command": [\n "pgbackrest",\n "server-ping"\n ]\n },\n "failureThreshold": 3,\n "periodSeconds": 10,\n "successThreshold": 1,\n "timeoutSeconds": 1\n },\n "name": "pgbackrest",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/etc/pgbackrest/server",\n "name": "pgbackrest-server",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/etc/pgbackrest/conf.d",\n "name": "pgbackrest-config",\n "readOnly": true\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-ceu",\n "--",\n "monitor() {\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nuntil read -r -t 5 -u \\"${fd}\\"; do\\n if\\n [[ \\"${filename}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n pkill -HUP --exact --parent=0 pgbackrest\\n then\\n exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n stat --dereference --format=\'Loaded configuration dated %y\' \\"${filename}\\"\\n elif\\n { [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] ||\\n [[ \\"${authority}\\" -nt \\"/proc/self/fd/${fd}\\" ]]\\n } \\u0026\\u0026\\n pkill -HUP --exact --parent=0 pgbackrest\\n then\\n exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n fi\\ndone\\n}; export directory=\\"$1\\" authority=\\"$2\\" filename=\\"$3\\"; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n "pgbackrest-config",\n "/etc/pgbackrest/server",\n "/etc/pgbackrest/conf.d/~postgres-operator/tls-ca.crt",\n "/etc/pgbackrest/conf.d/~postgres-operator_server.conf"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n "imagePullPolicy": "Always",\n "name": "pgbackrest-config",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/etc/pgbackrest/server",\n "name": "pgbackrest-server",\n "readOnly": true\n },\n {\n "mountPath": "/etc/pgbackrest/conf.d",\n "name": "pgbackrest-config",\n "readOnly": true\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n }\n ],\n "dnsPolicy": "ClusterFirst",\n "enableServiceLinks": false,\n "initContainers": [\n {\n "command": [\n "/usr/local/bin/init-entrypoint.sh"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd",\n "imagePullPolicy": "Always",\n "name": "database-init",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-ceu",\n "--",\n "declare -r expected_major_version=\\"$1\\" pgwal_directory=\\"$2\\" pgbrLog_directory=\\"$3\\"\\npermissions() { while [[ -n \\"$1\\" ]]; do set \\"${1%/*}\\" \\"$@\\"; done; shift; stat -Lc \'%A %4u %4g %n\' \\"$@\\"; }\\nhalt() { local rc=$?; \\u003e\\u00262 echo \\"$@\\"; exit \\"${rc/#0/1}\\"; }\\nresults() { printf \'::postgres-operator: %s::%s\\\\n\' \\"$@\\"; }\\nrecreate() (\\n local tmp; tmp=$(mktemp -d -p \\"${1%/*}\\"); GLOBIGNORE=\'.:..\'; set -x\\n chmod \\"$2\\" \\"${tmp}\\"; mv \\"$1\\"/* \\"${tmp}\\"; rmdir \\"$1\\"; mv \\"${tmp}\\" \\"$1\\"\\n)\\nsafelink() (\\n local desired=\\"$1\\" name=\\"$2\\" current\\n current=$(realpath \\"${name}\\")\\n if [[ \\"${current}\\" == \\"${desired}\\" ]]; then return; fi\\n set -x; mv --no-target-directory \\"${current}\\" \\"${desired}\\"\\n ln --no-dereference --force --symbolic \\"${desired}\\" \\"${name}\\"\\n)\\necho Initializing ...\\nresults \'uid\' \\"$(id -u ||:)\\" \'gid\' \\"$(id -G ||:)\\"\\nif [[ \\"${pgwal_directory}\\" == *\\"pgwal/\\"* ]] \\u0026\\u0026 [[ ! -d \\"/pgwal/pgbackrest-spool\\" ]];then rm -rf \\"/pgdata/pgbackrest-spool\\" \\u0026\\u0026 mkdir -p \\"/pgwal/pgbackrest-spool\\" \\u0026\\u0026 ln --force --symbolic \\"/pgwal/pgbackrest-spool\\" \\"/pgdata/pgbackrest-spool\\";fi\\nif [[ ! -e \\"/pgdata/pgbackrest-spool\\" ]];then rm -rf /pgdata/pgbackrest-spool;fi\\nresults \'postgres path\' \\"$(command -v postgres ||:)\\"\\nresults \'postgres version\' \\"${postgres_version:=$(postgres --version ||:)}\\"\\n[[ \\"${postgres_version}\\" =~ \\") ${expected_major_version}\\"($|[^0-9]) ]] ||\\nhalt Expected PostgreSQL version \\"${expected_major_version}\\"\\nresults \'config directory\' \\"${PGDATA:?}\\"\\npostgres_data_directory=$([[ -d \\"${PGDATA}\\" ]] \\u0026\\u0026 postgres -C data_directory || echo \\"${PGDATA}\\")\\nresults \'data directory\' \\"${postgres_data_directory}\\"\\n[[ \\"${postgres_data_directory}\\" == \\"${PGDATA}\\" ]] ||\\nhalt Expected matching config and data directories\\nbootstrap_dir=\\"${postgres_data_directory}_bootstrap\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 results \'bootstrap directory\' \\"${bootstrap_dir}\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 postgres_data_directory=\\"${bootstrap_dir}\\"\\nif [[ ! -e \\"${postgres_data_directory}\\" || -O \\"${postgres_data_directory}\\" ]]; then\\ninstall --directory --mode=0700 \\"${postgres_data_directory}\\"\\nelif [[ -w \\"${postgres_data_directory}\\" \\u0026\\u0026 -g \\"${postgres_data_directory}\\" ]]; then\\nrecreate \\"${postgres_data_directory}\\" \'0700\'\\nelse (halt Permissions!); fi ||\\nhalt \\"$(permissions \\"${postgres_data_directory}\\" ||:)\\"\\nresults \'pgBackRest log directory\' \\"${pgbrLog_directory}\\"\\ninstall --directory --mode=0775 \\"${pgbrLog_directory}\\" ||\\nhalt \\"$(permissions \\"${pgbrLog_directory}\\" ||:)\\"\\ninstall -D --mode=0600 -t \\"/tmp/replication\\" \\"/pgconf/tls/replication\\"/{tls.crt,tls.key,ca.crt}\\n\\n[[ -f \\"${postgres_data_directory}/PG_VERSION\\" ]] || exit 0\\nresults \'data version\' \\"${postgres_data_version:=$(\\u003c \\"${postgres_data_directory}/PG_VERSION\\")}\\"\\n[[ \\"${postgres_data_version}\\" == \\"${expected_major_version}\\" ]] ||\\nhalt Expected PostgreSQL data version \\"${expected_major_version}\\"\\n[[ ! -f \\"${postgres_data_directory}/postgresql.conf\\" ]] \\u0026\\u0026\\ntouch \\"${postgres_data_directory}/postgresql.conf\\"\\nsafelink \\"${pgwal_directory}\\" \\"${postgres_data_directory}/pg_wal\\"\\nresults \'wal directory\' \\"$(realpath \\"${postgres_data_directory}/pg_wal\\" ||:)\\"\\nrm -f \\"${postgres_data_directory}/recovery.signal\\"",\n "startup",\n "18",\n "/pgdata/pg18_wal",\n "/pgdata/pgbackrest/log"\n ],\n "env": [\n {\n "name": "PGDATA",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PGHOST",\n "value": "/tmp/postgres"\n },\n {\n "name": "PGPORT",\n "value": "5432"\n },\n {\n "name": "KRB5_CONFIG",\n "value": "/etc/postgres/krb5.conf"\n },\n {\n "name": "KRB5RCACHEDIR",\n "value": "/tmp"\n },\n {\n "name": "LDAPTLS_CACERT",\n "value": "/etc/postgres/ldap/ca.crt"\n },\n {\n "name": "LC_ALL",\n "value": "en_US.utf-8"\n },\n {\n "name": "LANG",\n "value": "en_US.utf-8"\n }\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "postgres-startup",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgconf/tls",\n "name": "cert-volume",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-c",\n "mkdir -p /tmp/nss_wrapper \\u0026\\u0026 { [[ -f /tmp/nss_wrapper/libnss_wrapper.so ]] || cp /usr/lib64/libnss_wrapper.so /tmp/nss_wrapper/libnss_wrapper.so; }"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "nss-wrapper-init-logcollector",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "runAsGroup": 26,\n "runAsNonRoot": true,\n "runAsUser": 26,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-c",\n "export NSS_WRAPPER_SUBDIR=postgres CRUNCHY_NSS_USERNAME=postgres CRUNCHY_NSS_USER_DESC=\\"postgres\\" \\n# Define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper. The\\n# nss_wrapper_env.sh script (which also sets these vars) isn\'t sourced here since the nss_wrapper\\n# has not yet been setup, and we therefore don\'t yet want the nss_wrapper vars in the environment.\\nmkdir -p /tmp/nss_wrapper\\nchmod g+rwx /tmp/nss_wrapper\\n\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\n# create the nss_wrapper directory\\nmkdir -p \\"${NSS_WRAPPER_DIR}\\"\\n\\n# grab the current user ID and group ID\\nUSER_ID=$(id -u)\\nexport USER_ID\\nGROUP_ID=$(id -g)\\nexport GROUP_ID\\n\\n# get copies of the passwd and group files\\n[[ -f \\"${NSS_WRAPPER_PASSWD}\\" ]] || cp \\"/etc/passwd\\" \\"${NSS_WRAPPER_PASSWD}\\"\\n[[ -f \\"${NSS_WRAPPER_GROUP}\\" ]] || cp \\"/etc/group\\" \\"${NSS_WRAPPER_GROUP}\\"\\n\\n# if the username is missing from the passwd file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_PASSWD}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n echo \\"nss_wrapper: adding user\\"\\n passwd_tmp=\\"${NSS_WRAPPER_DIR}/passwd_tmp\\"\\n cp \\"${NSS_WRAPPER_PASSWD}\\" \\"${passwd_tmp}\\"\\n sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${passwd_tmp}\\"\\n # needed for OCP 4.x because crio updates /etc/passwd with an entry for USER_ID\\n sed -i \\"/${USER_ID}:x:/d\\" \\"${passwd_tmp}\\"\\n printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${GROUP_ID}:${CRUNCHY_NSS_USER_DESC}:${HOME}:/bin/bash\\\\n\' \\u003e\\u003e \\"${passwd_tmp}\\"\\n envsubst \\u003c \\"${passwd_tmp}\\" \\u003e \\"${NSS_WRAPPER_PASSWD}\\"\\n rm \\"${passwd_tmp}\\"\\nelse\\n echo \\"nss_wrapper: user exists\\"\\nfi\\n\\n# if the username (which will be the same as the group name) is missing from group file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_GROUP}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n echo \\"nss_wrapper: adding group\\"\\n group_tmp=\\"${NSS_WRAPPER_DIR}/group_tmp\\"\\n cp \\"${NSS_WRAPPER_GROUP}\\" \\"${group_tmp}\\"\\n sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${group_tmp}\\"\\n printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${CRUNCHY_NSS_USERNAME}\\\\n\' \\u003e\\u003e \\"${group_tmp}\\"\\n envsubst \\u003c \\"${group_tmp}\\" \\u003e \\"${NSS_WRAPPER_GROUP}\\"\\n rm \\"${group_tmp}\\"\\nelse\\n echo \\"nss_wrapper: group exists\\"\\nfi\\n\\n# export the nss_wrapper env vars\\n# define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\nexport LD_PRELOAD=/usr/lib64/libnss_wrapper.so\\nexport NSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_PASSWD}\\"\\nexport NSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_GROUP}\\"\\n\\necho \\"nss_wrapper: environment configured\\"\\n"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "nss-wrapper-init",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n }\n ],\n "restartPolicy": "Always",\n "schedulerName": "default-scheduler",\n "securityContext": {\n "fsGroup": 26,\n "fsGroupChangePolicy": "OnRootMismatch"\n },\n "serviceAccount": "cert-management-policy-instance",\n "serviceAccountName": "cert-management-policy-instance",\n "shareProcessNamespace": true,\n "terminationGracePeriodSeconds": 30,\n "topologySpreadConstraints": [\n {\n "labelSelector": {\n "matchExpressions": [\n {\n "key": "postgres-operator.crunchydata.com/data",\n "operator": "In",\n "values": [\n "postgres",\n "pgbackrest"\n ]\n }\n ],\n "matchLabels": {\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n }\n },\n "maxSkew": 1,\n "topologyKey": "kubernetes.io/hostname",\n "whenUnsatisfiable": "ScheduleAnyway"\n },\n {\n "labelSelector": {\n "matchExpressions": [\n {\n "key": "postgres-operator.crunchydata.com/data",\n "operator": "In",\n "values": [\n "postgres",\n "pgbackrest"\n ]\n }\n ],\n "matchLabels": {\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n }\n },\n "maxSkew": 1,\n "topologyKey": "topology.kubernetes.io/zone",\n "whenUnsatisfiable": "ScheduleAnyway"\n }\n ],\n "volumes": [\n {\n "name": "cert-volume",\n "projected": {\n "defaultMode": 384,\n "sources": [\n {\n "secret": {\n "items": [\n {\n "key": "tls.crt",\n "path": "tls.crt"\n },\n {\n "key": "tls.key",\n "path": "tls.key"\n },\n {\n "key": "ca.crt",\n "path": "ca.crt"\n }\n ],\n "name": "cert-management-policy-cluster-cert"\n }\n },\n {\n "secret": {\n "items": [\n {\n "key": "tls.crt",\n "path": "replication/tls.crt"\n },\n {\n "key": "tls.key",\n "path": "replication/tls.key"\n },\n {\n "key": "ca.crt",\n "path": "replication/ca.crt"\n }\n ],\n "name": "cert-management-policy-replication-cert"\n }\n }\n ]\n }\n },\n {\n "name": "postgres-data",\n "persistentVolumeClaim": {\n "claimName": "cert-management-policy-instance1-49wh-pgdata"\n }\n },\n {\n "downwardAPI": {\n "defaultMode": 420,\n "items": [\n {\n "path": "cpu_limit",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1m",\n "resource": "limits.cpu"\n }\n },\n {\n "path": "cpu_request",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1m",\n "resource": "requests.cpu"\n }\n },\n {\n "path": "mem_limit",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1Mi",\n "resource": "limits.memory"\n }\n },\n {\n "path": "mem_request",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1Mi",\n "resource": "requests.memory"\n }\n },\n {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.labels"\n },\n "path": "labels"\n },\n {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.annotations"\n },\n "path": "annotations"\n }\n ]\n },\n "name": "database-containerinfo"\n },\n {\n "name": "pgbackrest-server",\n "projected": {\n "defaultMode": 420,\n "sources": [\n {\n "secret": {\n "items": [\n {\n "key": "pgbackrest-server.crt",\n "path": "server-tls.crt"\n },\n {\n "key": "pgbackrest-server.key",\n "mode": 384,\n "path": "server-tls.key"\n }\n ],\n "name": "cert-management-policy-instance1-49wh-certs"\n }\n }\n ]\n }\n },\n {\n "name": "pgbackrest-config",\n "projected": {\n "defaultMode": 420,\n "sources": [\n {\n "configMap": {\n "items": [\n {\n "key": "pgbackrest_instance.conf",\n "path": "pgbackrest_instance.conf"\n },\n {\n "key": "config-hash",\n "path": "config-hash"\n },\n {\n "key": "pgbackrest-server.conf",\n "path": "~postgres-operator_server.conf"\n }\n ],\n "name": "cert-management-policy-pgbackrest-config"\n }\n },\n {\n "secret": {\n "items": [\n {\n "key": "pgbackrest.ca-roots",\n "path": "~postgres-operator/tls-ca.crt"\n },\n {\n "key": "pgbackrest-client.crt",\n "path": "~postgres-operator/client-tls.crt"\n },\n {\n "key": "pgbackrest-client.key",\n "mode": 384,\n "path": "~postgres-operator/client-tls.key"\n }\n ],\n "name": "cert-management-policy-pgbackrest"\n }\n }\n ]\n }\n },\n {\n "name": "patroni-config",\n "projected": {\n "defaultMode": 420,\n "sources": [\n {\n "configMap": {\n "items": [\n {\n "key": "patroni.yaml",\n "path": "~postgres-operator_cluster.yaml"\n }\n ],\n "name": "cert-management-policy-config"\n }\n },\n {\n "configMap": {\n "items": [\n {\n "key": "patroni.yaml",\n "path": "~postgres-operator_instance.yaml"\n }\n ],\n "name": "cert-management-policy-instance1-49wh-config"\n }\n },\n {\n "secret": {\n "items": [\n {\n "key": "patroni.ca-roots",\n "path": "~postgres-operator/patroni.ca-roots"\n },\n {\n "key": "patroni.crt-combined",\n "path": "~postgres-operator/patroni.crt+key"\n }\n ],\n "name": "cert-management-policy-instance1-49wh-certs"\n }\n }\n ]\n }\n },\n {\n "emptyDir": {},\n "name": "crunchy-bin"\n },\n {\n "emptyDir": {\n "sizeLimit": "2Gi"\n },\n "name": "tmp"\n },\n {\n "emptyDir": {\n "medium": "Memory"\n },\n "name": "dshm"\n }\n ]\n }\n },\n "updateStrategy": {\n "type": "OnDelete"\n }\n },\n "status": {\n "availableReplicas": 0,\n "collisionCount": 0,\n "currentReplicas": 1,\n "currentRevision": "cert-management-policy-instance1-49wh-9cdbd667d",\n "observedGeneration": 1,\n "replicas": 1,\n "updateRevision": "cert-management-policy-instance1-49wh-9cdbd667d",\n "updatedReplicas": 1\n }\n },\n {\n "apiVersion": "apps/v1",\n "kind": "StatefulSet",\n "metadata": {\n "annotations": {\n "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n },\n "creationTimestamp": "2026-09-01T20:32:14Z",\n "generation": 1,\n "labels": {\n "app.kubernetes.io/component": "pg",\n "app.kubernetes.io/instance": "cert-management-policy",\n "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n "app.kubernetes.io/name": "percona-postgresql",\n "app.kubernetes.io/part-of": "percona-postgresql",\n "pgv2.percona.com/version": "3.1.0",\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n "postgres-operator.crunchydata.com/data": "postgres",\n "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-67wh",\n "postgres-operator.crunchydata.com/instance-set": "instance1"\n },\n "name": "cert-management-policy-instance1-67wh",\n "namespace": "kuttl-test-stable-swift",\n "ownerReferences": [\n {\n "apiVersion": "upstream.pgv2.percona.com/v1beta1",\n "blockOwnerDeletion": true,\n "controller": true,\n "kind": "PostgresCluster",\n "name": "cert-management-policy",\n "uid": "bfa032ba-ea17-41e0-ba2d-5456e324f531"\n }\n ],\n "resourceVersion": "1788294734715615012",\n "uid": "67f866f3-1617-4323-b8f0-fd6799cdc065"\n },\n "spec": {\n "persistentVolumeClaimRetentionPolicy": {\n "whenDeleted": "Retain",\n "whenScaled": "Retain"\n },\n "podManagementPolicy": "OrderedReady",\n "replicas": 1,\n "revisionHistoryLimit": 0,\n "selector": {\n "matchLabels": {\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-67wh",\n "postgres-operator.crunchydata.com/instance-set": "instance1"\n }\n },\n "serviceName": "cert-management-policy-pods",\n "template": {\n "metadata": {\n "annotations": {\n "kubectl.kubernetes.io/default-container": "database",\n "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n },\n "labels": {\n "app.kubernetes.io/component": "pg",\n "app.kubernetes.io/instance": "cert-management-policy",\n "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n "app.kubernetes.io/name": "percona-postgresql",\n "app.kubernetes.io/part-of": "percona-postgresql",\n "pgv2.percona.com/version": "3.1.0",\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n "postgres-operator.crunchydata.com/data": "postgres",\n "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-67wh",\n "postgres-operator.crunchydata.com/instance-set": "instance1",\n "postgres-operator.crunchydata.com/patroni": "cert-management-policy-ha"\n }\n },\n "spec": {\n "affinity": {\n "podAntiAffinity": {\n "preferredDuringSchedulingIgnoredDuringExecution": [\n {\n "podAffinityTerm": {\n "labelSelector": {\n "matchLabels": {\n "postgres-operator.crunchydata.com/data": "postgres"\n }\n },\n "topologyKey": "kubernetes.io/hostname"\n },\n "weight": 1\n }\n ]\n }\n },\n "containers": [\n {\n "command": [\n "/opt/crunchy/bin/postgres-entrypoint.sh",\n "patroni",\n "/etc/patroni"\n ],\n "env": [\n {\n "name": "PGDATA",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PGHOST",\n "value": "/tmp/postgres"\n },\n {\n "name": "PGPORT",\n "value": "5432"\n },\n {\n "name": "KRB5_CONFIG",\n "value": "/etc/postgres/krb5.conf"\n },\n {\n "name": "KRB5RCACHEDIR",\n "value": "/tmp"\n },\n {\n "name": "LDAPTLS_CACERT",\n "value": "/etc/postgres/ldap/ca.crt"\n },\n {\n "name": "LC_ALL",\n "value": "en_US.utf-8"\n },\n {\n "name": "LANG",\n "value": "en_US.utf-8"\n },\n {\n "name": "PATRONI_NAME",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.name"\n }\n }\n },\n {\n "name": "PATRONI_KUBERNETES_POD_IP",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "status.podIP"\n }\n }\n },\n {\n "name": "PATRONI_KUBERNETES_PORTS",\n "value": "- name: postgres\\n port: 5432\\n protocol: TCP\\n"\n },\n {\n "name": "PATRONI_POSTGRESQL_CONNECT_ADDRESS",\n "value": "$(PATRONI_NAME).cert-management-policy-pods:5432"\n },\n {\n "name": "PATRONI_POSTGRESQL_LISTEN",\n "value": "*:5432"\n },\n {\n "name": "PATRONI_POSTGRESQL_CONFIG_DIR",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PATRONI_POSTGRESQL_DATA_DIR",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PATRONI_RESTAPI_CONNECT_ADDRESS",\n "value": "$(PATRONI_NAME).cert-management-policy-pods:8008"\n },\n {\n "name": "PATRONI_RESTAPI_LISTEN",\n "value": "*:8008"\n },\n {\n "name": "PATRONICTL_CONFIG_FILE",\n "value": "/etc/patroni"\n },\n {\n "name": "LD_PRELOAD",\n "value": "/usr/lib64/libnss_wrapper.so"\n },\n {\n "name": "NSS_WRAPPER_PASSWD",\n "value": "/tmp/nss_wrapper/postgres/passwd"\n },\n {\n "name": "NSS_WRAPPER_GROUP",\n "value": "/tmp/nss_wrapper/postgres/group"\n }\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "livenessProbe": {\n "exec": {\n "command": [\n "bash",\n "-c",\n "/opt/crunchy/bin/postgres-liveness-check.sh"\n ]\n },\n "failureThreshold": 3,\n "initialDelaySeconds": 3,\n "periodSeconds": 10,\n "successThreshold": 1,\n "timeoutSeconds": 5\n },\n "name": "database",\n "ports": [\n {\n "containerPort": 5432,\n "name": "postgres",\n "protocol": "TCP"\n }\n ],\n "readinessProbe": {\n "exec": {\n "command": [\n "bash",\n "-c",\n "/opt/crunchy/bin/postgres-readiness-check.sh"\n ]\n },\n "failureThreshold": 3,\n "initialDelaySeconds": 3,\n "periodSeconds": 10,\n "successThreshold": 1,\n "timeoutSeconds": 5\n },\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgconf/tls",\n "name": "cert-volume",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/etc/database-containerinfo",\n "name": "database-containerinfo",\n "readOnly": true\n },\n {\n "mountPath": "/etc/pgbackrest/conf.d",\n "name": "pgbackrest-config",\n "readOnly": true\n },\n {\n "mountPath": "/etc/patroni",\n "name": "patroni-config",\n "readOnly": true\n },\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n },\n {\n "mountPath": "/dev/shm",\n "name": "dshm"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-ceu",\n "--",\n "monitor() {\\n# Parameters for curl when managing autogrow annotation.\\nAPISERVER=\\"https://kubernetes.default.svc\\"\\nSERVICEACCOUNT=\\"/var/run/secrets/kubernetes.io/serviceaccount\\"\\nNAMESPACE=$(cat ${SERVICEACCOUNT}/namespace)\\nTOKEN=$(cat ${SERVICEACCOUNT}/token)\\nCACERT=${SERVICEACCOUNT}/ca.crt\\n\\ndeclare -r directory=\\"/pgconf/tls\\"\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nwhile read -r -t 5 -u \\"${fd}\\" ||:; do\\n # Manage replication certificate.\\n if [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n install -D --mode=0600 -t \\"/tmp/replication\\" \\"${directory}\\"/{replication/tls.crt,replication/tls.key,replication/ca.crt} \\u0026\\u0026\\n pkill -HUP --exact --parent=1 postgres\\n then\\n exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n fi\\n\\ndone\\n}; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n "replication-cert-copy"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "replication-cert-copy",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgconf/tls",\n "name": "cert-volume",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "args": [\n "fluent-bit"\n ],\n "command": [\n "/opt/crunchy/logcollector/entrypoint.sh"\n ],\n "env": [\n {\n "name": "PG_LOG_DIR",\n "value": "/pgdata/pg18/log"\n },\n {\n "name": "PGBACKREST_LOG_DIR",\n "value": "/pgdata/pgbackrest/log"\n },\n {\n "name": "POD_NAMESPACE",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.namespace"\n }\n }\n },\n {\n "name": "POD_NAME",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.name"\n }\n }\n }\n ],\n "image": "docker.io/perconalab/fluentbit:main-logcollector",\n "imagePullPolicy": "IfNotPresent",\n "name": "logs",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "runAsGroup": 26,\n "runAsNonRoot": true,\n "runAsUser": 26,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "args": [\n "logrotate"\n ],\n "command": [\n "/opt/crunchy/logcollector/entrypoint.sh"\n ],\n "env": [\n {\n "name": "POD_NAMESPACE",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.namespace"\n }\n }\n },\n {\n "name": "POD_NAME",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.name"\n }\n }\n },\n {\n "name": "LOGROTATE_SCHEDULE",\n "value": "0 0 * * *"\n },\n {\n "name": "LD_PRELOAD",\n "value": "/tmp/nss_wrapper/libnss_wrapper.so"\n },\n {\n "name": "NSS_WRAPPER_PASSWD",\n "value": "/tmp/nss_wrapper/postgres/passwd"\n },\n {\n "name": "NSS_WRAPPER_GROUP",\n "value": "/tmp/nss_wrapper/postgres/group"\n }\n ],\n "image": "docker.io/perconalab/fluentbit:main-logcollector",\n "imagePullPolicy": "IfNotPresent",\n "name": "logrotate",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "runAsGroup": 26,\n "runAsNonRoot": true,\n "runAsUser": 26,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "pgbackrest",\n "server"\n ],\n "env": [\n {\n "name": "LD_PRELOAD",\n "value": "/usr/lib64/libnss_wrapper.so"\n },\n {\n "name": "NSS_WRAPPER_PASSWD",\n "value": "/tmp/nss_wrapper/postgres/passwd"\n },\n {\n "name": "NSS_WRAPPER_GROUP",\n "value": "/tmp/nss_wrapper/postgres/group"\n }\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n "imagePullPolicy": "Always",\n "livenessProbe": {\n "exec": {\n "command": [\n "pgbackrest",\n "server-ping"\n ]\n },\n "failureThreshold": 3,\n "periodSeconds": 10,\n "successThreshold": 1,\n "timeoutSeconds": 1\n },\n "name": "pgbackrest",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/etc/pgbackrest/server",\n "name": "pgbackrest-server",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/etc/pgbackrest/conf.d",\n "name": "pgbackrest-config",\n "readOnly": true\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-ceu",\n "--",\n "monitor() {\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nuntil read -r -t 5 -u \\"${fd}\\"; do\\n if\\n [[ \\"${filename}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n pkill -HUP --exact --parent=0 pgbackrest\\n then\\n exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n stat --dereference --format=\'Loaded configuration dated %y\' \\"${filename}\\"\\n elif\\n { [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] ||\\n [[ \\"${authority}\\" -nt \\"/proc/self/fd/${fd}\\" ]]\\n } \\u0026\\u0026\\n pkill -HUP --exact --parent=0 pgbackrest\\n then\\n exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n fi\\ndone\\n}; export directory=\\"$1\\" authority=\\"$2\\" filename=\\"$3\\"; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n "pgbackrest-config",\n "/etc/pgbackrest/server",\n "/etc/pgbackrest/conf.d/~postgres-operator/tls-ca.crt",\n "/etc/pgbackrest/conf.d/~postgres-operator_server.conf"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n "imagePullPolicy": "Always",\n "name": "pgbackrest-config",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/etc/pgbackrest/server",\n "name": "pgbackrest-server",\n "readOnly": true\n },\n {\n "mountPath": "/etc/pgbackrest/conf.d",\n "name": "pgbackrest-config",\n "readOnly": true\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n }\n ],\n "dnsPolicy": "ClusterFirst",\n "enableServiceLinks": false,\n "initContainers": [\n {\n "command": [\n "/usr/local/bin/init-entrypoint.sh"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd",\n "imagePullPolicy": "Always",\n "name": "database-init",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-ceu",\n "--",\n "declare -r expected_major_version=\\"$1\\" pgwal_directory=\\"$2\\" pgbrLog_directory=\\"$3\\"\\npermissions() { while [[ -n \\"$1\\" ]]; do set \\"${1%/*}\\" \\"$@\\"; done; shift; stat -Lc \'%A %4u %4g %n\' \\"$@\\"; }\\nhalt() { local rc=$?; \\u003e\\u00262 echo \\"$@\\"; exit \\"${rc/#0/1}\\"; }\\nresults() { printf \'::postgres-operator: %s::%s\\\\n\' \\"$@\\"; }\\nrecreate() (\\n local tmp; tmp=$(mktemp -d -p \\"${1%/*}\\"); GLOBIGNORE=\'.:..\'; set -x\\n chmod \\"$2\\" \\"${tmp}\\"; mv \\"$1\\"/* \\"${tmp}\\"; rmdir \\"$1\\"; mv \\"${tmp}\\" \\"$1\\"\\n)\\nsafelink() (\\n local desired=\\"$1\\" name=\\"$2\\" current\\n current=$(realpath \\"${name}\\")\\n if [[ \\"${current}\\" == \\"${desired}\\" ]]; then return; fi\\n set -x; mv --no-target-directory \\"${current}\\" \\"${desired}\\"\\n ln --no-dereference --force --symbolic \\"${desired}\\" \\"${name}\\"\\n)\\necho Initializing ...\\nresults \'uid\' \\"$(id -u ||:)\\" \'gid\' \\"$(id -G ||:)\\"\\nif [[ \\"${pgwal_directory}\\" == *\\"pgwal/\\"* ]] \\u0026\\u0026 [[ ! -d \\"/pgwal/pgbackrest-spool\\" ]];then rm -rf \\"/pgdata/pgbackrest-spool\\" \\u0026\\u0026 mkdir -p \\"/pgwal/pgbackrest-spool\\" \\u0026\\u0026 ln --force --symbolic \\"/pgwal/pgbackrest-spool\\" \\"/pgdata/pgbackrest-spool\\";fi\\nif [[ ! -e \\"/pgdata/pgbackrest-spool\\" ]];then rm -rf /pgdata/pgbackrest-spool;fi\\nresults \'postgres path\' \\"$(command -v postgres ||:)\\"\\nresults \'postgres version\' \\"${postgres_version:=$(postgres --version ||:)}\\"\\n[[ \\"${postgres_version}\\" =~ \\") ${expected_major_version}\\"($|[^0-9]) ]] ||\\nhalt Expected PostgreSQL version \\"${expected_major_version}\\"\\nresults \'config directory\' \\"${PGDATA:?}\\"\\npostgres_data_directory=$([[ -d \\"${PGDATA}\\" ]] \\u0026\\u0026 postgres -C data_directory || echo \\"${PGDATA}\\")\\nresults \'data directory\' \\"${postgres_data_directory}\\"\\n[[ \\"${postgres_data_directory}\\" == \\"${PGDATA}\\" ]] ||\\nhalt Expected matching config and data directories\\nbootstrap_dir=\\"${postgres_data_directory}_bootstrap\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 results \'bootstrap directory\' \\"${bootstrap_dir}\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 postgres_data_directory=\\"${bootstrap_dir}\\"\\nif [[ ! -e \\"${postgres_data_directory}\\" || -O \\"${postgres_data_directory}\\" ]]; then\\ninstall --directory --mode=0700 \\"${postgres_data_directory}\\"\\nelif [[ -w \\"${postgres_data_directory}\\" \\u0026\\u0026 -g \\"${postgres_data_directory}\\" ]]; then\\nrecreate \\"${postgres_data_directory}\\" \'0700\'\\nelse (halt Permissions!); fi ||\\nhalt \\"$(permissions \\"${postgres_data_directory}\\" ||:)\\"\\nresults \'pgBackRest log directory\' \\"${pgbrLog_directory}\\"\\ninstall --directory --mode=0775 \\"${pgbrLog_directory}\\" ||\\nhalt \\"$(permissions \\"${pgbrLog_directory}\\" ||:)\\"\\ninstall -D --mode=0600 -t \\"/tmp/replication\\" \\"/pgconf/tls/replication\\"/{tls.crt,tls.key,ca.crt}\\n\\n[[ -f \\"${postgres_data_directory}/PG_VERSION\\" ]] || exit 0\\nresults \'data version\' \\"${postgres_data_version:=$(\\u003c \\"${postgres_data_directory}/PG_VERSION\\")}\\"\\n[[ \\"${postgres_data_version}\\" == \\"${expected_major_version}\\" ]] ||\\nhalt Expected PostgreSQL data version \\"${expected_major_version}\\"\\n[[ ! -f \\"${postgres_data_directory}/postgresql.conf\\" ]] \\u0026\\u0026\\ntouch \\"${postgres_data_directory}/postgresql.conf\\"\\nsafelink \\"${pgwal_directory}\\" \\"${postgres_data_directory}/pg_wal\\"\\nresults \'wal directory\' \\"$(realpath \\"${postgres_data_directory}/pg_wal\\" ||:)\\"\\nrm -f \\"${postgres_data_directory}/recovery.signal\\"",\n "startup",\n "18",\n "/pgdata/pg18_wal",\n "/pgdata/pgbackrest/log"\n ],\n "env": [\n {\n "name": "PGDATA",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PGHOST",\n "value": "/tmp/postgres"\n },\n {\n "name": "PGPORT",\n "value": "5432"\n },\n {\n "name": "KRB5_CONFIG",\n "value": "/etc/postgres/krb5.conf"\n },\n {\n "name": "KRB5RCACHEDIR",\n "value": "/tmp"\n },\n {\n "name": "LDAPTLS_CACERT",\n "value": "/etc/postgres/ldap/ca.crt"\n },\n {\n "name": "LC_ALL",\n "value": "en_US.utf-8"\n },\n {\n "name": "LANG",\n "value": "en_US.utf-8"\n }\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "postgres-startup",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgconf/tls",\n "name": "cert-volume",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-c",\n "mkdir -p /tmp/nss_wrapper \\u0026\\u0026 { [[ -f /tmp/nss_wrapper/libnss_wrapper.so ]] || cp /usr/lib64/libnss_wrapper.so /tmp/nss_wrapper/libnss_wrapper.so; }"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "nss-wrapper-init-logcollector",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "runAsGroup": 26,\n "runAsNonRoot": true,\n "runAsUser": 26,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-c",\n "export NSS_WRAPPER_SUBDIR=postgres CRUNCHY_NSS_USERNAME=postgres CRUNCHY_NSS_USER_DESC=\\"postgres\\" \\n# Define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper. The\\n# nss_wrapper_env.sh script (which also sets these vars) isn\'t sourced here since the nss_wrapper\\n# has not yet been setup, and we therefore don\'t yet want the nss_wrapper vars in the environment.\\nmkdir -p /tmp/nss_wrapper\\nchmod g+rwx /tmp/nss_wrapper\\n\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\n# create the nss_wrapper directory\\nmkdir -p \\"${NSS_WRAPPER_DIR}\\"\\n\\n# grab the current user ID and group ID\\nUSER_ID=$(id -u)\\nexport USER_ID\\nGROUP_ID=$(id -g)\\nexport GROUP_ID\\n\\n# get copies of the passwd and group files\\n[[ -f \\"${NSS_WRAPPER_PASSWD}\\" ]] || cp \\"/etc/passwd\\" \\"${NSS_WRAPPER_PASSWD}\\"\\n[[ -f \\"${NSS_WRAPPER_GROUP}\\" ]] || cp \\"/etc/group\\" \\"${NSS_WRAPPER_GROUP}\\"\\n\\n# if the username is missing from the passwd file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_PASSWD}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n echo \\"nss_wrapper: adding user\\"\\n passwd_tmp=\\"${NSS_WRAPPER_DIR}/passwd_tmp\\"\\n cp \\"${NSS_WRAPPER_PASSWD}\\" \\"${passwd_tmp}\\"\\n sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${passwd_tmp}\\"\\n # needed for OCP 4.x because crio updates /etc/passwd with an entry for USER_ID\\n sed -i \\"/${USER_ID}:x:/d\\" \\"${passwd_tmp}\\"\\n printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${GROUP_ID}:${CRUNCHY_NSS_USER_DESC}:${HOME}:/bin/bash\\\\n\' \\u003e\\u003e \\"${passwd_tmp}\\"\\n envsubst \\u003c \\"${passwd_tmp}\\" \\u003e \\"${NSS_WRAPPER_PASSWD}\\"\\n rm \\"${passwd_tmp}\\"\\nelse\\n echo \\"nss_wrapper: user exists\\"\\nfi\\n\\n# if the username (which will be the same as the group name) is missing from group file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_GROUP}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n echo \\"nss_wrapper: adding group\\"\\n group_tmp=\\"${NSS_WRAPPER_DIR}/group_tmp\\"\\n cp \\"${NSS_WRAPPER_GROUP}\\" \\"${group_tmp}\\"\\n sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${group_tmp}\\"\\n printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${CRUNCHY_NSS_USERNAME}\\\\n\' \\u003e\\u003e \\"${group_tmp}\\"\\n envsubst \\u003c \\"${group_tmp}\\" \\u003e \\"${NSS_WRAPPER_GROUP}\\"\\n rm \\"${group_tmp}\\"\\nelse\\n echo \\"nss_wrapper: group exists\\"\\nfi\\n\\n# export the nss_wrapper env vars\\n# define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\nexport LD_PRELOAD=/usr/lib64/libnss_wrapper.so\\nexport NSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_PASSWD}\\"\\nexport NSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_GROUP}\\"\\n\\necho \\"nss_wrapper: environment configured\\"\\n"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "nss-wrapper-init",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n }\n ],\n "restartPolicy": "Always",\n "schedulerName": "default-scheduler",\n "securityContext": {\n "fsGroup": 26,\n "fsGroupChangePolicy": "OnRootMismatch"\n },\n "serviceAccount": "cert-management-policy-instance",\n "serviceAccountName": "cert-management-policy-instance",\n "shareProcessNamespace": true,\n "terminationGracePeriodSeconds": 30,\n "topologySpreadConstraints": [\n {\n "labelSelector": {\n "matchExpressions": [\n {\n "key": "postgres-operator.crunchydata.com/data",\n "operator": "In",\n "values": [\n "postgres",\n "pgbackrest"\n ]\n }\n ],\n "matchLabels": {\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n }\n },\n "maxSkew": 1,\n "topologyKey": "kubernetes.io/hostname",\n "whenUnsatisfiable": "ScheduleAnyway"\n },\n {\n "labelSelector": {\n "matchExpressions": [\n {\n "key": "postgres-operator.crunchydata.com/data",\n "operator": "In",\n "values": [\n "postgres",\n "pgbackrest"\n ]\n }\n ],\n "matchLabels": {\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n }\n },\n "maxSkew": 1,\n "topologyKey": "topology.kubernetes.io/zone",\n "whenUnsatisfiable": "ScheduleAnyway"\n }\n ],\n "volumes": [\n {\n "name": "cert-volume",\n "projected": {\n "defaultMode": 384,\n "sources": [\n {\n "secret": {\n "items": [\n {\n "key": "tls.crt",\n "path": "tls.crt"\n },\n {\n "key": "tls.key",\n "path": "tls.key"\n },\n {\n "key": "ca.crt",\n "path": "ca.crt"\n }\n ],\n "name": "cert-management-policy-cluster-cert"\n }\n },\n {\n "secret": {\n "items": [\n {\n "key": "tls.crt",\n "path": "replication/tls.crt"\n },\n {\n "key": "tls.key",\n "path": "replication/tls.key"\n },\n {\n "key": "ca.crt",\n "path": "replication/ca.crt"\n }\n ],\n "name": "cert-management-policy-replication-cert"\n }\n }\n ]\n }\n },\n {\n "name": "postgres-data",\n "persistentVolumeClaim": {\n "claimName": "cert-management-policy-instance1-67wh-pgdata"\n }\n },\n {\n "downwardAPI": {\n "defaultMode": 420,\n "items": [\n {\n "path": "cpu_limit",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1m",\n "resource": "limits.cpu"\n }\n },\n {\n "path": "cpu_request",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1m",\n "resource": "requests.cpu"\n }\n },\n {\n "path": "mem_limit",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1Mi",\n "resource": "limits.memory"\n }\n },\n {\n "path": "mem_request",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1Mi",\n "resource": "requests.memory"\n }\n },\n {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.labels"\n },\n "path": "labels"\n },\n {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.annotations"\n },\n "path": "annotations"\n }\n ]\n },\n "name": "database-containerinfo"\n },\n {\n "name": "pgbackrest-server",\n "projected": {\n "defaultMode": 420,\n "sources": [\n {\n "secret": {\n "items": [\n {\n "key": "pgbackrest-server.crt",\n "path": "server-tls.crt"\n },\n {\n "key": "pgbackrest-server.key",\n "mode": 384,\n "path": "server-tls.key"\n }\n ],\n "name": "cert-management-policy-instance1-67wh-certs"\n }\n }\n ]\n }\n },\n {\n "name": "pgbackrest-config",\n "projected": {\n "defaultMode": 420,\n "sources": [\n {\n "configMap": {\n "items": [\n {\n "key": "pgbackrest_instance.conf",\n "path": "pgbackrest_instance.conf"\n },\n {\n "key": "config-hash",\n "path": "config-hash"\n },\n {\n "key": "pgbackrest-server.conf",\n "path": "~postgres-operator_server.conf"\n }\n ],\n "name": "cert-management-policy-pgbackrest-config"\n }\n },\n {\n "secret": {\n "items": [\n {\n "key": "pgbackrest.ca-roots",\n "path": "~postgres-operator/tls-ca.crt"\n },\n {\n "key": "pgbackrest-client.crt",\n "path": "~postgres-operator/client-tls.crt"\n },\n {\n "key": "pgbackrest-client.key",\n "mode": 384,\n "path": "~postgres-operator/client-tls.key"\n }\n ],\n "name": "cert-management-policy-pgbackrest"\n }\n }\n ]\n }\n },\n {\n "name": "patroni-config",\n "projected": {\n "defaultMode": 420,\n "sources": [\n {\n "configMap": {\n "items": [\n {\n "key": "patroni.yaml",\n "path": "~postgres-operator_cluster.yaml"\n }\n ],\n "name": "cert-management-policy-config"\n }\n },\n {\n "configMap": {\n "items": [\n {\n "key": "patroni.yaml",\n "path": "~postgres-operator_instance.yaml"\n }\n ],\n "name": "cert-management-policy-instance1-67wh-config"\n }\n },\n {\n "secret": {\n "items": [\n {\n "key": "patroni.ca-roots",\n "path": "~postgres-operator/patroni.ca-roots"\n },\n {\n "key": "patroni.crt-combined",\n "path": "~postgres-operator/patroni.crt+key"\n }\n ],\n "name": "cert-management-policy-instance1-67wh-certs"\n }\n }\n ]\n }\n },\n {\n "emptyDir": {},\n "name": "crunchy-bin"\n },\n {\n "emptyDir": {\n "sizeLimit": "2Gi"\n },\n "name": "tmp"\n },\n {\n "emptyDir": {\n "medium": "Memory"\n },\n "name": "dshm"\n }\n ]\n }\n },\n "updateStrategy": {\n "type": "OnDelete"\n }\n },\n "status": {\n "availableReplicas": 0,\n "collisionCount": 0,\n "currentReplicas": 1,\n "currentRevision": "cert-management-policy-instance1-67wh-5b9c864b6",\n "observedGeneration": 1,\n "replicas": 1,\n "updateRevision": "cert-management-policy-instance1-67wh-5b9c864b6",\n "updatedReplicas": 1\n }\n },\n {\n "apiVersion": "apps/v1",\n "kind": "StatefulSet",\n "metadata": {\n "annotations": {\n "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n },\n "creationTimestamp": "2026-09-01T20:32:14Z",\n "generation": 1,\n "labels": {\n "app.kubernetes.io/component": "pg",\n "app.kubernetes.io/instance": "cert-management-policy",\n "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n "app.kubernetes.io/name": "percona-postgresql",\n "app.kubernetes.io/part-of": "percona-postgresql",\n "pgv2.percona.com/version": "3.1.0",\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n "postgres-operator.crunchydata.com/data": "postgres",\n "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-f59q",\n "postgres-operator.crunchydata.com/instance-set": "instance1"\n },\n "name": "cert-management-policy-instance1-f59q",\n "namespace": "kuttl-test-stable-swift",\n "ownerReferences": [\n {\n "apiVersion": "upstream.pgv2.percona.com/v1beta1",\n "blockOwnerDeletion": true,\n "controller": true,\n "kind": "PostgresCluster",\n "name": "cert-management-policy",\n "uid": "bfa032ba-ea17-41e0-ba2d-5456e324f531"\n }\n ],\n "resourceVersion": "1788294735169071007",\n "uid": "86808021-218b-4a9b-b74c-41c69f27569a"\n },\n "spec": {\n "persistentVolumeClaimRetentionPolicy": {\n "whenDeleted": "Retain",\n "whenScaled": "Retain"\n },\n "podManagementPolicy": "OrderedReady",\n "replicas": 1,\n "revisionHistoryLimit": 0,\n "selector": {\n "matchLabels": {\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-f59q",\n "postgres-operator.crunchydata.com/instance-set": "instance1"\n }\n },\n "serviceName": "cert-management-policy-pods",\n "template": {\n "metadata": {\n "annotations": {\n "kubectl.kubernetes.io/default-container": "database",\n "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n },\n "labels": {\n "app.kubernetes.io/component": "pg",\n "app.kubernetes.io/instance": "cert-management-policy",\n "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n "app.kubernetes.io/name": "percona-postgresql",\n "app.kubernetes.io/part-of": "percona-postgresql",\n "pgv2.percona.com/version": "3.1.0",\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n "postgres-operator.crunchydata.com/data": "postgres",\n "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-f59q",\n "postgres-operator.crunchydata.com/instance-set": "instance1",\n "postgres-operator.crunchydata.com/patroni": "cert-management-policy-ha"\n }\n },\n "spec": {\n "affinity": {\n "podAntiAffinity": {\n "preferredDuringSchedulingIgnoredDuringExecution": [\n {\n "podAffinityTerm": {\n "labelSelector": {\n "matchLabels": {\n "postgres-operator.crunchydata.com/data": "postgres"\n }\n },\n "topologyKey": "kubernetes.io/hostname"\n },\n "weight": 1\n }\n ]\n }\n },\n "containers": [\n {\n "command": [\n "/opt/crunchy/bin/postgres-entrypoint.sh",\n "patroni",\n "/etc/patroni"\n ],\n "env": [\n {\n "name": "PGDATA",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PGHOST",\n "value": "/tmp/postgres"\n },\n {\n "name": "PGPORT",\n "value": "5432"\n },\n {\n "name": "KRB5_CONFIG",\n "value": "/etc/postgres/krb5.conf"\n },\n {\n "name": "KRB5RCACHEDIR",\n "value": "/tmp"\n },\n {\n "name": "LDAPTLS_CACERT",\n "value": "/etc/postgres/ldap/ca.crt"\n },\n {\n "name": "LC_ALL",\n "value": "en_US.utf-8"\n },\n {\n "name": "LANG",\n "value": "en_US.utf-8"\n },\n {\n "name": "PATRONI_NAME",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.name"\n }\n }\n },\n {\n "name": "PATRONI_KUBERNETES_POD_IP",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "status.podIP"\n }\n }\n },\n {\n "name": "PATRONI_KUBERNETES_PORTS",\n "value": "- name: postgres\\n port: 5432\\n protocol: TCP\\n"\n },\n {\n "name": "PATRONI_POSTGRESQL_CONNECT_ADDRESS",\n "value": "$(PATRONI_NAME).cert-management-policy-pods:5432"\n },\n {\n "name": "PATRONI_POSTGRESQL_LISTEN",\n "value": "*:5432"\n },\n {\n "name": "PATRONI_POSTGRESQL_CONFIG_DIR",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PATRONI_POSTGRESQL_DATA_DIR",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PATRONI_RESTAPI_CONNECT_ADDRESS",\n "value": "$(PATRONI_NAME).cert-management-policy-pods:8008"\n },\n {\n "name": "PATRONI_RESTAPI_LISTEN",\n "value": "*:8008"\n },\n {\n "name": "PATRONICTL_CONFIG_FILE",\n "value": "/etc/patroni"\n },\n {\n "name": "LD_PRELOAD",\n "value": "/usr/lib64/libnss_wrapper.so"\n },\n {\n "name": "NSS_WRAPPER_PASSWD",\n "value": "/tmp/nss_wrapper/postgres/passwd"\n },\n {\n "name": "NSS_WRAPPER_GROUP",\n "value": "/tmp/nss_wrapper/postgres/group"\n }\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "livenessProbe": {\n "exec": {\n "command": [\n "bash",\n "-c",\n "/opt/crunchy/bin/postgres-liveness-check.sh"\n ]\n },\n "failureThreshold": 3,\n "initialDelaySeconds": 3,\n "periodSeconds": 10,\n "successThreshold": 1,\n "timeoutSeconds": 5\n },\n "name": "database",\n "ports": [\n {\n "containerPort": 5432,\n "name": "postgres",\n "protocol": "TCP"\n }\n ],\n "readinessProbe": {\n "exec": {\n "command": [\n "bash",\n "-c",\n "/opt/crunchy/bin/postgres-readiness-check.sh"\n ]\n },\n "failureThreshold": 3,\n "initialDelaySeconds": 3,\n "periodSeconds": 10,\n "successThreshold": 1,\n "timeoutSeconds": 5\n },\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgconf/tls",\n "name": "cert-volume",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/etc/database-containerinfo",\n "name": "database-containerinfo",\n "readOnly": true\n },\n {\n "mountPath": "/etc/pgbackrest/conf.d",\n "name": "pgbackrest-config",\n "readOnly": true\n },\n {\n "mountPath": "/etc/patroni",\n "name": "patroni-config",\n "readOnly": true\n },\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n },\n {\n "mountPath": "/dev/shm",\n "name": "dshm"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-ceu",\n "--",\n "monitor() {\\n# Parameters for curl when managing autogrow annotation.\\nAPISERVER=\\"https://kubernetes.default.svc\\"\\nSERVICEACCOUNT=\\"/var/run/secrets/kubernetes.io/serviceaccount\\"\\nNAMESPACE=$(cat ${SERVICEACCOUNT}/namespace)\\nTOKEN=$(cat ${SERVICEACCOUNT}/token)\\nCACERT=${SERVICEACCOUNT}/ca.crt\\n\\ndeclare -r directory=\\"/pgconf/tls\\"\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nwhile read -r -t 5 -u \\"${fd}\\" ||:; do\\n # Manage replication certificate.\\n if [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n install -D --mode=0600 -t \\"/tmp/replication\\" \\"${directory}\\"/{replication/tls.crt,replication/tls.key,replication/ca.crt} \\u0026\\u0026\\n pkill -HUP --exact --parent=1 postgres\\n then\\n exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n fi\\n\\ndone\\n}; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n "replication-cert-copy"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "replication-cert-copy",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgconf/tls",\n "name": "cert-volume",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "args": [\n "fluent-bit"\n ],\n "command": [\n "/opt/crunchy/logcollector/entrypoint.sh"\n ],\n "env": [\n {\n "name": "PG_LOG_DIR",\n "value": "/pgdata/pg18/log"\n },\n {\n "name": "PGBACKREST_LOG_DIR",\n "value": "/pgdata/pgbackrest/log"\n },\n {\n "name": "POD_NAMESPACE",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.namespace"\n }\n }\n },\n {\n "name": "POD_NAME",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.name"\n }\n }\n }\n ],\n "image": "docker.io/perconalab/fluentbit:main-logcollector",\n "imagePullPolicy": "IfNotPresent",\n "name": "logs",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "runAsGroup": 26,\n "runAsNonRoot": true,\n "runAsUser": 26,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "args": [\n "logrotate"\n ],\n "command": [\n "/opt/crunchy/logcollector/entrypoint.sh"\n ],\n "env": [\n {\n "name": "POD_NAMESPACE",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.namespace"\n }\n }\n },\n {\n "name": "POD_NAME",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.name"\n }\n }\n },\n {\n "name": "LOGROTATE_SCHEDULE",\n "value": "0 0 * * *"\n },\n {\n "name": "LD_PRELOAD",\n "value": "/tmp/nss_wrapper/libnss_wrapper.so"\n },\n {\n "name": "NSS_WRAPPER_PASSWD",\n "value": "/tmp/nss_wrapper/postgres/passwd"\n },\n {\n "name": "NSS_WRAPPER_GROUP",\n "value": "/tmp/nss_wrapper/postgres/group"\n }\n ],\n "image": "docker.io/perconalab/fluentbit:main-logcollector",\n "imagePullPolicy": "IfNotPresent",\n "name": "logrotate",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "runAsGroup": 26,\n "runAsNonRoot": true,\n "runAsUser": 26,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "pgbackrest",\n "server"\n ],\n "env": [\n {\n "name": "LD_PRELOAD",\n "value": "/usr/lib64/libnss_wrapper.so"\n },\n {\n "name": "NSS_WRAPPER_PASSWD",\n "value": "/tmp/nss_wrapper/postgres/passwd"\n },\n {\n "name": "NSS_WRAPPER_GROUP",\n "value": "/tmp/nss_wrapper/postgres/group"\n }\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n "imagePullPolicy": "Always",\n "livenessProbe": {\n "exec": {\n "command": [\n "pgbackrest",\n "server-ping"\n ]\n },\n "failureThreshold": 3,\n "periodSeconds": 10,\n "successThreshold": 1,\n "timeoutSeconds": 1\n },\n "name": "pgbackrest",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/etc/pgbackrest/server",\n "name": "pgbackrest-server",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/etc/pgbackrest/conf.d",\n "name": "pgbackrest-config",\n "readOnly": true\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-ceu",\n "--",\n "monitor() {\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nuntil read -r -t 5 -u \\"${fd}\\"; do\\n if\\n [[ \\"${filename}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n pkill -HUP --exact --parent=0 pgbackrest\\n then\\n exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n stat --dereference --format=\'Loaded configuration dated %y\' \\"${filename}\\"\\n elif\\n { [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] ||\\n [[ \\"${authority}\\" -nt \\"/proc/self/fd/${fd}\\" ]]\\n } \\u0026\\u0026\\n pkill -HUP --exact --parent=0 pgbackrest\\n then\\n exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n fi\\ndone\\n}; export directory=\\"$1\\" authority=\\"$2\\" filename=\\"$3\\"; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n "pgbackrest-config",\n "/etc/pgbackrest/server",\n "/etc/pgbackrest/conf.d/~postgres-operator/tls-ca.crt",\n "/etc/pgbackrest/conf.d/~postgres-operator_server.conf"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n "imagePullPolicy": "Always",\n "name": "pgbackrest-config",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/etc/pgbackrest/server",\n "name": "pgbackrest-server",\n "readOnly": true\n },\n {\n "mountPath": "/etc/pgbackrest/conf.d",\n "name": "pgbackrest-config",\n "readOnly": true\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n }\n ],\n "dnsPolicy": "ClusterFirst",\n "enableServiceLinks": false,\n "initContainers": [\n {\n "command": [\n "/usr/local/bin/init-entrypoint.sh"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd",\n "imagePullPolicy": "Always",\n "name": "database-init",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-ceu",\n "--",\n "declare -r expected_major_version=\\"$1\\" pgwal_directory=\\"$2\\" pgbrLog_directory=\\"$3\\"\\npermissions() { while [[ -n \\"$1\\" ]]; do set \\"${1%/*}\\" \\"$@\\"; done; shift; stat -Lc \'%A %4u %4g %n\' \\"$@\\"; }\\nhalt() { local rc=$?; \\u003e\\u00262 echo \\"$@\\"; exit \\"${rc/#0/1}\\"; }\\nresults() { printf \'::postgres-operator: %s::%s\\\\n\' \\"$@\\"; }\\nrecreate() (\\n local tmp; tmp=$(mktemp -d -p \\"${1%/*}\\"); GLOBIGNORE=\'.:..\'; set -x\\n chmod \\"$2\\" \\"${tmp}\\"; mv \\"$1\\"/* \\"${tmp}\\"; rmdir \\"$1\\"; mv \\"${tmp}\\" \\"$1\\"\\n)\\nsafelink() (\\n local desired=\\"$1\\" name=\\"$2\\" current\\n current=$(realpath \\"${name}\\")\\n if [[ \\"${current}\\" == \\"${desired}\\" ]]; then return; fi\\n set -x; mv --no-target-directory \\"${current}\\" \\"${desired}\\"\\n ln --no-dereference --force --symbolic \\"${desired}\\" \\"${name}\\"\\n)\\necho Initializing ...\\nresults \'uid\' \\"$(id -u ||:)\\" \'gid\' \\"$(id -G ||:)\\"\\nif [[ \\"${pgwal_directory}\\" == *\\"pgwal/\\"* ]] \\u0026\\u0026 [[ ! -d \\"/pgwal/pgbackrest-spool\\" ]];then rm -rf \\"/pgdata/pgbackrest-spool\\" \\u0026\\u0026 mkdir -p \\"/pgwal/pgbackrest-spool\\" \\u0026\\u0026 ln --force --symbolic \\"/pgwal/pgbackrest-spool\\" \\"/pgdata/pgbackrest-spool\\";fi\\nif [[ ! -e \\"/pgdata/pgbackrest-spool\\" ]];then rm -rf /pgdata/pgbackrest-spool;fi\\nresults \'postgres path\' \\"$(command -v postgres ||:)\\"\\nresults \'postgres version\' \\"${postgres_version:=$(postgres --version ||:)}\\"\\n[[ \\"${postgres_version}\\" =~ \\") ${expected_major_version}\\"($|[^0-9]) ]] ||\\nhalt Expected PostgreSQL version \\"${expected_major_version}\\"\\nresults \'config directory\' \\"${PGDATA:?}\\"\\npostgres_data_directory=$([[ -d \\"${PGDATA}\\" ]] \\u0026\\u0026 postgres -C data_directory || echo \\"${PGDATA}\\")\\nresults \'data directory\' \\"${postgres_data_directory}\\"\\n[[ \\"${postgres_data_directory}\\" == \\"${PGDATA}\\" ]] ||\\nhalt Expected matching config and data directories\\nbootstrap_dir=\\"${postgres_data_directory}_bootstrap\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 results \'bootstrap directory\' \\"${bootstrap_dir}\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 postgres_data_directory=\\"${bootstrap_dir}\\"\\nif [[ ! -e \\"${postgres_data_directory}\\" || -O \\"${postgres_data_directory}\\" ]]; then\\ninstall --directory --mode=0700 \\"${postgres_data_directory}\\"\\nelif [[ -w \\"${postgres_data_directory}\\" \\u0026\\u0026 -g \\"${postgres_data_directory}\\" ]]; then\\nrecreate \\"${postgres_data_directory}\\" \'0700\'\\nelse (halt Permissions!); fi ||\\nhalt \\"$(permissions \\"${postgres_data_directory}\\" ||:)\\"\\nresults \'pgBackRest log directory\' \\"${pgbrLog_directory}\\"\\ninstall --directory --mode=0775 \\"${pgbrLog_directory}\\" ||\\nhalt \\"$(permissions \\"${pgbrLog_directory}\\" ||:)\\"\\ninstall -D --mode=0600 -t \\"/tmp/replication\\" \\"/pgconf/tls/replication\\"/{tls.crt,tls.key,ca.crt}\\n\\n[[ -f \\"${postgres_data_directory}/PG_VERSION\\" ]] || exit 0\\nresults \'data version\' \\"${postgres_data_version:=$(\\u003c \\"${postgres_data_directory}/PG_VERSION\\")}\\"\\n[[ \\"${postgres_data_version}\\" == \\"${expected_major_version}\\" ]] ||\\nhalt Expected PostgreSQL data version \\"${expected_major_version}\\"\\n[[ ! -f \\"${postgres_data_directory}/postgresql.conf\\" ]] \\u0026\\u0026\\ntouch \\"${postgres_data_directory}/postgresql.conf\\"\\nsafelink \\"${pgwal_directory}\\" \\"${postgres_data_directory}/pg_wal\\"\\nresults \'wal directory\' \\"$(realpath \\"${postgres_data_directory}/pg_wal\\" ||:)\\"\\nrm -f \\"${postgres_data_directory}/recovery.signal\\"",\n "startup",\n "18",\n "/pgdata/pg18_wal",\n "/pgdata/pgbackrest/log"\n ],\n "env": [\n {\n "name": "PGDATA",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PGHOST",\n "value": "/tmp/postgres"\n },\n {\n "name": "PGPORT",\n "value": "5432"\n },\n {\n "name": "KRB5_CONFIG",\n "value": "/etc/postgres/krb5.conf"\n },\n {\n "name": "KRB5RCACHEDIR",\n "value": "/tmp"\n },\n {\n "name": "LDAPTLS_CACERT",\n "value": "/etc/postgres/ldap/ca.crt"\n },\n {\n "name": "LC_ALL",\n "value": "en_US.utf-8"\n },\n {\n "name": "LANG",\n "value": "en_US.utf-8"\n }\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "postgres-startup",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgconf/tls",\n "name": "cert-volume",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-c",\n "mkdir -p /tmp/nss_wrapper \\u0026\\u0026 { [[ -f /tmp/nss_wrapper/libnss_wrapper.so ]] || cp /usr/lib64/libnss_wrapper.so /tmp/nss_wrapper/libnss_wrapper.so; }"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "nss-wrapper-init-logcollector",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "runAsGroup": 26,\n "runAsNonRoot": true,\n "runAsUser": 26,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-c",\n "export NSS_WRAPPER_SUBDIR=postgres CRUNCHY_NSS_USERNAME=postgres CRUNCHY_NSS_USER_DESC=\\"postgres\\" \\n# Define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper. The\\n# nss_wrapper_env.sh script (which also sets these vars) isn\'t sourced here since the nss_wrapper\\n# has not yet been setup, and we therefore don\'t yet want the nss_wrapper vars in the environment.\\nmkdir -p /tmp/nss_wrapper\\nchmod g+rwx /tmp/nss_wrapper\\n\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\n# create the nss_wrapper directory\\nmkdir -p \\"${NSS_WRAPPER_DIR}\\"\\n\\n# grab the current user ID and group ID\\nUSER_ID=$(id -u)\\nexport USER_ID\\nGROUP_ID=$(id -g)\\nexport GROUP_ID\\n\\n# get copies of the passwd and group files\\n[[ -f \\"${NSS_WRAPPER_PASSWD}\\" ]] || cp \\"/etc/passwd\\" \\"${NSS_WRAPPER_PASSWD}\\"\\n[[ -f \\"${NSS_WRAPPER_GROUP}\\" ]] || cp \\"/etc/group\\" \\"${NSS_WRAPPER_GROUP}\\"\\n\\n# if the username is missing from the passwd file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_PASSWD}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n echo \\"nss_wrapper: adding user\\"\\n passwd_tmp=\\"${NSS_WRAPPER_DIR}/passwd_tmp\\"\\n cp \\"${NSS_WRAPPER_PASSWD}\\" \\"${passwd_tmp}\\"\\n sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${passwd_tmp}\\"\\n # needed for OCP 4.x because crio updates /etc/passwd with an entry for USER_ID\\n sed -i \\"/${USER_ID}:x:/d\\" \\"${passwd_tmp}\\"\\n printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${GROUP_ID}:${CRUNCHY_NSS_USER_DESC}:${HOME}:/bin/bash\\\\n\' \\u003e\\u003e \\"${passwd_tmp}\\"\\n envsubst \\u003c \\"${passwd_tmp}\\" \\u003e \\"${NSS_WRAPPER_PASSWD}\\"\\n rm \\"${passwd_tmp}\\"\\nelse\\n echo \\"nss_wrapper: user exists\\"\\nfi\\n\\n# if the username (which will be the same as the group name) is missing from group file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_GROUP}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n echo \\"nss_wrapper: adding group\\"\\n group_tmp=\\"${NSS_WRAPPER_DIR}/group_tmp\\"\\n cp \\"${NSS_WRAPPER_GROUP}\\" \\"${group_tmp}\\"\\n sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${group_tmp}\\"\\n printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${CRUNCHY_NSS_USERNAME}\\\\n\' \\u003e\\u003e \\"${group_tmp}\\"\\n envsubst \\u003c \\"${group_tmp}\\" \\u003e \\"${NSS_WRAPPER_GROUP}\\"\\n rm \\"${group_tmp}\\"\\nelse\\n echo \\"nss_wrapper: group exists\\"\\nfi\\n\\n# export the nss_wrapper env vars\\n# define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\nexport LD_PRELOAD=/usr/lib64/libnss_wrapper.so\\nexport NSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_PASSWD}\\"\\nexport NSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_GROUP}\\"\\n\\necho \\"nss_wrapper: environment configured\\"\\n"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "nss-wrapper-init",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n }\n ],\n "restartPolicy": "Always",\n "schedulerName": "default-scheduler",\n "securityContext": {\n "fsGroup": 26,\n "fsGroupChangePolicy": "OnRootMismatch"\n },\n "serviceAccount": "cert-management-policy-instance",\n "serviceAccountName": "cert-management-policy-instance",\n "shareProcessNamespace": true,\n "terminationGracePeriodSeconds": 30,\n "topologySpreadConstraints": [\n {\n "labelSelector": {\n "matchExpressions": [\n {\n "key": "postgres-operator.crunchydata.com/data",\n "operator": "In",\n "values": [\n "postgres",\n "pgbackrest"\n ]\n }\n ],\n "matchLabels": {\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n }\n },\n "maxSkew": 1,\n "topologyKey": "kubernetes.io/hostname",\n "whenUnsatisfiable": "ScheduleAnyway"\n },\n {\n "labelSelector": {\n "matchExpressions": [\n {\n "key": "postgres-operator.crunchydata.com/data",\n "operator": "In",\n "values": [\n "postgres",\n "pgbackrest"\n ]\n }\n ],\n "matchLabels": {\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n }\n },\n "maxSkew": 1,\n "topologyKey": "topology.kubernetes.io/zone",\n "whenUnsatisfiable": "ScheduleAnyway"\n }\n ],\n "volumes": [\n {\n "name": "cert-volume",\n "projected": {\n "defaultMode": 384,\n "sources": [\n {\n "secret": {\n "items": [\n {\n "key": "tls.crt",\n "path": "tls.crt"\n },\n {\n "key": "tls.key",\n "path": "tls.key"\n },\n {\n "key": "ca.crt",\n "path": "ca.crt"\n }\n ],\n "name": "cert-management-policy-cluster-cert"\n }\n },\n {\n "secret": {\n "items": [\n {\n "key": "tls.crt",\n "path": "replication/tls.crt"\n },\n {\n "key": "tls.key",\n "path": "replication/tls.key"\n },\n {\n "key": "ca.crt",\n "path": "replication/ca.crt"\n }\n ],\n "name": "cert-management-policy-replication-cert"\n }\n }\n ]\n }\n },\n {\n "name": "postgres-data",\n "persistentVolumeClaim": {\n "claimName": "cert-management-policy-instance1-f59q-pgdata"\n }\n },\n {\n "downwardAPI": {\n "defaultMode": 420,\n "items": [\n {\n "path": "cpu_limit",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1m",\n "resource": "limits.cpu"\n }\n },\n {\n "path": "cpu_request",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1m",\n "resource": "requests.cpu"\n }\n },\n {\n "path": "mem_limit",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1Mi",\n "resource": "limits.memory"\n }\n },\n {\n "path": "mem_request",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1Mi",\n "resource": "requests.memory"\n }\n },\n {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.labels"\n },\n "path": "labels"\n },\n {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.annotations"\n },\n "path": "annotations"\n }\n ]\n },\n "name": "database-containerinfo"\n },\n {\n "name": "pgbackrest-server",\n "projected": {\n "defaultMode": 420,\n "sources": [\n {\n "secret": {\n "items": [\n {\n "key": "pgbackrest-server.crt",\n "path": "server-tls.crt"\n },\n {\n "key": "pgbackrest-server.key",\n "mode": 384,\n "path": "server-tls.key"\n }\n ],\n "name": "cert-management-policy-instance1-f59q-certs"\n }\n }\n ]\n }\n },\n {\n "name": "pgbackrest-config",\n "projected": {\n "defaultMode": 420,\n "sources": [\n {\n "configMap": {\n "items": [\n {\n "key": "pgbackrest_instance.conf",\n "path": "pgbackrest_instance.conf"\n },\n {\n "key": "config-hash",\n "path": "config-hash"\n },\n {\n "key": "pgbackrest-server.conf",\n "path": "~postgres-operator_server.conf"\n }\n ],\n "name": "cert-management-policy-pgbackrest-config"\n }\n },\n {\n "secret": {\n "items": [\n {\n "key": "pgbackrest.ca-roots",\n "path": "~postgres-operator/tls-ca.crt"\n },\n {\n "key": "pgbackrest-client.crt",\n "path": "~postgres-operator/client-tls.crt"\n },\n {\n "key": "pgbackrest-client.key",\n "mode": 384,\n "path": "~postgres-operator/client-tls.key"\n }\n ],\n "name": "cert-management-policy-pgbackrest"\n }\n }\n ]\n }\n },\n {\n "name": "patroni-config",\n "projected": {\n "defaultMode": 420,\n "sources": [\n {\n "configMap": {\n "items": [\n {\n "key": "patroni.yaml",\n "path": "~postgres-operator_cluster.yaml"\n }\n ],\n "name": "cert-management-policy-config"\n }\n },\n {\n "configMap": {\n "items": [\n {\n "key": "patroni.yaml",\n "path": "~postgres-operator_instance.yaml"\n }\n ],\n "name": "cert-management-policy-instance1-f59q-config"\n }\n },\n {\n "secret": {\n "items": [\n {\n "key": "patroni.ca-roots",\n "path": "~postgres-operator/patroni.ca-roots"\n },\n {\n "key": "patroni.crt-combined",\n "path": "~postgres-operator/patroni.crt+key"\n }\n ],\n "name": "cert-management-policy-instance1-f59q-certs"\n }\n }\n ]\n }\n },\n {\n "emptyDir": {},\n "name": "crunchy-bin"\n },\n {\n "emptyDir": {\n "sizeLimit": "2Gi"\n },\n "name": "tmp"\n },\n {\n "emptyDir": {\n "medium": "Memory"\n },\n "name": "dshm"\n }\n ]\n }\n },\n "updateStrategy": {\n "type": "OnDelete"\n }\n },\n "status": {\n "availableReplicas": 0,\n "collisionCount": 0,\n "currentReplicas": 1,\n "currentRevision": "cert-management-policy-instance1-f59q-57b74cc8d7",\n "observedGeneration": 1,\n "replicas": 1,\n "updateRevision": "cert-management-policy-instance1-f59q-57b74cc8d7",\n "updatedReplicas": 1\n }\n }\n ],\n "kind": "List",\n "metadata": {\n "resourceVersion": ""\n }\n}' logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | + jq -e '.items | length == 3' logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++ jq -r '.items[].metadata.name' logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++ sort logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | + instances=$'cert-management-policy-instance1-49wh\ncert-management-policy-instance1-67wh\ncert-management-policy-instance1-f59q' logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | + for instance in $instances logger.go:42: 20:32:19 | cert-management-policy/8-create-instance-certificate | ++ kubectl -n kuttl-test-stable-swift get statefulset cert-management-policy-instance1-49wh -o 'jsonpath={.spec.serviceName}' logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + instance_service=cert-management-policy-pods logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + instance_name=cert-management-policy-instance1-49wh-0.cert-management-policy-pods logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + instance_names=("${instance_name}.${NAMESPACE}.svc.cluster.local" "${instance_name}.${NAMESPACE}.svc" "${instance_name}.${NAMESPACE}" "$instance_name") logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + issue_certificate cert-management-policy-instance1-49wh cert-management-policy-instance1-49wh-0 serverAuth cert-management-policy-instance1-49wh-0.cert-management-policy-pods.kuttl-test-stable-swift.svc.cluster.local cert-management-policy-instance1-49wh-0.cert-management-policy-pods.kuttl-test-stable-swift.svc cert-management-policy-instance1-49wh-0.cert-management-policy-pods.kuttl-test-stable-swift cert-management-policy-instance1-49wh-0.cert-management-policy-pods logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + local name=cert-management-policy-instance1-49wh logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + local common_name=cert-management-policy-instance1-49wh-0 logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + local purpose=serverAuth logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + shift 3 logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + (( 39 > 64 )) logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + awk -v common_name=cert-management-policy-instance1-49wh-0 -v purpose=serverAuth $'\n\t\t{sub("", common_name); sub("", purpose); print}\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf/tls-certificate.conf logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + local index=1 logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + local dns_name logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@" logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 1 cert-management-policy-instance1-49wh-0.cert-management-policy-pods.kuttl-test-stable-swift.svc.cluster.local logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + index=2 logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@" logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 2 cert-management-policy-instance1-49wh-0.cert-management-policy-pods.kuttl-test-stable-swift.svc logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + index=3 logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@" logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 3 cert-management-policy-instance1-49wh-0.cert-management-policy-pods.kuttl-test-stable-swift logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + index=4 logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@" logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 4 cert-management-policy-instance1-49wh-0.cert-management-policy-pods logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + index=5 logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + openssl ecparam -name prime256v1 -genkey -noout -out /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-49wh.key logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + openssl req -new -key /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-49wh.key -out /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-49wh.csr -config /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-49wh.conf logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + openssl x509 -req -in /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-49wh.csr -CA /tmp/kuttl/pg/cert-management-policy/root-ca.crt -CAkey /tmp/kuttl/pg/cert-management-policy/root-ca.key -CAcreateserial -days 365 -sha384 -extensions extensions -extfile /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-49wh.conf -out /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-49wh.crt logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | Certificate request self-signature ok logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | subject=CN=cert-management-policy-instance1-49wh-0 logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + cp /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-49wh.key /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-49wh.patroni.crt-combined logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + cat /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-49wh.crt logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + kubectl -n kuttl-test-stable-swift create secret generic cert-management-policy-instance1-49wh-certs --from-file=dns.crt=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-49wh.crt --from-file=dns.key=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-49wh.key --from-file=patroni.ca-roots=/tmp/kuttl/pg/cert-management-policy/root-ca.crt --from-file=patroni.crt-combined=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-49wh.patroni.crt-combined --from-file=pgbackrest-server.crt=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-49wh.crt --from-file=pgbackrest-server.key=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-49wh.key --dry-run=client -o yaml logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + kubectl label --local -f - -o yaml postgres-operator.crunchydata.com/cluster=cert-management-policy postgres-operator.crunchydata.com/instance=cert-management-policy-instance1-49wh postgres-operator.crunchydata.com/instance-set=instance1 logger.go:42: 20:32:20 | cert-management-policy/8-create-instance-certificate | + kubectl -n kuttl-test-stable-swift apply -f - logger.go:42: 20:32:22 | cert-management-policy/8-create-instance-certificate | secret/cert-management-policy-instance1-49wh-certs created logger.go:42: 20:32:22 | cert-management-policy/8-create-instance-certificate | + secret=cert-management-policy-instance1-49wh-certs logger.go:42: 20:32:22 | cert-management-policy/8-create-instance-certificate | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-instance1-49wh-certs -o json logger.go:42: 20:32:22 | cert-management-policy/8-create-instance-certificate | ++ jq --compact-output --sort-keys .data logger.go:42: 20:32:22 | cert-management-policy/8-create-instance-certificate | ++ sha256sum logger.go:42: 20:32:22 | cert-management-policy/8-create-instance-certificate | ++ awk '{print $1}' logger.go:42: 20:32:23 | cert-management-policy/8-create-instance-certificate | + checksum=ebe89d1d123d6033b3c7f064d96818f918d9b77bf3551c9d593540f5cfebcda7 logger.go:42: 20:32:23 | cert-management-policy/8-create-instance-certificate | + kubectl -n kuttl-test-stable-swift annotate secret cert-management-policy-instance1-49wh-certs e2e.percona.com/secret-checksum=ebe89d1d123d6033b3c7f064d96818f918d9b77bf3551c9d593540f5cfebcda7 --overwrite logger.go:42: 20:32:23 | cert-management-policy/8-create-instance-certificate | secret/cert-management-policy-instance1-49wh-certs annotated logger.go:42: 20:32:23 | cert-management-policy/8-create-instance-certificate | + for instance in $instances logger.go:42: 20:32:23 | cert-management-policy/8-create-instance-certificate | ++ kubectl -n kuttl-test-stable-swift get statefulset cert-management-policy-instance1-67wh -o 'jsonpath={.spec.serviceName}' logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + instance_service=cert-management-policy-pods logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + instance_name=cert-management-policy-instance1-67wh-0.cert-management-policy-pods logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + instance_names=("${instance_name}.${NAMESPACE}.svc.cluster.local" "${instance_name}.${NAMESPACE}.svc" "${instance_name}.${NAMESPACE}" "$instance_name") logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + issue_certificate cert-management-policy-instance1-67wh cert-management-policy-instance1-67wh-0 serverAuth cert-management-policy-instance1-67wh-0.cert-management-policy-pods.kuttl-test-stable-swift.svc.cluster.local cert-management-policy-instance1-67wh-0.cert-management-policy-pods.kuttl-test-stable-swift.svc cert-management-policy-instance1-67wh-0.cert-management-policy-pods.kuttl-test-stable-swift cert-management-policy-instance1-67wh-0.cert-management-policy-pods logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + local name=cert-management-policy-instance1-67wh logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + local common_name=cert-management-policy-instance1-67wh-0 logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + local purpose=serverAuth logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + shift 3 logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + (( 39 > 64 )) logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + awk -v common_name=cert-management-policy-instance1-67wh-0 -v purpose=serverAuth $'\n\t\t{sub("", common_name); sub("", purpose); print}\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf/tls-certificate.conf logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + local index=1 logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + local dns_name logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@" logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 1 cert-management-policy-instance1-67wh-0.cert-management-policy-pods.kuttl-test-stable-swift.svc.cluster.local logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + index=2 logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@" logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 2 cert-management-policy-instance1-67wh-0.cert-management-policy-pods.kuttl-test-stable-swift.svc logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + index=3 logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@" logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 3 cert-management-policy-instance1-67wh-0.cert-management-policy-pods.kuttl-test-stable-swift logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + index=4 logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@" logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 4 cert-management-policy-instance1-67wh-0.cert-management-policy-pods logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + index=5 logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + openssl ecparam -name prime256v1 -genkey -noout -out /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-67wh.key logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + openssl req -new -key /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-67wh.key -out /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-67wh.csr -config /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-67wh.conf logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + openssl x509 -req -in /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-67wh.csr -CA /tmp/kuttl/pg/cert-management-policy/root-ca.crt -CAkey /tmp/kuttl/pg/cert-management-policy/root-ca.key -CAcreateserial -days 365 -sha384 -extensions extensions -extfile /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-67wh.conf -out /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-67wh.crt logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | Certificate request self-signature ok logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | subject=CN=cert-management-policy-instance1-67wh-0 logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + cp /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-67wh.key /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-67wh.patroni.crt-combined logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + cat /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-67wh.crt logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + kubectl -n kuttl-test-stable-swift create secret generic cert-management-policy-instance1-67wh-certs --from-file=dns.crt=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-67wh.crt --from-file=dns.key=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-67wh.key --from-file=patroni.ca-roots=/tmp/kuttl/pg/cert-management-policy/root-ca.crt --from-file=patroni.crt-combined=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-67wh.patroni.crt-combined --from-file=pgbackrest-server.crt=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-67wh.crt --from-file=pgbackrest-server.key=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-67wh.key --dry-run=client -o yaml logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + kubectl label --local -f - -o yaml postgres-operator.crunchydata.com/cluster=cert-management-policy postgres-operator.crunchydata.com/instance=cert-management-policy-instance1-67wh postgres-operator.crunchydata.com/instance-set=instance1 logger.go:42: 20:32:24 | cert-management-policy/8-create-instance-certificate | + kubectl -n kuttl-test-stable-swift apply -f - logger.go:42: 20:32:26 | cert-management-policy/8-create-instance-certificate | secret/cert-management-policy-instance1-67wh-certs created logger.go:42: 20:32:26 | cert-management-policy/8-create-instance-certificate | + secret=cert-management-policy-instance1-67wh-certs logger.go:42: 20:32:26 | cert-management-policy/8-create-instance-certificate | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-instance1-67wh-certs -o json logger.go:42: 20:32:26 | cert-management-policy/8-create-instance-certificate | ++ jq --compact-output --sort-keys .data logger.go:42: 20:32:26 | cert-management-policy/8-create-instance-certificate | ++ sha256sum logger.go:42: 20:32:26 | cert-management-policy/8-create-instance-certificate | ++ awk '{print $1}' logger.go:42: 20:32:26 | cert-management-policy/8-create-instance-certificate | + checksum=0990b7a1dee5a7b1384b103c399216749e4c5d537e9705c01ec6c55c0fd3bf38 logger.go:42: 20:32:26 | cert-management-policy/8-create-instance-certificate | + kubectl -n kuttl-test-stable-swift annotate secret cert-management-policy-instance1-67wh-certs e2e.percona.com/secret-checksum=0990b7a1dee5a7b1384b103c399216749e4c5d537e9705c01ec6c55c0fd3bf38 --overwrite logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | secret/cert-management-policy-instance1-67wh-certs annotated logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + for instance in $instances logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | ++ kubectl -n kuttl-test-stable-swift get statefulset cert-management-policy-instance1-f59q -o 'jsonpath={.spec.serviceName}' logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + instance_service=cert-management-policy-pods logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + instance_name=cert-management-policy-instance1-f59q-0.cert-management-policy-pods logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + instance_names=("${instance_name}.${NAMESPACE}.svc.cluster.local" "${instance_name}.${NAMESPACE}.svc" "${instance_name}.${NAMESPACE}" "$instance_name") logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + issue_certificate cert-management-policy-instance1-f59q cert-management-policy-instance1-f59q-0 serverAuth cert-management-policy-instance1-f59q-0.cert-management-policy-pods.kuttl-test-stable-swift.svc.cluster.local cert-management-policy-instance1-f59q-0.cert-management-policy-pods.kuttl-test-stable-swift.svc cert-management-policy-instance1-f59q-0.cert-management-policy-pods.kuttl-test-stable-swift cert-management-policy-instance1-f59q-0.cert-management-policy-pods logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + local name=cert-management-policy-instance1-f59q logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + local common_name=cert-management-policy-instance1-f59q-0 logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + local purpose=serverAuth logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + shift 3 logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + (( 39 > 64 )) logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + awk -v common_name=cert-management-policy-instance1-f59q-0 -v purpose=serverAuth $'\n\t\t{sub("", common_name); sub("", purpose); print}\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf/tls-certificate.conf logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + local index=1 logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + local dns_name logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@" logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 1 cert-management-policy-instance1-f59q-0.cert-management-policy-pods.kuttl-test-stable-swift.svc.cluster.local logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + index=2 logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@" logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 2 cert-management-policy-instance1-f59q-0.cert-management-policy-pods.kuttl-test-stable-swift.svc logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + index=3 logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@" logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 3 cert-management-policy-instance1-f59q-0.cert-management-policy-pods.kuttl-test-stable-swift logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + index=4 logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + for dns_name in "$@" logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + printf 'DNS.%d = %s\n' 4 cert-management-policy-instance1-f59q-0.cert-management-policy-pods logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + index=5 logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + openssl ecparam -name prime256v1 -genkey -noout -out /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-f59q.key logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + openssl req -new -key /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-f59q.key -out /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-f59q.csr -config /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-f59q.conf logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + openssl x509 -req -in /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-f59q.csr -CA /tmp/kuttl/pg/cert-management-policy/root-ca.crt -CAkey /tmp/kuttl/pg/cert-management-policy/root-ca.key -CAcreateserial -days 365 -sha384 -extensions extensions -extfile /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-f59q.conf -out /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-f59q.crt logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | Certificate request self-signature ok logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | subject=CN=cert-management-policy-instance1-f59q-0 logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + cp /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-f59q.key /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-f59q.patroni.crt-combined logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + cat /tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-f59q.crt logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + kubectl -n kuttl-test-stable-swift create secret generic cert-management-policy-instance1-f59q-certs --from-file=dns.crt=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-f59q.crt --from-file=dns.key=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-f59q.key --from-file=patroni.ca-roots=/tmp/kuttl/pg/cert-management-policy/root-ca.crt --from-file=patroni.crt-combined=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-f59q.patroni.crt-combined --from-file=pgbackrest-server.crt=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-f59q.crt --from-file=pgbackrest-server.key=/tmp/kuttl/pg/cert-management-policy/cert-management-policy-instance1-f59q.key --dry-run=client -o yaml logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + kubectl label --local -f - -o yaml postgres-operator.crunchydata.com/cluster=cert-management-policy postgres-operator.crunchydata.com/instance=cert-management-policy-instance1-f59q postgres-operator.crunchydata.com/instance-set=instance1 logger.go:42: 20:32:27 | cert-management-policy/8-create-instance-certificate | + kubectl -n kuttl-test-stable-swift apply -f - logger.go:42: 20:32:29 | cert-management-policy/8-create-instance-certificate | secret/cert-management-policy-instance1-f59q-certs created logger.go:42: 20:32:29 | cert-management-policy/8-create-instance-certificate | + secret=cert-management-policy-instance1-f59q-certs logger.go:42: 20:32:29 | cert-management-policy/8-create-instance-certificate | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-instance1-f59q-certs -o json logger.go:42: 20:32:29 | cert-management-policy/8-create-instance-certificate | ++ jq --compact-output --sort-keys .data logger.go:42: 20:32:29 | cert-management-policy/8-create-instance-certificate | ++ sha256sum logger.go:42: 20:32:29 | cert-management-policy/8-create-instance-certificate | ++ awk '{print $1}' logger.go:42: 20:32:30 | cert-management-policy/8-create-instance-certificate | + checksum=aa8f865e8aa399e649a0854e2a71411989bba8a1a0480c1aafbe162ace04f305 logger.go:42: 20:32:30 | cert-management-policy/8-create-instance-certificate | + kubectl -n kuttl-test-stable-swift annotate secret cert-management-policy-instance1-f59q-certs e2e.percona.com/secret-checksum=aa8f865e8aa399e649a0854e2a71411989bba8a1a0480c1aafbe162ace04f305 --overwrite logger.go:42: 20:32:30 | cert-management-policy/8-create-instance-certificate | secret/cert-management-policy-instance1-f59q-certs annotated logger.go:42: 20:32:30 | cert-management-policy/8-create-instance-certificate | test step completed 8-create-instance-certificate logger.go:42: 20:32:30 | cert-management-policy/9- | starting test step 9- logger.go:42: 20:32:32 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:32:32 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:32:33 | cert-management-policy/9- | + certificates= logger.go:42: 20:32:33 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:32:33 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:32:33 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:32:33 | cert-management-policy/9- | true logger.go:42: 20:32:35 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:32:35 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:32:36 | cert-management-policy/9- | + certificates= logger.go:42: 20:32:36 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:32:36 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:32:36 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:32:36 | cert-management-policy/9- | true logger.go:42: 20:32:39 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:32:39 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:32:40 | cert-management-policy/9- | + certificates= logger.go:42: 20:32:40 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:32:40 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:32:40 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:32:40 | cert-management-policy/9- | true logger.go:42: 20:32:42 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:32:42 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:32:43 | cert-management-policy/9- | + certificates= logger.go:42: 20:32:43 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:32:43 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:32:43 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:32:43 | cert-management-policy/9- | true logger.go:42: 20:32:45 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:32:45 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:32:46 | cert-management-policy/9- | + certificates= logger.go:42: 20:32:46 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:32:46 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:32:46 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:32:46 | cert-management-policy/9- | true logger.go:42: 20:32:48 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:32:48 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:32:49 | cert-management-policy/9- | + certificates= logger.go:42: 20:32:49 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:32:49 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:32:49 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:32:49 | cert-management-policy/9- | true logger.go:42: 20:32:51 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:32:51 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:32:52 | cert-management-policy/9- | + certificates= logger.go:42: 20:32:52 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:32:52 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:32:52 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:32:53 | cert-management-policy/9- | true logger.go:42: 20:32:55 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:32:55 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:32:55 | cert-management-policy/9- | + certificates= logger.go:42: 20:32:55 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:32:55 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:32:55 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:32:56 | cert-management-policy/9- | true logger.go:42: 20:32:58 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:32:58 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:32:58 | cert-management-policy/9- | + certificates= logger.go:42: 20:32:58 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:32:58 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:32:58 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:32:59 | cert-management-policy/9- | true logger.go:42: 20:33:01 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:33:01 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:33:01 | cert-management-policy/9- | + certificates= logger.go:42: 20:33:01 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:33:01 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:33:01 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:33:02 | cert-management-policy/9- | true logger.go:42: 20:33:04 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:33:04 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:33:04 | cert-management-policy/9- | + certificates= logger.go:42: 20:33:04 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:33:04 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:33:04 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:33:05 | cert-management-policy/9- | true logger.go:42: 20:33:07 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:33:07 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:33:07 | cert-management-policy/9- | + certificates= logger.go:42: 20:33:07 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:33:07 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:33:07 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:33:08 | cert-management-policy/9- | true logger.go:42: 20:33:10 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:33:10 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:33:11 | cert-management-policy/9- | + certificates= logger.go:42: 20:33:11 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:33:11 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:33:11 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:33:11 | cert-management-policy/9- | true logger.go:42: 20:33:13 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:33:13 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:33:14 | cert-management-policy/9- | + certificates= logger.go:42: 20:33:14 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:33:14 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:33:14 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:33:14 | cert-management-policy/9- | true logger.go:42: 20:33:16 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:33:16 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:33:17 | cert-management-policy/9- | + certificates= logger.go:42: 20:33:17 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:33:17 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:33:17 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:33:17 | cert-management-policy/9- | true logger.go:42: 20:33:20 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:33:20 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:33:20 | cert-management-policy/9- | + certificates= logger.go:42: 20:33:20 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:33:20 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:33:20 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:33:21 | cert-management-policy/9- | true logger.go:42: 20:33:23 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:33:23 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:33:23 | cert-management-policy/9- | + certificates= logger.go:42: 20:33:23 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:33:23 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:33:23 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:33:24 | cert-management-policy/9- | true logger.go:42: 20:33:26 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:33:26 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:33:27 | cert-management-policy/9- | + certificates= logger.go:42: 20:33:27 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:33:27 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:33:27 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:33:27 | cert-management-policy/9- | true logger.go:42: 20:33:29 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:33:29 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:33:30 | cert-management-policy/9- | + certificates= logger.go:42: 20:33:30 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:33:30 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:33:30 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:33:30 | cert-management-policy/9- | true logger.go:42: 20:33:32 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:33:32 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:33:33 | cert-management-policy/9- | + certificates= logger.go:42: 20:33:33 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:33:33 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:33:33 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:33:33 | cert-management-policy/9- | true logger.go:42: 20:33:35 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:33:35 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:33:36 | cert-management-policy/9- | + certificates= logger.go:42: 20:33:36 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:33:36 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:33:36 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:33:36 | cert-management-policy/9- | true logger.go:42: 20:33:38 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:33:38 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:33:39 | cert-management-policy/9- | + certificates= logger.go:42: 20:33:39 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:33:39 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:33:39 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:33:39 | cert-management-policy/9- | true logger.go:42: 20:33:41 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:33:41 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:33:42 | cert-management-policy/9- | + certificates= logger.go:42: 20:33:42 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:33:42 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:33:42 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:33:42 | cert-management-policy/9- | true logger.go:42: 20:33:44 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:33:44 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:33:45 | cert-management-policy/9- | + certificates= logger.go:42: 20:33:45 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:33:45 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:33:45 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:33:45 | cert-management-policy/9- | true logger.go:42: 20:33:47 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:33:47 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:33:48 | cert-management-policy/9- | + certificates= logger.go:42: 20:33:48 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:33:48 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:33:48 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:33:48 | cert-management-policy/9- | true logger.go:42: 20:33:50 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:33:50 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:33:51 | cert-management-policy/9- | + certificates= logger.go:42: 20:33:51 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:33:51 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:33:51 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:33:51 | cert-management-policy/9- | true logger.go:42: 20:33:54 | cert-management-policy/9- | running command: [sh -c set -o errexit set -o xtrace certificates=$(kubectl -n "$NAMESPACE" get certificate -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in userProvidedOnly mode: $certificates" >&2 exit 1 fi kubectl -n "$NAMESPACE" get secret cert-management-policy-pgbouncer -o json \ | jq -e ' .data."pgbouncer-password" != null and .data."pgbouncer-verifier" != null and .data."pgbouncer-admin-password" != null and .data."pgbouncer-users.txt" != null '] logger.go:42: 20:33:54 | cert-management-policy/9- | ++ kubectl -n kuttl-test-stable-swift get certificate -o name logger.go:42: 20:33:54 | cert-management-policy/9- | + certificates= logger.go:42: 20:33:54 | cert-management-policy/9- | + [[ -n '' ]] logger.go:42: 20:33:54 | cert-management-policy/9- | + kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:33:54 | cert-management-policy/9- | + jq -e $'\n .data."pgbouncer-password" != null and\n .data."pgbouncer-verifier" != null and\n .data."pgbouncer-admin-password" != null and\n .data."pgbouncer-users.txt" != null\n ' logger.go:42: 20:33:55 | cert-management-policy/9- | true logger.go:42: 20:33:55 | cert-management-policy/9- | test step completed 9- logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | starting test step 10-verify-served-certificates logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | running command: [sh -c set -o errexit set -o pipefail set -o xtrace source ../../functions cluster="cert-management-policy" primary=$(kubectl -n "$NAMESPACE" get pod \ -l postgres-operator.crunchydata.com/cluster="$cluster",postgres-operator.crunchydata.com/role=primary \ -o jsonpath='{.items[0].metadata.name}') [[ -n "$primary" ]] postgres_secret_fingerprint=$(kubectl -n "$NAMESPACE" get secret \ "${cluster}-cluster-cert" -o jsonpath='{.data.tls\.crt}' \ | base64 -d \ | openssl x509 -noout -fingerprint -sha256 \ | sed 's/.*=//' \ | tr -d ':[:space:]') postgres_served_fingerprint=$(kubectl -n "$NAMESPACE" exec "$primary" -c database -- \ bash -c "timeout 20 openssl s_client -connect ${cluster}-primary:5432 -starttls postgres /dev/null | openssl x509 -noout -fingerprint -sha256 | sed 's/.*=//'" \ | tr -d ':[:space:]') if [[ "$postgres_served_fingerprint" != "$postgres_secret_fingerprint" ]]; then echo "PostgreSQL is not serving the user-provided certificate" >&2 echo "Secret: $postgres_secret_fingerprint" >&2 echo "Served: $postgres_served_fingerprint" >&2 exit 1 fi pgbouncer_secret_fingerprint=$(kubectl -n "$NAMESPACE" get secret \ "${cluster}-pgbouncer" -o jsonpath='{.data.pgbouncer-frontend\.crt}' \ | base64 -d \ | openssl x509 -noout -fingerprint -sha256 \ | sed 's/.*=//' \ | tr -d ':[:space:]') pgbouncer_served_fingerprint=$(kubectl -n "$NAMESPACE" exec "$primary" -c database -- \ bash -c "timeout 20 openssl s_client -connect ${cluster}-pgbouncer:5432 -starttls postgres /dev/null | openssl x509 -noout -fingerprint -sha256 | sed 's/.*=//'" \ | tr -d ':[:space:]') if [[ "$pgbouncer_served_fingerprint" != "$pgbouncer_secret_fingerprint" ]]; then echo "PgBouncer is not serving the user-provided frontend certificate" >&2 echo "Secret: $pgbouncer_secret_fingerprint" >&2 echo "Served: $pgbouncer_served_fingerprint" >&2 exit 1 fi replication_connections=$(kubectl -n "$NAMESPACE" exec "$primary" -c database -- \ psql -d postgres -Atqc \ "SELECT count(*) FROM pg_stat_ssl s JOIN pg_stat_replication r ON s.pid = r.pid WHERE s.ssl = true AND s.client_dn LIKE '%CN=_crunchyrepl%';") replication_connections=$(tr -d '[:space:]' <<<"$replication_connections") if [[ "$replication_connections" != "2" ]]; then echo "Expected two SSL replication connections using the user-provided _crunchyrepl identity, got: $replication_connections" >&2 exit 1 fi] logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | + source ../../functions logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ realpath ../../.. logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | ++ CERT_MANAGER_VER=1.20.2 logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | ++ CHAOS_MESH_VER=2.5.1 logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | ++ BUSYBOX_VER=1.36 logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | ++++ pwd logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | ++ test_name=cert-management-policy logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/vars.sh logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | ++++ git rev-parse --abbrev-ref HEAD logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ export GIT_BRANCH=PR-1812 logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ GIT_BRANCH=PR-1812 logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ export VERSION=PR-1812-09e4007fd logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ VERSION=PR-1812-09e4007fd logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ export SKIP_TEST_WARNINGS=true logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ SKIP_TEST_WARNINGS=true logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ export K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ export K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ export K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ export K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | +++ [[ -z '' ]] logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | ++++ detect_k8s_platform logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | ++++ local detected_platform logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | ++++ local xtrace_enabled=false logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | ++++ [[ -o xtrace ]] logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | ++++ xtrace_enabled=true logger.go:42: 20:33:55 | cert-management-policy/10-verify-served-certificates | ++++ set +o xtrace logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ PLATFORM=gke logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export PLATFORM logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ ! -n '' ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ -n '' ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export PG_VER=18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ PG_VER=18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export PG_DISTRIBUTION= logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ PG_DISTRIBUTION= logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ '' == community ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export BUCKET=pg-operator-testing logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ BUCKET=pg-operator-testing logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export PGOV1_TAG=1.4.0 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ PGOV1_TAG=1.4.0 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export PGOV1_VER=14 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ PGOV1_VER=14 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export CPGO_VERSION=5.8.7 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ CPGO_VERSION=5.8.7 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export MINIO_VER=5.4.0 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ MINIO_VER=5.4.0 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export VAULT_VER=0.32.0 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ VAULT_VER=0.32.0 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export REGISTRY_NAME=docker.io logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ REGISTRY_NAME=docker.io logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | ++++ printenv logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | ++++ grep -E '^IMAGE' logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | ++++ awk -F= '{print $1}' logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | ++++ eval 'echo $IMAGE_BACKREST' logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | ++++ eval 'echo $IMAGE' logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ var_value=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == docker.io/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == percona/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == perconalab/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | ++++ eval 'echo $IMAGE_UPGRADE' logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++++ echo perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | ++++ eval 'echo $IMAGE_LOGCOLLECTOR' logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++++ echo perconalab/fluentbit:main-logcollector logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ var_value=perconalab/fluentbit:main-logcollector logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | ++++ eval 'echo $IMAGE_BASE' logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++++ echo perconalab/percona-postgresql-operator logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ var_value=perconalab/percona-postgresql-operator logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator == percona/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | ++++ eval 'echo $IMAGE_PGBOUNCER' logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | ++++ eval 'echo $IMAGE_POSTGRESQL' logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | ++++ eval 'echo $IMAGE_PMM_SERVER' logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++++ echo perconalab/pmm-server:3-dev-latest logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ var_value=perconalab/pmm-server:3-dev-latest logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | ++++ eval 'echo $IMAGE_PMM_CLIENT' logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++++ echo perconalab/pmm-client:3-dev-latest logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ var_value=perconalab/pmm-client:3-dev-latest logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]] logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | ++++ which gdate logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | ++++ which date logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ date=/usr/sbin/date logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | ++++ which gsed logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | ++++ which sed logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | +++ sed=/usr/sbin/sed logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | + cluster=cert-management-policy logger.go:42: 20:33:58 | cert-management-policy/10-verify-served-certificates | ++ kubectl -n kuttl-test-stable-swift get pod -l postgres-operator.crunchydata.com/cluster=cert-management-policy,postgres-operator.crunchydata.com/role=primary -o 'jsonpath={.items[0].metadata.name}' logger.go:42: 20:33:59 | cert-management-policy/10-verify-served-certificates | + primary=cert-management-policy-instance1-49wh-0 logger.go:42: 20:33:59 | cert-management-policy/10-verify-served-certificates | + [[ -n cert-management-policy-instance1-49wh-0 ]] logger.go:42: 20:33:59 | cert-management-policy/10-verify-served-certificates | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-cluster-cert -o 'jsonpath={.data.tls\.crt}' logger.go:42: 20:33:59 | cert-management-policy/10-verify-served-certificates | ++ base64 -d logger.go:42: 20:33:59 | cert-management-policy/10-verify-served-certificates | ++ openssl x509 -noout -fingerprint -sha256 logger.go:42: 20:33:59 | cert-management-policy/10-verify-served-certificates | ++ sed 's/.*=//' logger.go:42: 20:33:59 | cert-management-policy/10-verify-served-certificates | ++ tr -d ':[:space:]' logger.go:42: 20:33:59 | cert-management-policy/10-verify-served-certificates | + postgres_secret_fingerprint=B824E402C39AC6D846E72CBC3C88914B1CB83A2D095A82128A164D350308597F logger.go:42: 20:33:59 | cert-management-policy/10-verify-served-certificates | ++ kubectl -n kuttl-test-stable-swift exec cert-management-policy-instance1-49wh-0 -c database -- bash -c 'timeout 20 openssl s_client -connect cert-management-policy-primary:5432 -starttls postgres /dev/null | openssl x509 -noout -fingerprint -sha256 | sed '\''s/.*=//'\''' logger.go:42: 20:33:59 | cert-management-policy/10-verify-served-certificates | ++ tr -d ':[:space:]' logger.go:42: 20:34:00 | cert-management-policy/10-verify-served-certificates | + postgres_served_fingerprint=B824E402C39AC6D846E72CBC3C88914B1CB83A2D095A82128A164D350308597F logger.go:42: 20:34:00 | cert-management-policy/10-verify-served-certificates | + [[ B824E402C39AC6D846E72CBC3C88914B1CB83A2D095A82128A164D350308597F != B824E402C39AC6D846E72CBC3C88914B1CB83A2D095A82128A164D350308597F ]] logger.go:42: 20:34:00 | cert-management-policy/10-verify-served-certificates | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o 'jsonpath={.data.pgbouncer-frontend\.crt}' logger.go:42: 20:34:00 | cert-management-policy/10-verify-served-certificates | ++ base64 -d logger.go:42: 20:34:00 | cert-management-policy/10-verify-served-certificates | ++ openssl x509 -noout -fingerprint -sha256 logger.go:42: 20:34:00 | cert-management-policy/10-verify-served-certificates | ++ sed 's/.*=//' logger.go:42: 20:34:00 | cert-management-policy/10-verify-served-certificates | ++ tr -d ':[:space:]' logger.go:42: 20:34:01 | cert-management-policy/10-verify-served-certificates | + pgbouncer_secret_fingerprint=109601805F4ADCCC94D1D239AB8BB46DBB4D6E9A7D9F5BEE30E9A77748C2DD87 logger.go:42: 20:34:01 | cert-management-policy/10-verify-served-certificates | ++ kubectl -n kuttl-test-stable-swift exec cert-management-policy-instance1-49wh-0 -c database -- bash -c 'timeout 20 openssl s_client -connect cert-management-policy-pgbouncer:5432 -starttls postgres /dev/null | openssl x509 -noout -fingerprint -sha256 | sed '\''s/.*=//'\''' logger.go:42: 20:34:01 | cert-management-policy/10-verify-served-certificates | ++ tr -d ':[:space:]' logger.go:42: 20:34:02 | cert-management-policy/10-verify-served-certificates | + pgbouncer_served_fingerprint=109601805F4ADCCC94D1D239AB8BB46DBB4D6E9A7D9F5BEE30E9A77748C2DD87 logger.go:42: 20:34:02 | cert-management-policy/10-verify-served-certificates | + [[ 109601805F4ADCCC94D1D239AB8BB46DBB4D6E9A7D9F5BEE30E9A77748C2DD87 != 109601805F4ADCCC94D1D239AB8BB46DBB4D6E9A7D9F5BEE30E9A77748C2DD87 ]] logger.go:42: 20:34:02 | cert-management-policy/10-verify-served-certificates | ++ kubectl -n kuttl-test-stable-swift exec cert-management-policy-instance1-49wh-0 -c database -- psql -d postgres -Atqc 'SELECT count(*) FROM pg_stat_ssl s JOIN pg_stat_replication r ON s.pid = r.pid WHERE s.ssl = true AND s.client_dn LIKE '\''%CN=_crunchyrepl%'\'';' logger.go:42: 20:34:03 | cert-management-policy/10-verify-served-certificates | + replication_connections=2 logger.go:42: 20:34:03 | cert-management-policy/10-verify-served-certificates | ++ tr -d '[:space:]' logger.go:42: 20:34:03 | cert-management-policy/10-verify-served-certificates | + replication_connections=2 logger.go:42: 20:34:03 | cert-management-policy/10-verify-served-certificates | + [[ 2 != 2 ]] logger.go:42: 20:34:03 | cert-management-policy/10-verify-served-certificates | test step completed 10-verify-served-certificates logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | starting test step 11-verify-secrets-unchanged logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | running command: [sh -c set -o errexit set -o pipefail set -o xtrace source ../../functions cluster="cert-management-policy" assert_secret_unchanged() { local secret="$1" local filter="${2:-.data}" local expected local actual expected=$(kubectl -n "$NAMESPACE" get secret "$secret" \ -o jsonpath='{.metadata.annotations.e2e\.percona\.com/secret-checksum}') actual=$(kubectl -n "$NAMESPACE" get secret "$secret" -o json \ | jq --compact-output --sort-keys "$filter" \ | sha256sum | awk '{print $1}') if [[ -z "$expected" || "$actual" != "$expected" ]]; then echo "User-provided Secret changed: $secret" >&2 echo "Expected checksum: ${expected:-missing}" >&2 echo "Actual checksum: $actual" >&2 return 1 fi } assert_secret_unchanged "${cluster}-cluster-ca-cert" assert_secret_unchanged "${cluster}-cluster-cert" assert_secret_unchanged "${cluster}-replication-cert" assert_secret_unchanged "${cluster}-pgbackrest" assert_secret_unchanged "${cluster}-pgbouncer" \ '.data | with_entries(select(.key | startswith("pgbouncer-frontend.")))' statefulsets=$(kubectl -n "$NAMESPACE" get statefulset \ -l postgres-operator.crunchydata.com/cluster="$cluster",postgres-operator.crunchydata.com/data=postgres \ -o json) jq -e '.items | length == 3' <<<"$statefulsets" >/dev/null instances=$(jq -r '.items[].metadata.name' <<<"$statefulsets" | sort) for instance in $instances; do assert_secret_unchanged "${instance}-certs" done] logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | + source ../../functions logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ realpath ../../.. logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | ++ CERT_MANAGER_VER=1.20.2 logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | ++ CHAOS_MESH_VER=2.5.1 logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | ++ BUSYBOX_VER=1.36 logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | ++++ pwd logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | ++ test_name=cert-management-policy logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/vars.sh logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | ++++ git rev-parse --abbrev-ref HEAD logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ export GIT_BRANCH=PR-1812 logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ GIT_BRANCH=PR-1812 logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ export VERSION=PR-1812-09e4007fd logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ VERSION=PR-1812-09e4007fd logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ export SKIP_TEST_WARNINGS=true logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ SKIP_TEST_WARNINGS=true logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ export K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ export K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ export K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ export K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ -z '' ]] logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | ++++ detect_k8s_platform logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | ++++ local detected_platform logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | ++++ local xtrace_enabled=false logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | ++++ [[ -o xtrace ]] logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | ++++ xtrace_enabled=true logger.go:42: 20:34:03 | cert-management-policy/11-verify-secrets-unchanged | ++++ set +o xtrace logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ PLATFORM=gke logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export PLATFORM logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ ! -n '' ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ -n '' ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export PG_VER=18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ PG_VER=18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export PG_DISTRIBUTION= logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ PG_DISTRIBUTION= logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ '' == community ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export BUCKET=pg-operator-testing logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ BUCKET=pg-operator-testing logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export PGOV1_TAG=1.4.0 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ PGOV1_TAG=1.4.0 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export PGOV1_VER=14 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ PGOV1_VER=14 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export CPGO_VERSION=5.8.7 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ CPGO_VERSION=5.8.7 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export MINIO_VER=5.4.0 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ MINIO_VER=5.4.0 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export VAULT_VER=0.32.0 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ VAULT_VER=0.32.0 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export REGISTRY_NAME=docker.io logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ REGISTRY_NAME=docker.io logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | ++++ printenv logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | ++++ grep -E '^IMAGE' logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | ++++ awk -F= '{print $1}' logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | ++++ eval 'echo $IMAGE_BACKREST' logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | ++++ eval 'echo $IMAGE' logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ var_value=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == docker.io/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == percona/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == perconalab/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | ++++ eval 'echo $IMAGE_UPGRADE' logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++++ echo perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | ++++ eval 'echo $IMAGE_LOGCOLLECTOR' logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++++ echo perconalab/fluentbit:main-logcollector logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ var_value=perconalab/fluentbit:main-logcollector logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | ++++ eval 'echo $IMAGE_BASE' logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++++ echo perconalab/percona-postgresql-operator logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ var_value=perconalab/percona-postgresql-operator logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator == percona/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ new_value=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | ++++ eval 'echo $IMAGE_PGBOUNCER' logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | ++++ eval 'echo $IMAGE_POSTGRESQL' logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | ++++ eval 'echo $IMAGE_PMM_SERVER' logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++++ echo perconalab/pmm-server:3-dev-latest logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ var_value=perconalab/pmm-server:3-dev-latest logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | ++++ eval 'echo $IMAGE_PMM_CLIENT' logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++++ echo perconalab/pmm-client:3-dev-latest logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ var_value=perconalab/pmm-client:3-dev-latest logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]] logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | ++++ which gdate logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | ++++ which date logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ date=/usr/sbin/date logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | ++++ which gsed logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | ++++ which sed logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | +++ sed=/usr/sbin/sed logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | + cluster=cert-management-policy logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | + assert_secret_unchanged cert-management-policy-cluster-ca-cert logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | + local secret=cert-management-policy-cluster-ca-cert logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | + local filter=.data logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | + local expected logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | + local actual logger.go:42: 20:34:05 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-cluster-ca-cert -o 'jsonpath={.metadata.annotations.e2e\.percona\.com/secret-checksum}' logger.go:42: 20:34:06 | cert-management-policy/11-verify-secrets-unchanged | + expected=1ffb8b858223a4320c152bce415becd3b2bbba978b14834e895f2e09f2f77b95 logger.go:42: 20:34:06 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-cluster-ca-cert -o json logger.go:42: 20:34:06 | cert-management-policy/11-verify-secrets-unchanged | ++ jq --compact-output --sort-keys .data logger.go:42: 20:34:06 | cert-management-policy/11-verify-secrets-unchanged | ++ sha256sum logger.go:42: 20:34:06 | cert-management-policy/11-verify-secrets-unchanged | ++ awk '{print $1}' logger.go:42: 20:34:06 | cert-management-policy/11-verify-secrets-unchanged | + actual=1ffb8b858223a4320c152bce415becd3b2bbba978b14834e895f2e09f2f77b95 logger.go:42: 20:34:06 | cert-management-policy/11-verify-secrets-unchanged | + [[ -z 1ffb8b858223a4320c152bce415becd3b2bbba978b14834e895f2e09f2f77b95 ]] logger.go:42: 20:34:06 | cert-management-policy/11-verify-secrets-unchanged | + [[ 1ffb8b858223a4320c152bce415becd3b2bbba978b14834e895f2e09f2f77b95 != 1ffb8b858223a4320c152bce415becd3b2bbba978b14834e895f2e09f2f77b95 ]] logger.go:42: 20:34:06 | cert-management-policy/11-verify-secrets-unchanged | + assert_secret_unchanged cert-management-policy-cluster-cert logger.go:42: 20:34:06 | cert-management-policy/11-verify-secrets-unchanged | + local secret=cert-management-policy-cluster-cert logger.go:42: 20:34:06 | cert-management-policy/11-verify-secrets-unchanged | + local filter=.data logger.go:42: 20:34:06 | cert-management-policy/11-verify-secrets-unchanged | + local expected logger.go:42: 20:34:06 | cert-management-policy/11-verify-secrets-unchanged | + local actual logger.go:42: 20:34:06 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-cluster-cert -o 'jsonpath={.metadata.annotations.e2e\.percona\.com/secret-checksum}' logger.go:42: 20:34:07 | cert-management-policy/11-verify-secrets-unchanged | + expected=57ec3a55e331a71f61849bac162722898de8c37ed1009d8e2ec607536b5827c6 logger.go:42: 20:34:07 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-cluster-cert -o json logger.go:42: 20:34:07 | cert-management-policy/11-verify-secrets-unchanged | ++ sha256sum logger.go:42: 20:34:07 | cert-management-policy/11-verify-secrets-unchanged | ++ jq --compact-output --sort-keys .data logger.go:42: 20:34:07 | cert-management-policy/11-verify-secrets-unchanged | ++ awk '{print $1}' logger.go:42: 20:34:07 | cert-management-policy/11-verify-secrets-unchanged | + actual=57ec3a55e331a71f61849bac162722898de8c37ed1009d8e2ec607536b5827c6 logger.go:42: 20:34:07 | cert-management-policy/11-verify-secrets-unchanged | + [[ -z 57ec3a55e331a71f61849bac162722898de8c37ed1009d8e2ec607536b5827c6 ]] logger.go:42: 20:34:07 | cert-management-policy/11-verify-secrets-unchanged | + [[ 57ec3a55e331a71f61849bac162722898de8c37ed1009d8e2ec607536b5827c6 != 57ec3a55e331a71f61849bac162722898de8c37ed1009d8e2ec607536b5827c6 ]] logger.go:42: 20:34:07 | cert-management-policy/11-verify-secrets-unchanged | + assert_secret_unchanged cert-management-policy-replication-cert logger.go:42: 20:34:07 | cert-management-policy/11-verify-secrets-unchanged | + local secret=cert-management-policy-replication-cert logger.go:42: 20:34:07 | cert-management-policy/11-verify-secrets-unchanged | + local filter=.data logger.go:42: 20:34:07 | cert-management-policy/11-verify-secrets-unchanged | + local expected logger.go:42: 20:34:07 | cert-management-policy/11-verify-secrets-unchanged | + local actual logger.go:42: 20:34:07 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-replication-cert -o 'jsonpath={.metadata.annotations.e2e\.percona\.com/secret-checksum}' logger.go:42: 20:34:08 | cert-management-policy/11-verify-secrets-unchanged | + expected=d6186cd4b3d58383263d9c432927693ff36fe1c3895212534d69c99b2886d50b logger.go:42: 20:34:08 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-replication-cert -o json logger.go:42: 20:34:08 | cert-management-policy/11-verify-secrets-unchanged | ++ jq --compact-output --sort-keys .data logger.go:42: 20:34:08 | cert-management-policy/11-verify-secrets-unchanged | ++ sha256sum logger.go:42: 20:34:08 | cert-management-policy/11-verify-secrets-unchanged | ++ awk '{print $1}' logger.go:42: 20:34:08 | cert-management-policy/11-verify-secrets-unchanged | + actual=d6186cd4b3d58383263d9c432927693ff36fe1c3895212534d69c99b2886d50b logger.go:42: 20:34:08 | cert-management-policy/11-verify-secrets-unchanged | + [[ -z d6186cd4b3d58383263d9c432927693ff36fe1c3895212534d69c99b2886d50b ]] logger.go:42: 20:34:08 | cert-management-policy/11-verify-secrets-unchanged | + [[ d6186cd4b3d58383263d9c432927693ff36fe1c3895212534d69c99b2886d50b != d6186cd4b3d58383263d9c432927693ff36fe1c3895212534d69c99b2886d50b ]] logger.go:42: 20:34:08 | cert-management-policy/11-verify-secrets-unchanged | + assert_secret_unchanged cert-management-policy-pgbackrest logger.go:42: 20:34:08 | cert-management-policy/11-verify-secrets-unchanged | + local secret=cert-management-policy-pgbackrest logger.go:42: 20:34:08 | cert-management-policy/11-verify-secrets-unchanged | + local filter=.data logger.go:42: 20:34:08 | cert-management-policy/11-verify-secrets-unchanged | + local expected logger.go:42: 20:34:08 | cert-management-policy/11-verify-secrets-unchanged | + local actual logger.go:42: 20:34:08 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbackrest -o 'jsonpath={.metadata.annotations.e2e\.percona\.com/secret-checksum}' logger.go:42: 20:34:09 | cert-management-policy/11-verify-secrets-unchanged | + expected=312802d9d7d525adfa67fa843378d1d74eccda12fc353a4c9f4af89269c56716 logger.go:42: 20:34:09 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbackrest -o json logger.go:42: 20:34:09 | cert-management-policy/11-verify-secrets-unchanged | ++ jq --compact-output --sort-keys .data logger.go:42: 20:34:09 | cert-management-policy/11-verify-secrets-unchanged | ++ sha256sum logger.go:42: 20:34:09 | cert-management-policy/11-verify-secrets-unchanged | ++ awk '{print $1}' logger.go:42: 20:34:09 | cert-management-policy/11-verify-secrets-unchanged | + actual=312802d9d7d525adfa67fa843378d1d74eccda12fc353a4c9f4af89269c56716 logger.go:42: 20:34:09 | cert-management-policy/11-verify-secrets-unchanged | + [[ -z 312802d9d7d525adfa67fa843378d1d74eccda12fc353a4c9f4af89269c56716 ]] logger.go:42: 20:34:09 | cert-management-policy/11-verify-secrets-unchanged | + [[ 312802d9d7d525adfa67fa843378d1d74eccda12fc353a4c9f4af89269c56716 != 312802d9d7d525adfa67fa843378d1d74eccda12fc353a4c9f4af89269c56716 ]] logger.go:42: 20:34:09 | cert-management-policy/11-verify-secrets-unchanged | + assert_secret_unchanged cert-management-policy-pgbouncer '.data | with_entries(select(.key | startswith("pgbouncer-frontend.")))' logger.go:42: 20:34:09 | cert-management-policy/11-verify-secrets-unchanged | + local secret=cert-management-policy-pgbouncer logger.go:42: 20:34:09 | cert-management-policy/11-verify-secrets-unchanged | + local 'filter=.data | with_entries(select(.key | startswith("pgbouncer-frontend.")))' logger.go:42: 20:34:09 | cert-management-policy/11-verify-secrets-unchanged | + local expected logger.go:42: 20:34:09 | cert-management-policy/11-verify-secrets-unchanged | + local actual logger.go:42: 20:34:09 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o 'jsonpath={.metadata.annotations.e2e\.percona\.com/secret-checksum}' logger.go:42: 20:34:10 | cert-management-policy/11-verify-secrets-unchanged | + expected=6e43dbdb62d79b05bac8ef2ed4e0bf843676838aef1cfef2900b504b2c7824a0 logger.go:42: 20:34:10 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o json logger.go:42: 20:34:10 | cert-management-policy/11-verify-secrets-unchanged | ++ jq --compact-output --sort-keys '.data | with_entries(select(.key | startswith("pgbouncer-frontend.")))' logger.go:42: 20:34:10 | cert-management-policy/11-verify-secrets-unchanged | ++ sha256sum logger.go:42: 20:34:10 | cert-management-policy/11-verify-secrets-unchanged | ++ awk '{print $1}' logger.go:42: 20:34:10 | cert-management-policy/11-verify-secrets-unchanged | + actual=6e43dbdb62d79b05bac8ef2ed4e0bf843676838aef1cfef2900b504b2c7824a0 logger.go:42: 20:34:10 | cert-management-policy/11-verify-secrets-unchanged | + [[ -z 6e43dbdb62d79b05bac8ef2ed4e0bf843676838aef1cfef2900b504b2c7824a0 ]] logger.go:42: 20:34:10 | cert-management-policy/11-verify-secrets-unchanged | + [[ 6e43dbdb62d79b05bac8ef2ed4e0bf843676838aef1cfef2900b504b2c7824a0 != 6e43dbdb62d79b05bac8ef2ed4e0bf843676838aef1cfef2900b504b2c7824a0 ]] logger.go:42: 20:34:10 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-stable-swift get statefulset -l postgres-operator.crunchydata.com/cluster=cert-management-policy,postgres-operator.crunchydata.com/data=postgres -o json logger.go:42: 20:34:11 | cert-management-policy/11-verify-secrets-unchanged | + statefulsets=$'{\n "apiVersion": "v1",\n "items": [\n {\n "apiVersion": "apps/v1",\n "kind": "StatefulSet",\n "metadata": {\n "annotations": {\n "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n },\n "creationTimestamp": "2026-09-01T20:32:12Z",\n "generation": 1,\n "labels": {\n "app.kubernetes.io/component": "pg",\n "app.kubernetes.io/instance": "cert-management-policy",\n "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n "app.kubernetes.io/name": "percona-postgresql",\n "app.kubernetes.io/part-of": "percona-postgresql",\n "pgv2.percona.com/version": "3.1.0",\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n "postgres-operator.crunchydata.com/data": "postgres",\n "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-49wh",\n "postgres-operator.crunchydata.com/instance-set": "instance1"\n },\n "name": "cert-management-policy-instance1-49wh",\n "namespace": "kuttl-test-stable-swift",\n "ownerReferences": [\n {\n "apiVersion": "upstream.pgv2.percona.com/v1beta1",\n "blockOwnerDeletion": true,\n "controller": true,\n "kind": "PostgresCluster",\n "name": "cert-management-policy",\n "uid": "bfa032ba-ea17-41e0-ba2d-5456e324f531"\n }\n ],\n "resourceVersion": "1788294795932831011",\n "uid": "0cbf21a3-7fcf-4611-9163-9c24a6c68d72"\n },\n "spec": {\n "persistentVolumeClaimRetentionPolicy": {\n "whenDeleted": "Retain",\n "whenScaled": "Retain"\n },\n "podManagementPolicy": "OrderedReady",\n "replicas": 1,\n "revisionHistoryLimit": 0,\n "selector": {\n "matchLabels": {\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-49wh",\n "postgres-operator.crunchydata.com/instance-set": "instance1"\n }\n },\n "serviceName": "cert-management-policy-pods",\n "template": {\n "metadata": {\n "annotations": {\n "kubectl.kubernetes.io/default-container": "database",\n "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n },\n "labels": {\n "app.kubernetes.io/component": "pg",\n "app.kubernetes.io/instance": "cert-management-policy",\n "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n "app.kubernetes.io/name": "percona-postgresql",\n "app.kubernetes.io/part-of": "percona-postgresql",\n "pgv2.percona.com/version": "3.1.0",\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n "postgres-operator.crunchydata.com/data": "postgres",\n "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-49wh",\n "postgres-operator.crunchydata.com/instance-set": "instance1",\n "postgres-operator.crunchydata.com/patroni": "cert-management-policy-ha"\n }\n },\n "spec": {\n "affinity": {\n "podAntiAffinity": {\n "preferredDuringSchedulingIgnoredDuringExecution": [\n {\n "podAffinityTerm": {\n "labelSelector": {\n "matchLabels": {\n "postgres-operator.crunchydata.com/data": "postgres"\n }\n },\n "topologyKey": "kubernetes.io/hostname"\n },\n "weight": 1\n }\n ]\n }\n },\n "containers": [\n {\n "command": [\n "/opt/crunchy/bin/postgres-entrypoint.sh",\n "patroni",\n "/etc/patroni"\n ],\n "env": [\n {\n "name": "PGDATA",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PGHOST",\n "value": "/tmp/postgres"\n },\n {\n "name": "PGPORT",\n "value": "5432"\n },\n {\n "name": "KRB5_CONFIG",\n "value": "/etc/postgres/krb5.conf"\n },\n {\n "name": "KRB5RCACHEDIR",\n "value": "/tmp"\n },\n {\n "name": "LDAPTLS_CACERT",\n "value": "/etc/postgres/ldap/ca.crt"\n },\n {\n "name": "LC_ALL",\n "value": "en_US.utf-8"\n },\n {\n "name": "LANG",\n "value": "en_US.utf-8"\n },\n {\n "name": "PATRONI_NAME",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.name"\n }\n }\n },\n {\n "name": "PATRONI_KUBERNETES_POD_IP",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "status.podIP"\n }\n }\n },\n {\n "name": "PATRONI_KUBERNETES_PORTS",\n "value": "- name: postgres\\n port: 5432\\n protocol: TCP\\n"\n },\n {\n "name": "PATRONI_POSTGRESQL_CONNECT_ADDRESS",\n "value": "$(PATRONI_NAME).cert-management-policy-pods:5432"\n },\n {\n "name": "PATRONI_POSTGRESQL_LISTEN",\n "value": "*:5432"\n },\n {\n "name": "PATRONI_POSTGRESQL_CONFIG_DIR",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PATRONI_POSTGRESQL_DATA_DIR",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PATRONI_RESTAPI_CONNECT_ADDRESS",\n "value": "$(PATRONI_NAME).cert-management-policy-pods:8008"\n },\n {\n "name": "PATRONI_RESTAPI_LISTEN",\n "value": "*:8008"\n },\n {\n "name": "PATRONICTL_CONFIG_FILE",\n "value": "/etc/patroni"\n },\n {\n "name": "LD_PRELOAD",\n "value": "/usr/lib64/libnss_wrapper.so"\n },\n {\n "name": "NSS_WRAPPER_PASSWD",\n "value": "/tmp/nss_wrapper/postgres/passwd"\n },\n {\n "name": "NSS_WRAPPER_GROUP",\n "value": "/tmp/nss_wrapper/postgres/group"\n }\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "livenessProbe": {\n "exec": {\n "command": [\n "bash",\n "-c",\n "/opt/crunchy/bin/postgres-liveness-check.sh"\n ]\n },\n "failureThreshold": 3,\n "initialDelaySeconds": 3,\n "periodSeconds": 10,\n "successThreshold": 1,\n "timeoutSeconds": 5\n },\n "name": "database",\n "ports": [\n {\n "containerPort": 5432,\n "name": "postgres",\n "protocol": "TCP"\n }\n ],\n "readinessProbe": {\n "exec": {\n "command": [\n "bash",\n "-c",\n "/opt/crunchy/bin/postgres-readiness-check.sh"\n ]\n },\n "failureThreshold": 3,\n "initialDelaySeconds": 3,\n "periodSeconds": 10,\n "successThreshold": 1,\n "timeoutSeconds": 5\n },\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgconf/tls",\n "name": "cert-volume",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/etc/database-containerinfo",\n "name": "database-containerinfo",\n "readOnly": true\n },\n {\n "mountPath": "/etc/pgbackrest/conf.d",\n "name": "pgbackrest-config",\n "readOnly": true\n },\n {\n "mountPath": "/etc/patroni",\n "name": "patroni-config",\n "readOnly": true\n },\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n },\n {\n "mountPath": "/dev/shm",\n "name": "dshm"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-ceu",\n "--",\n "monitor() {\\n# Parameters for curl when managing autogrow annotation.\\nAPISERVER=\\"https://kubernetes.default.svc\\"\\nSERVICEACCOUNT=\\"/var/run/secrets/kubernetes.io/serviceaccount\\"\\nNAMESPACE=$(cat ${SERVICEACCOUNT}/namespace)\\nTOKEN=$(cat ${SERVICEACCOUNT}/token)\\nCACERT=${SERVICEACCOUNT}/ca.crt\\n\\ndeclare -r directory=\\"/pgconf/tls\\"\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nwhile read -r -t 5 -u \\"${fd}\\" ||:; do\\n # Manage replication certificate.\\n if [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n install -D --mode=0600 -t \\"/tmp/replication\\" \\"${directory}\\"/{replication/tls.crt,replication/tls.key,replication/ca.crt} \\u0026\\u0026\\n pkill -HUP --exact --parent=1 postgres\\n then\\n exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n fi\\n\\ndone\\n}; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n "replication-cert-copy"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "replication-cert-copy",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgconf/tls",\n "name": "cert-volume",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "args": [\n "fluent-bit"\n ],\n "command": [\n "/opt/crunchy/logcollector/entrypoint.sh"\n ],\n "env": [\n {\n "name": "PG_LOG_DIR",\n "value": "/pgdata/pg18/log"\n },\n {\n "name": "PGBACKREST_LOG_DIR",\n "value": "/pgdata/pgbackrest/log"\n },\n {\n "name": "POD_NAMESPACE",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.namespace"\n }\n }\n },\n {\n "name": "POD_NAME",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.name"\n }\n }\n }\n ],\n "image": "docker.io/perconalab/fluentbit:main-logcollector",\n "imagePullPolicy": "IfNotPresent",\n "name": "logs",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "runAsGroup": 26,\n "runAsNonRoot": true,\n "runAsUser": 26,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "args": [\n "logrotate"\n ],\n "command": [\n "/opt/crunchy/logcollector/entrypoint.sh"\n ],\n "env": [\n {\n "name": "POD_NAMESPACE",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.namespace"\n }\n }\n },\n {\n "name": "POD_NAME",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.name"\n }\n }\n },\n {\n "name": "LOGROTATE_SCHEDULE",\n "value": "0 0 * * *"\n },\n {\n "name": "LD_PRELOAD",\n "value": "/tmp/nss_wrapper/libnss_wrapper.so"\n },\n {\n "name": "NSS_WRAPPER_PASSWD",\n "value": "/tmp/nss_wrapper/postgres/passwd"\n },\n {\n "name": "NSS_WRAPPER_GROUP",\n "value": "/tmp/nss_wrapper/postgres/group"\n }\n ],\n "image": "docker.io/perconalab/fluentbit:main-logcollector",\n "imagePullPolicy": "IfNotPresent",\n "name": "logrotate",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "runAsGroup": 26,\n "runAsNonRoot": true,\n "runAsUser": 26,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "pgbackrest",\n "server"\n ],\n "env": [\n {\n "name": "LD_PRELOAD",\n "value": "/usr/lib64/libnss_wrapper.so"\n },\n {\n "name": "NSS_WRAPPER_PASSWD",\n "value": "/tmp/nss_wrapper/postgres/passwd"\n },\n {\n "name": "NSS_WRAPPER_GROUP",\n "value": "/tmp/nss_wrapper/postgres/group"\n }\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n "imagePullPolicy": "Always",\n "livenessProbe": {\n "exec": {\n "command": [\n "pgbackrest",\n "server-ping"\n ]\n },\n "failureThreshold": 3,\n "periodSeconds": 10,\n "successThreshold": 1,\n "timeoutSeconds": 1\n },\n "name": "pgbackrest",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/etc/pgbackrest/server",\n "name": "pgbackrest-server",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/etc/pgbackrest/conf.d",\n "name": "pgbackrest-config",\n "readOnly": true\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-ceu",\n "--",\n "monitor() {\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nuntil read -r -t 5 -u \\"${fd}\\"; do\\n if\\n [[ \\"${filename}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n pkill -HUP --exact --parent=0 pgbackrest\\n then\\n exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n stat --dereference --format=\'Loaded configuration dated %y\' \\"${filename}\\"\\n elif\\n { [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] ||\\n [[ \\"${authority}\\" -nt \\"/proc/self/fd/${fd}\\" ]]\\n } \\u0026\\u0026\\n pkill -HUP --exact --parent=0 pgbackrest\\n then\\n exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n fi\\ndone\\n}; export directory=\\"$1\\" authority=\\"$2\\" filename=\\"$3\\"; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n "pgbackrest-config",\n "/etc/pgbackrest/server",\n "/etc/pgbackrest/conf.d/~postgres-operator/tls-ca.crt",\n "/etc/pgbackrest/conf.d/~postgres-operator_server.conf"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n "imagePullPolicy": "Always",\n "name": "pgbackrest-config",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/etc/pgbackrest/server",\n "name": "pgbackrest-server",\n "readOnly": true\n },\n {\n "mountPath": "/etc/pgbackrest/conf.d",\n "name": "pgbackrest-config",\n "readOnly": true\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n }\n ],\n "dnsPolicy": "ClusterFirst",\n "enableServiceLinks": false,\n "initContainers": [\n {\n "command": [\n "/usr/local/bin/init-entrypoint.sh"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd",\n "imagePullPolicy": "Always",\n "name": "database-init",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-ceu",\n "--",\n "declare -r expected_major_version=\\"$1\\" pgwal_directory=\\"$2\\" pgbrLog_directory=\\"$3\\"\\npermissions() { while [[ -n \\"$1\\" ]]; do set \\"${1%/*}\\" \\"$@\\"; done; shift; stat -Lc \'%A %4u %4g %n\' \\"$@\\"; }\\nhalt() { local rc=$?; \\u003e\\u00262 echo \\"$@\\"; exit \\"${rc/#0/1}\\"; }\\nresults() { printf \'::postgres-operator: %s::%s\\\\n\' \\"$@\\"; }\\nrecreate() (\\n local tmp; tmp=$(mktemp -d -p \\"${1%/*}\\"); GLOBIGNORE=\'.:..\'; set -x\\n chmod \\"$2\\" \\"${tmp}\\"; mv \\"$1\\"/* \\"${tmp}\\"; rmdir \\"$1\\"; mv \\"${tmp}\\" \\"$1\\"\\n)\\nsafelink() (\\n local desired=\\"$1\\" name=\\"$2\\" current\\n current=$(realpath \\"${name}\\")\\n if [[ \\"${current}\\" == \\"${desired}\\" ]]; then return; fi\\n set -x; mv --no-target-directory \\"${current}\\" \\"${desired}\\"\\n ln --no-dereference --force --symbolic \\"${desired}\\" \\"${name}\\"\\n)\\necho Initializing ...\\nresults \'uid\' \\"$(id -u ||:)\\" \'gid\' \\"$(id -G ||:)\\"\\nif [[ \\"${pgwal_directory}\\" == *\\"pgwal/\\"* ]] \\u0026\\u0026 [[ ! -d \\"/pgwal/pgbackrest-spool\\" ]];then rm -rf \\"/pgdata/pgbackrest-spool\\" \\u0026\\u0026 mkdir -p \\"/pgwal/pgbackrest-spool\\" \\u0026\\u0026 ln --force --symbolic \\"/pgwal/pgbackrest-spool\\" \\"/pgdata/pgbackrest-spool\\";fi\\nif [[ ! -e \\"/pgdata/pgbackrest-spool\\" ]];then rm -rf /pgdata/pgbackrest-spool;fi\\nresults \'postgres path\' \\"$(command -v postgres ||:)\\"\\nresults \'postgres version\' \\"${postgres_version:=$(postgres --version ||:)}\\"\\n[[ \\"${postgres_version}\\" =~ \\") ${expected_major_version}\\"($|[^0-9]) ]] ||\\nhalt Expected PostgreSQL version \\"${expected_major_version}\\"\\nresults \'config directory\' \\"${PGDATA:?}\\"\\npostgres_data_directory=$([[ -d \\"${PGDATA}\\" ]] \\u0026\\u0026 postgres -C data_directory || echo \\"${PGDATA}\\")\\nresults \'data directory\' \\"${postgres_data_directory}\\"\\n[[ \\"${postgres_data_directory}\\" == \\"${PGDATA}\\" ]] ||\\nhalt Expected matching config and data directories\\nbootstrap_dir=\\"${postgres_data_directory}_bootstrap\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 results \'bootstrap directory\' \\"${bootstrap_dir}\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 postgres_data_directory=\\"${bootstrap_dir}\\"\\nif [[ ! -e \\"${postgres_data_directory}\\" || -O \\"${postgres_data_directory}\\" ]]; then\\ninstall --directory --mode=0700 \\"${postgres_data_directory}\\"\\nelif [[ -w \\"${postgres_data_directory}\\" \\u0026\\u0026 -g \\"${postgres_data_directory}\\" ]]; then\\nrecreate \\"${postgres_data_directory}\\" \'0700\'\\nelse (halt Permissions!); fi ||\\nhalt \\"$(permissions \\"${postgres_data_directory}\\" ||:)\\"\\nresults \'pgBackRest log directory\' \\"${pgbrLog_directory}\\"\\ninstall --directory --mode=0775 \\"${pgbrLog_directory}\\" ||\\nhalt \\"$(permissions \\"${pgbrLog_directory}\\" ||:)\\"\\ninstall -D --mode=0600 -t \\"/tmp/replication\\" \\"/pgconf/tls/replication\\"/{tls.crt,tls.key,ca.crt}\\n\\n[[ -f \\"${postgres_data_directory}/PG_VERSION\\" ]] || exit 0\\nresults \'data version\' \\"${postgres_data_version:=$(\\u003c \\"${postgres_data_directory}/PG_VERSION\\")}\\"\\n[[ \\"${postgres_data_version}\\" == \\"${expected_major_version}\\" ]] ||\\nhalt Expected PostgreSQL data version \\"${expected_major_version}\\"\\n[[ ! -f \\"${postgres_data_directory}/postgresql.conf\\" ]] \\u0026\\u0026\\ntouch \\"${postgres_data_directory}/postgresql.conf\\"\\nsafelink \\"${pgwal_directory}\\" \\"${postgres_data_directory}/pg_wal\\"\\nresults \'wal directory\' \\"$(realpath \\"${postgres_data_directory}/pg_wal\\" ||:)\\"\\nrm -f \\"${postgres_data_directory}/recovery.signal\\"",\n "startup",\n "18",\n "/pgdata/pg18_wal",\n "/pgdata/pgbackrest/log"\n ],\n "env": [\n {\n "name": "PGDATA",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PGHOST",\n "value": "/tmp/postgres"\n },\n {\n "name": "PGPORT",\n "value": "5432"\n },\n {\n "name": "KRB5_CONFIG",\n "value": "/etc/postgres/krb5.conf"\n },\n {\n "name": "KRB5RCACHEDIR",\n "value": "/tmp"\n },\n {\n "name": "LDAPTLS_CACERT",\n "value": "/etc/postgres/ldap/ca.crt"\n },\n {\n "name": "LC_ALL",\n "value": "en_US.utf-8"\n },\n {\n "name": "LANG",\n "value": "en_US.utf-8"\n }\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "postgres-startup",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgconf/tls",\n "name": "cert-volume",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-c",\n "mkdir -p /tmp/nss_wrapper \\u0026\\u0026 { [[ -f /tmp/nss_wrapper/libnss_wrapper.so ]] || cp /usr/lib64/libnss_wrapper.so /tmp/nss_wrapper/libnss_wrapper.so; }"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "nss-wrapper-init-logcollector",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "runAsGroup": 26,\n "runAsNonRoot": true,\n "runAsUser": 26,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-c",\n "export NSS_WRAPPER_SUBDIR=postgres CRUNCHY_NSS_USERNAME=postgres CRUNCHY_NSS_USER_DESC=\\"postgres\\" \\n# Define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper. The\\n# nss_wrapper_env.sh script (which also sets these vars) isn\'t sourced here since the nss_wrapper\\n# has not yet been setup, and we therefore don\'t yet want the nss_wrapper vars in the environment.\\nmkdir -p /tmp/nss_wrapper\\nchmod g+rwx /tmp/nss_wrapper\\n\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\n# create the nss_wrapper directory\\nmkdir -p \\"${NSS_WRAPPER_DIR}\\"\\n\\n# grab the current user ID and group ID\\nUSER_ID=$(id -u)\\nexport USER_ID\\nGROUP_ID=$(id -g)\\nexport GROUP_ID\\n\\n# get copies of the passwd and group files\\n[[ -f \\"${NSS_WRAPPER_PASSWD}\\" ]] || cp \\"/etc/passwd\\" \\"${NSS_WRAPPER_PASSWD}\\"\\n[[ -f \\"${NSS_WRAPPER_GROUP}\\" ]] || cp \\"/etc/group\\" \\"${NSS_WRAPPER_GROUP}\\"\\n\\n# if the username is missing from the passwd file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_PASSWD}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n echo \\"nss_wrapper: adding user\\"\\n passwd_tmp=\\"${NSS_WRAPPER_DIR}/passwd_tmp\\"\\n cp \\"${NSS_WRAPPER_PASSWD}\\" \\"${passwd_tmp}\\"\\n sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${passwd_tmp}\\"\\n # needed for OCP 4.x because crio updates /etc/passwd with an entry for USER_ID\\n sed -i \\"/${USER_ID}:x:/d\\" \\"${passwd_tmp}\\"\\n printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${GROUP_ID}:${CRUNCHY_NSS_USER_DESC}:${HOME}:/bin/bash\\\\n\' \\u003e\\u003e \\"${passwd_tmp}\\"\\n envsubst \\u003c \\"${passwd_tmp}\\" \\u003e \\"${NSS_WRAPPER_PASSWD}\\"\\n rm \\"${passwd_tmp}\\"\\nelse\\n echo \\"nss_wrapper: user exists\\"\\nfi\\n\\n# if the username (which will be the same as the group name) is missing from group file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_GROUP}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n echo \\"nss_wrapper: adding group\\"\\n group_tmp=\\"${NSS_WRAPPER_DIR}/group_tmp\\"\\n cp \\"${NSS_WRAPPER_GROUP}\\" \\"${group_tmp}\\"\\n sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${group_tmp}\\"\\n printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${CRUNCHY_NSS_USERNAME}\\\\n\' \\u003e\\u003e \\"${group_tmp}\\"\\n envsubst \\u003c \\"${group_tmp}\\" \\u003e \\"${NSS_WRAPPER_GROUP}\\"\\n rm \\"${group_tmp}\\"\\nelse\\n echo \\"nss_wrapper: group exists\\"\\nfi\\n\\n# export the nss_wrapper env vars\\n# define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\nexport LD_PRELOAD=/usr/lib64/libnss_wrapper.so\\nexport NSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_PASSWD}\\"\\nexport NSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_GROUP}\\"\\n\\necho \\"nss_wrapper: environment configured\\"\\n"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "nss-wrapper-init",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n }\n ],\n "restartPolicy": "Always",\n "schedulerName": "default-scheduler",\n "securityContext": {\n "fsGroup": 26,\n "fsGroupChangePolicy": "OnRootMismatch"\n },\n "serviceAccount": "cert-management-policy-instance",\n "serviceAccountName": "cert-management-policy-instance",\n "shareProcessNamespace": true,\n "terminationGracePeriodSeconds": 30,\n "topologySpreadConstraints": [\n {\n "labelSelector": {\n "matchExpressions": [\n {\n "key": "postgres-operator.crunchydata.com/data",\n "operator": "In",\n "values": [\n "postgres",\n "pgbackrest"\n ]\n }\n ],\n "matchLabels": {\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n }\n },\n "maxSkew": 1,\n "topologyKey": "kubernetes.io/hostname",\n "whenUnsatisfiable": "ScheduleAnyway"\n },\n {\n "labelSelector": {\n "matchExpressions": [\n {\n "key": "postgres-operator.crunchydata.com/data",\n "operator": "In",\n "values": [\n "postgres",\n "pgbackrest"\n ]\n }\n ],\n "matchLabels": {\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n }\n },\n "maxSkew": 1,\n "topologyKey": "topology.kubernetes.io/zone",\n "whenUnsatisfiable": "ScheduleAnyway"\n }\n ],\n "volumes": [\n {\n "name": "cert-volume",\n "projected": {\n "defaultMode": 384,\n "sources": [\n {\n "secret": {\n "items": [\n {\n "key": "tls.crt",\n "path": "tls.crt"\n },\n {\n "key": "tls.key",\n "path": "tls.key"\n },\n {\n "key": "ca.crt",\n "path": "ca.crt"\n }\n ],\n "name": "cert-management-policy-cluster-cert"\n }\n },\n {\n "secret": {\n "items": [\n {\n "key": "tls.crt",\n "path": "replication/tls.crt"\n },\n {\n "key": "tls.key",\n "path": "replication/tls.key"\n },\n {\n "key": "ca.crt",\n "path": "replication/ca.crt"\n }\n ],\n "name": "cert-management-policy-replication-cert"\n }\n }\n ]\n }\n },\n {\n "name": "postgres-data",\n "persistentVolumeClaim": {\n "claimName": "cert-management-policy-instance1-49wh-pgdata"\n }\n },\n {\n "downwardAPI": {\n "defaultMode": 420,\n "items": [\n {\n "path": "cpu_limit",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1m",\n "resource": "limits.cpu"\n }\n },\n {\n "path": "cpu_request",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1m",\n "resource": "requests.cpu"\n }\n },\n {\n "path": "mem_limit",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1Mi",\n "resource": "limits.memory"\n }\n },\n {\n "path": "mem_request",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1Mi",\n "resource": "requests.memory"\n }\n },\n {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.labels"\n },\n "path": "labels"\n },\n {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.annotations"\n },\n "path": "annotations"\n }\n ]\n },\n "name": "database-containerinfo"\n },\n {\n "name": "pgbackrest-server",\n "projected": {\n "defaultMode": 420,\n "sources": [\n {\n "secret": {\n "items": [\n {\n "key": "pgbackrest-server.crt",\n "path": "server-tls.crt"\n },\n {\n "key": "pgbackrest-server.key",\n "mode": 384,\n "path": "server-tls.key"\n }\n ],\n "name": "cert-management-policy-instance1-49wh-certs"\n }\n }\n ]\n }\n },\n {\n "name": "pgbackrest-config",\n "projected": {\n "defaultMode": 420,\n "sources": [\n {\n "configMap": {\n "items": [\n {\n "key": "pgbackrest_instance.conf",\n "path": "pgbackrest_instance.conf"\n },\n {\n "key": "config-hash",\n "path": "config-hash"\n },\n {\n "key": "pgbackrest-server.conf",\n "path": "~postgres-operator_server.conf"\n }\n ],\n "name": "cert-management-policy-pgbackrest-config"\n }\n },\n {\n "secret": {\n "items": [\n {\n "key": "pgbackrest.ca-roots",\n "path": "~postgres-operator/tls-ca.crt"\n },\n {\n "key": "pgbackrest-client.crt",\n "path": "~postgres-operator/client-tls.crt"\n },\n {\n "key": "pgbackrest-client.key",\n "mode": 384,\n "path": "~postgres-operator/client-tls.key"\n }\n ],\n "name": "cert-management-policy-pgbackrest"\n }\n }\n ]\n }\n },\n {\n "name": "patroni-config",\n "projected": {\n "defaultMode": 420,\n "sources": [\n {\n "configMap": {\n "items": [\n {\n "key": "patroni.yaml",\n "path": "~postgres-operator_cluster.yaml"\n }\n ],\n "name": "cert-management-policy-config"\n }\n },\n {\n "configMap": {\n "items": [\n {\n "key": "patroni.yaml",\n "path": "~postgres-operator_instance.yaml"\n }\n ],\n "name": "cert-management-policy-instance1-49wh-config"\n }\n },\n {\n "secret": {\n "items": [\n {\n "key": "patroni.ca-roots",\n "path": "~postgres-operator/patroni.ca-roots"\n },\n {\n "key": "patroni.crt-combined",\n "path": "~postgres-operator/patroni.crt+key"\n }\n ],\n "name": "cert-management-policy-instance1-49wh-certs"\n }\n }\n ]\n }\n },\n {\n "emptyDir": {},\n "name": "crunchy-bin"\n },\n {\n "emptyDir": {\n "sizeLimit": "2Gi"\n },\n "name": "tmp"\n },\n {\n "emptyDir": {\n "medium": "Memory"\n },\n "name": "dshm"\n }\n ]\n }\n },\n "updateStrategy": {\n "type": "OnDelete"\n }\n },\n "status": {\n "availableReplicas": 1,\n "collisionCount": 0,\n "currentReplicas": 1,\n "currentRevision": "cert-management-policy-instance1-49wh-9cdbd667d",\n "observedGeneration": 1,\n "readyReplicas": 1,\n "replicas": 1,\n "updateRevision": "cert-management-policy-instance1-49wh-9cdbd667d",\n "updatedReplicas": 1\n }\n },\n {\n "apiVersion": "apps/v1",\n "kind": "StatefulSet",\n "metadata": {\n "annotations": {\n "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n },\n "creationTimestamp": "2026-09-01T20:32:14Z",\n "generation": 1,\n "labels": {\n "app.kubernetes.io/component": "pg",\n "app.kubernetes.io/instance": "cert-management-policy",\n "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n "app.kubernetes.io/name": "percona-postgresql",\n "app.kubernetes.io/part-of": "percona-postgresql",\n "pgv2.percona.com/version": "3.1.0",\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n "postgres-operator.crunchydata.com/data": "postgres",\n "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-67wh",\n "postgres-operator.crunchydata.com/instance-set": "instance1"\n },\n "name": "cert-management-policy-instance1-67wh",\n "namespace": "kuttl-test-stable-swift",\n "ownerReferences": [\n {\n "apiVersion": "upstream.pgv2.percona.com/v1beta1",\n "blockOwnerDeletion": true,\n "controller": true,\n "kind": "PostgresCluster",\n "name": "cert-management-policy",\n "uid": "bfa032ba-ea17-41e0-ba2d-5456e324f531"\n }\n ],\n "resourceVersion": "1788294806914895012",\n "uid": "67f866f3-1617-4323-b8f0-fd6799cdc065"\n },\n "spec": {\n "persistentVolumeClaimRetentionPolicy": {\n "whenDeleted": "Retain",\n "whenScaled": "Retain"\n },\n "podManagementPolicy": "OrderedReady",\n "replicas": 1,\n "revisionHistoryLimit": 0,\n "selector": {\n "matchLabels": {\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-67wh",\n "postgres-operator.crunchydata.com/instance-set": "instance1"\n }\n },\n "serviceName": "cert-management-policy-pods",\n "template": {\n "metadata": {\n "annotations": {\n "kubectl.kubernetes.io/default-container": "database",\n "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n },\n "labels": {\n "app.kubernetes.io/component": "pg",\n "app.kubernetes.io/instance": "cert-management-policy",\n "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n "app.kubernetes.io/name": "percona-postgresql",\n "app.kubernetes.io/part-of": "percona-postgresql",\n "pgv2.percona.com/version": "3.1.0",\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n "postgres-operator.crunchydata.com/data": "postgres",\n "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-67wh",\n "postgres-operator.crunchydata.com/instance-set": "instance1",\n "postgres-operator.crunchydata.com/patroni": "cert-management-policy-ha"\n }\n },\n "spec": {\n "affinity": {\n "podAntiAffinity": {\n "preferredDuringSchedulingIgnoredDuringExecution": [\n {\n "podAffinityTerm": {\n "labelSelector": {\n "matchLabels": {\n "postgres-operator.crunchydata.com/data": "postgres"\n }\n },\n "topologyKey": "kubernetes.io/hostname"\n },\n "weight": 1\n }\n ]\n }\n },\n "containers": [\n {\n "command": [\n "/opt/crunchy/bin/postgres-entrypoint.sh",\n "patroni",\n "/etc/patroni"\n ],\n "env": [\n {\n "name": "PGDATA",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PGHOST",\n "value": "/tmp/postgres"\n },\n {\n "name": "PGPORT",\n "value": "5432"\n },\n {\n "name": "KRB5_CONFIG",\n "value": "/etc/postgres/krb5.conf"\n },\n {\n "name": "KRB5RCACHEDIR",\n "value": "/tmp"\n },\n {\n "name": "LDAPTLS_CACERT",\n "value": "/etc/postgres/ldap/ca.crt"\n },\n {\n "name": "LC_ALL",\n "value": "en_US.utf-8"\n },\n {\n "name": "LANG",\n "value": "en_US.utf-8"\n },\n {\n "name": "PATRONI_NAME",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.name"\n }\n }\n },\n {\n "name": "PATRONI_KUBERNETES_POD_IP",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "status.podIP"\n }\n }\n },\n {\n "name": "PATRONI_KUBERNETES_PORTS",\n "value": "- name: postgres\\n port: 5432\\n protocol: TCP\\n"\n },\n {\n "name": "PATRONI_POSTGRESQL_CONNECT_ADDRESS",\n "value": "$(PATRONI_NAME).cert-management-policy-pods:5432"\n },\n {\n "name": "PATRONI_POSTGRESQL_LISTEN",\n "value": "*:5432"\n },\n {\n "name": "PATRONI_POSTGRESQL_CONFIG_DIR",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PATRONI_POSTGRESQL_DATA_DIR",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PATRONI_RESTAPI_CONNECT_ADDRESS",\n "value": "$(PATRONI_NAME).cert-management-policy-pods:8008"\n },\n {\n "name": "PATRONI_RESTAPI_LISTEN",\n "value": "*:8008"\n },\n {\n "name": "PATRONICTL_CONFIG_FILE",\n "value": "/etc/patroni"\n },\n {\n "name": "LD_PRELOAD",\n "value": "/usr/lib64/libnss_wrapper.so"\n },\n {\n "name": "NSS_WRAPPER_PASSWD",\n "value": "/tmp/nss_wrapper/postgres/passwd"\n },\n {\n "name": "NSS_WRAPPER_GROUP",\n "value": "/tmp/nss_wrapper/postgres/group"\n }\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "livenessProbe": {\n "exec": {\n "command": [\n "bash",\n "-c",\n "/opt/crunchy/bin/postgres-liveness-check.sh"\n ]\n },\n "failureThreshold": 3,\n "initialDelaySeconds": 3,\n "periodSeconds": 10,\n "successThreshold": 1,\n "timeoutSeconds": 5\n },\n "name": "database",\n "ports": [\n {\n "containerPort": 5432,\n "name": "postgres",\n "protocol": "TCP"\n }\n ],\n "readinessProbe": {\n "exec": {\n "command": [\n "bash",\n "-c",\n "/opt/crunchy/bin/postgres-readiness-check.sh"\n ]\n },\n "failureThreshold": 3,\n "initialDelaySeconds": 3,\n "periodSeconds": 10,\n "successThreshold": 1,\n "timeoutSeconds": 5\n },\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgconf/tls",\n "name": "cert-volume",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/etc/database-containerinfo",\n "name": "database-containerinfo",\n "readOnly": true\n },\n {\n "mountPath": "/etc/pgbackrest/conf.d",\n "name": "pgbackrest-config",\n "readOnly": true\n },\n {\n "mountPath": "/etc/patroni",\n "name": "patroni-config",\n "readOnly": true\n },\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n },\n {\n "mountPath": "/dev/shm",\n "name": "dshm"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-ceu",\n "--",\n "monitor() {\\n# Parameters for curl when managing autogrow annotation.\\nAPISERVER=\\"https://kubernetes.default.svc\\"\\nSERVICEACCOUNT=\\"/var/run/secrets/kubernetes.io/serviceaccount\\"\\nNAMESPACE=$(cat ${SERVICEACCOUNT}/namespace)\\nTOKEN=$(cat ${SERVICEACCOUNT}/token)\\nCACERT=${SERVICEACCOUNT}/ca.crt\\n\\ndeclare -r directory=\\"/pgconf/tls\\"\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nwhile read -r -t 5 -u \\"${fd}\\" ||:; do\\n # Manage replication certificate.\\n if [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n install -D --mode=0600 -t \\"/tmp/replication\\" \\"${directory}\\"/{replication/tls.crt,replication/tls.key,replication/ca.crt} \\u0026\\u0026\\n pkill -HUP --exact --parent=1 postgres\\n then\\n exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n fi\\n\\ndone\\n}; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n "replication-cert-copy"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "replication-cert-copy",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgconf/tls",\n "name": "cert-volume",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "args": [\n "fluent-bit"\n ],\n "command": [\n "/opt/crunchy/logcollector/entrypoint.sh"\n ],\n "env": [\n {\n "name": "PG_LOG_DIR",\n "value": "/pgdata/pg18/log"\n },\n {\n "name": "PGBACKREST_LOG_DIR",\n "value": "/pgdata/pgbackrest/log"\n },\n {\n "name": "POD_NAMESPACE",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.namespace"\n }\n }\n },\n {\n "name": "POD_NAME",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.name"\n }\n }\n }\n ],\n "image": "docker.io/perconalab/fluentbit:main-logcollector",\n "imagePullPolicy": "IfNotPresent",\n "name": "logs",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "runAsGroup": 26,\n "runAsNonRoot": true,\n "runAsUser": 26,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "args": [\n "logrotate"\n ],\n "command": [\n "/opt/crunchy/logcollector/entrypoint.sh"\n ],\n "env": [\n {\n "name": "POD_NAMESPACE",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.namespace"\n }\n }\n },\n {\n "name": "POD_NAME",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.name"\n }\n }\n },\n {\n "name": "LOGROTATE_SCHEDULE",\n "value": "0 0 * * *"\n },\n {\n "name": "LD_PRELOAD",\n "value": "/tmp/nss_wrapper/libnss_wrapper.so"\n },\n {\n "name": "NSS_WRAPPER_PASSWD",\n "value": "/tmp/nss_wrapper/postgres/passwd"\n },\n {\n "name": "NSS_WRAPPER_GROUP",\n "value": "/tmp/nss_wrapper/postgres/group"\n }\n ],\n "image": "docker.io/perconalab/fluentbit:main-logcollector",\n "imagePullPolicy": "IfNotPresent",\n "name": "logrotate",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "runAsGroup": 26,\n "runAsNonRoot": true,\n "runAsUser": 26,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "pgbackrest",\n "server"\n ],\n "env": [\n {\n "name": "LD_PRELOAD",\n "value": "/usr/lib64/libnss_wrapper.so"\n },\n {\n "name": "NSS_WRAPPER_PASSWD",\n "value": "/tmp/nss_wrapper/postgres/passwd"\n },\n {\n "name": "NSS_WRAPPER_GROUP",\n "value": "/tmp/nss_wrapper/postgres/group"\n }\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n "imagePullPolicy": "Always",\n "livenessProbe": {\n "exec": {\n "command": [\n "pgbackrest",\n "server-ping"\n ]\n },\n "failureThreshold": 3,\n "periodSeconds": 10,\n "successThreshold": 1,\n "timeoutSeconds": 1\n },\n "name": "pgbackrest",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/etc/pgbackrest/server",\n "name": "pgbackrest-server",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/etc/pgbackrest/conf.d",\n "name": "pgbackrest-config",\n "readOnly": true\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-ceu",\n "--",\n "monitor() {\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nuntil read -r -t 5 -u \\"${fd}\\"; do\\n if\\n [[ \\"${filename}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n pkill -HUP --exact --parent=0 pgbackrest\\n then\\n exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n stat --dereference --format=\'Loaded configuration dated %y\' \\"${filename}\\"\\n elif\\n { [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] ||\\n [[ \\"${authority}\\" -nt \\"/proc/self/fd/${fd}\\" ]]\\n } \\u0026\\u0026\\n pkill -HUP --exact --parent=0 pgbackrest\\n then\\n exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n fi\\ndone\\n}; export directory=\\"$1\\" authority=\\"$2\\" filename=\\"$3\\"; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n "pgbackrest-config",\n "/etc/pgbackrest/server",\n "/etc/pgbackrest/conf.d/~postgres-operator/tls-ca.crt",\n "/etc/pgbackrest/conf.d/~postgres-operator_server.conf"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n "imagePullPolicy": "Always",\n "name": "pgbackrest-config",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/etc/pgbackrest/server",\n "name": "pgbackrest-server",\n "readOnly": true\n },\n {\n "mountPath": "/etc/pgbackrest/conf.d",\n "name": "pgbackrest-config",\n "readOnly": true\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n }\n ],\n "dnsPolicy": "ClusterFirst",\n "enableServiceLinks": false,\n "initContainers": [\n {\n "command": [\n "/usr/local/bin/init-entrypoint.sh"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd",\n "imagePullPolicy": "Always",\n "name": "database-init",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-ceu",\n "--",\n "declare -r expected_major_version=\\"$1\\" pgwal_directory=\\"$2\\" pgbrLog_directory=\\"$3\\"\\npermissions() { while [[ -n \\"$1\\" ]]; do set \\"${1%/*}\\" \\"$@\\"; done; shift; stat -Lc \'%A %4u %4g %n\' \\"$@\\"; }\\nhalt() { local rc=$?; \\u003e\\u00262 echo \\"$@\\"; exit \\"${rc/#0/1}\\"; }\\nresults() { printf \'::postgres-operator: %s::%s\\\\n\' \\"$@\\"; }\\nrecreate() (\\n local tmp; tmp=$(mktemp -d -p \\"${1%/*}\\"); GLOBIGNORE=\'.:..\'; set -x\\n chmod \\"$2\\" \\"${tmp}\\"; mv \\"$1\\"/* \\"${tmp}\\"; rmdir \\"$1\\"; mv \\"${tmp}\\" \\"$1\\"\\n)\\nsafelink() (\\n local desired=\\"$1\\" name=\\"$2\\" current\\n current=$(realpath \\"${name}\\")\\n if [[ \\"${current}\\" == \\"${desired}\\" ]]; then return; fi\\n set -x; mv --no-target-directory \\"${current}\\" \\"${desired}\\"\\n ln --no-dereference --force --symbolic \\"${desired}\\" \\"${name}\\"\\n)\\necho Initializing ...\\nresults \'uid\' \\"$(id -u ||:)\\" \'gid\' \\"$(id -G ||:)\\"\\nif [[ \\"${pgwal_directory}\\" == *\\"pgwal/\\"* ]] \\u0026\\u0026 [[ ! -d \\"/pgwal/pgbackrest-spool\\" ]];then rm -rf \\"/pgdata/pgbackrest-spool\\" \\u0026\\u0026 mkdir -p \\"/pgwal/pgbackrest-spool\\" \\u0026\\u0026 ln --force --symbolic \\"/pgwal/pgbackrest-spool\\" \\"/pgdata/pgbackrest-spool\\";fi\\nif [[ ! -e \\"/pgdata/pgbackrest-spool\\" ]];then rm -rf /pgdata/pgbackrest-spool;fi\\nresults \'postgres path\' \\"$(command -v postgres ||:)\\"\\nresults \'postgres version\' \\"${postgres_version:=$(postgres --version ||:)}\\"\\n[[ \\"${postgres_version}\\" =~ \\") ${expected_major_version}\\"($|[^0-9]) ]] ||\\nhalt Expected PostgreSQL version \\"${expected_major_version}\\"\\nresults \'config directory\' \\"${PGDATA:?}\\"\\npostgres_data_directory=$([[ -d \\"${PGDATA}\\" ]] \\u0026\\u0026 postgres -C data_directory || echo \\"${PGDATA}\\")\\nresults \'data directory\' \\"${postgres_data_directory}\\"\\n[[ \\"${postgres_data_directory}\\" == \\"${PGDATA}\\" ]] ||\\nhalt Expected matching config and data directories\\nbootstrap_dir=\\"${postgres_data_directory}_bootstrap\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 results \'bootstrap directory\' \\"${bootstrap_dir}\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 postgres_data_directory=\\"${bootstrap_dir}\\"\\nif [[ ! -e \\"${postgres_data_directory}\\" || -O \\"${postgres_data_directory}\\" ]]; then\\ninstall --directory --mode=0700 \\"${postgres_data_directory}\\"\\nelif [[ -w \\"${postgres_data_directory}\\" \\u0026\\u0026 -g \\"${postgres_data_directory}\\" ]]; then\\nrecreate \\"${postgres_data_directory}\\" \'0700\'\\nelse (halt Permissions!); fi ||\\nhalt \\"$(permissions \\"${postgres_data_directory}\\" ||:)\\"\\nresults \'pgBackRest log directory\' \\"${pgbrLog_directory}\\"\\ninstall --directory --mode=0775 \\"${pgbrLog_directory}\\" ||\\nhalt \\"$(permissions \\"${pgbrLog_directory}\\" ||:)\\"\\ninstall -D --mode=0600 -t \\"/tmp/replication\\" \\"/pgconf/tls/replication\\"/{tls.crt,tls.key,ca.crt}\\n\\n[[ -f \\"${postgres_data_directory}/PG_VERSION\\" ]] || exit 0\\nresults \'data version\' \\"${postgres_data_version:=$(\\u003c \\"${postgres_data_directory}/PG_VERSION\\")}\\"\\n[[ \\"${postgres_data_version}\\" == \\"${expected_major_version}\\" ]] ||\\nhalt Expected PostgreSQL data version \\"${expected_major_version}\\"\\n[[ ! -f \\"${postgres_data_directory}/postgresql.conf\\" ]] \\u0026\\u0026\\ntouch \\"${postgres_data_directory}/postgresql.conf\\"\\nsafelink \\"${pgwal_directory}\\" \\"${postgres_data_directory}/pg_wal\\"\\nresults \'wal directory\' \\"$(realpath \\"${postgres_data_directory}/pg_wal\\" ||:)\\"\\nrm -f \\"${postgres_data_directory}/recovery.signal\\"",\n "startup",\n "18",\n "/pgdata/pg18_wal",\n "/pgdata/pgbackrest/log"\n ],\n "env": [\n {\n "name": "PGDATA",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PGHOST",\n "value": "/tmp/postgres"\n },\n {\n "name": "PGPORT",\n "value": "5432"\n },\n {\n "name": "KRB5_CONFIG",\n "value": "/etc/postgres/krb5.conf"\n },\n {\n "name": "KRB5RCACHEDIR",\n "value": "/tmp"\n },\n {\n "name": "LDAPTLS_CACERT",\n "value": "/etc/postgres/ldap/ca.crt"\n },\n {\n "name": "LC_ALL",\n "value": "en_US.utf-8"\n },\n {\n "name": "LANG",\n "value": "en_US.utf-8"\n }\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "postgres-startup",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgconf/tls",\n "name": "cert-volume",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-c",\n "mkdir -p /tmp/nss_wrapper \\u0026\\u0026 { [[ -f /tmp/nss_wrapper/libnss_wrapper.so ]] || cp /usr/lib64/libnss_wrapper.so /tmp/nss_wrapper/libnss_wrapper.so; }"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "nss-wrapper-init-logcollector",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "runAsGroup": 26,\n "runAsNonRoot": true,\n "runAsUser": 26,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-c",\n "export NSS_WRAPPER_SUBDIR=postgres CRUNCHY_NSS_USERNAME=postgres CRUNCHY_NSS_USER_DESC=\\"postgres\\" \\n# Define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper. The\\n# nss_wrapper_env.sh script (which also sets these vars) isn\'t sourced here since the nss_wrapper\\n# has not yet been setup, and we therefore don\'t yet want the nss_wrapper vars in the environment.\\nmkdir -p /tmp/nss_wrapper\\nchmod g+rwx /tmp/nss_wrapper\\n\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\n# create the nss_wrapper directory\\nmkdir -p \\"${NSS_WRAPPER_DIR}\\"\\n\\n# grab the current user ID and group ID\\nUSER_ID=$(id -u)\\nexport USER_ID\\nGROUP_ID=$(id -g)\\nexport GROUP_ID\\n\\n# get copies of the passwd and group files\\n[[ -f \\"${NSS_WRAPPER_PASSWD}\\" ]] || cp \\"/etc/passwd\\" \\"${NSS_WRAPPER_PASSWD}\\"\\n[[ -f \\"${NSS_WRAPPER_GROUP}\\" ]] || cp \\"/etc/group\\" \\"${NSS_WRAPPER_GROUP}\\"\\n\\n# if the username is missing from the passwd file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_PASSWD}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n echo \\"nss_wrapper: adding user\\"\\n passwd_tmp=\\"${NSS_WRAPPER_DIR}/passwd_tmp\\"\\n cp \\"${NSS_WRAPPER_PASSWD}\\" \\"${passwd_tmp}\\"\\n sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${passwd_tmp}\\"\\n # needed for OCP 4.x because crio updates /etc/passwd with an entry for USER_ID\\n sed -i \\"/${USER_ID}:x:/d\\" \\"${passwd_tmp}\\"\\n printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${GROUP_ID}:${CRUNCHY_NSS_USER_DESC}:${HOME}:/bin/bash\\\\n\' \\u003e\\u003e \\"${passwd_tmp}\\"\\n envsubst \\u003c \\"${passwd_tmp}\\" \\u003e \\"${NSS_WRAPPER_PASSWD}\\"\\n rm \\"${passwd_tmp}\\"\\nelse\\n echo \\"nss_wrapper: user exists\\"\\nfi\\n\\n# if the username (which will be the same as the group name) is missing from group file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_GROUP}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n echo \\"nss_wrapper: adding group\\"\\n group_tmp=\\"${NSS_WRAPPER_DIR}/group_tmp\\"\\n cp \\"${NSS_WRAPPER_GROUP}\\" \\"${group_tmp}\\"\\n sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${group_tmp}\\"\\n printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${CRUNCHY_NSS_USERNAME}\\\\n\' \\u003e\\u003e \\"${group_tmp}\\"\\n envsubst \\u003c \\"${group_tmp}\\" \\u003e \\"${NSS_WRAPPER_GROUP}\\"\\n rm \\"${group_tmp}\\"\\nelse\\n echo \\"nss_wrapper: group exists\\"\\nfi\\n\\n# export the nss_wrapper env vars\\n# define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\nexport LD_PRELOAD=/usr/lib64/libnss_wrapper.so\\nexport NSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_PASSWD}\\"\\nexport NSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_GROUP}\\"\\n\\necho \\"nss_wrapper: environment configured\\"\\n"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "nss-wrapper-init",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n }\n ],\n "restartPolicy": "Always",\n "schedulerName": "default-scheduler",\n "securityContext": {\n "fsGroup": 26,\n "fsGroupChangePolicy": "OnRootMismatch"\n },\n "serviceAccount": "cert-management-policy-instance",\n "serviceAccountName": "cert-management-policy-instance",\n "shareProcessNamespace": true,\n "terminationGracePeriodSeconds": 30,\n "topologySpreadConstraints": [\n {\n "labelSelector": {\n "matchExpressions": [\n {\n "key": "postgres-operator.crunchydata.com/data",\n "operator": "In",\n "values": [\n "postgres",\n "pgbackrest"\n ]\n }\n ],\n "matchLabels": {\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n }\n },\n "maxSkew": 1,\n "topologyKey": "kubernetes.io/hostname",\n "whenUnsatisfiable": "ScheduleAnyway"\n },\n {\n "labelSelector": {\n "matchExpressions": [\n {\n "key": "postgres-operator.crunchydata.com/data",\n "operator": "In",\n "values": [\n "postgres",\n "pgbackrest"\n ]\n }\n ],\n "matchLabels": {\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n }\n },\n "maxSkew": 1,\n "topologyKey": "topology.kubernetes.io/zone",\n "whenUnsatisfiable": "ScheduleAnyway"\n }\n ],\n "volumes": [\n {\n "name": "cert-volume",\n "projected": {\n "defaultMode": 384,\n "sources": [\n {\n "secret": {\n "items": [\n {\n "key": "tls.crt",\n "path": "tls.crt"\n },\n {\n "key": "tls.key",\n "path": "tls.key"\n },\n {\n "key": "ca.crt",\n "path": "ca.crt"\n }\n ],\n "name": "cert-management-policy-cluster-cert"\n }\n },\n {\n "secret": {\n "items": [\n {\n "key": "tls.crt",\n "path": "replication/tls.crt"\n },\n {\n "key": "tls.key",\n "path": "replication/tls.key"\n },\n {\n "key": "ca.crt",\n "path": "replication/ca.crt"\n }\n ],\n "name": "cert-management-policy-replication-cert"\n }\n }\n ]\n }\n },\n {\n "name": "postgres-data",\n "persistentVolumeClaim": {\n "claimName": "cert-management-policy-instance1-67wh-pgdata"\n }\n },\n {\n "downwardAPI": {\n "defaultMode": 420,\n "items": [\n {\n "path": "cpu_limit",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1m",\n "resource": "limits.cpu"\n }\n },\n {\n "path": "cpu_request",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1m",\n "resource": "requests.cpu"\n }\n },\n {\n "path": "mem_limit",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1Mi",\n "resource": "limits.memory"\n }\n },\n {\n "path": "mem_request",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1Mi",\n "resource": "requests.memory"\n }\n },\n {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.labels"\n },\n "path": "labels"\n },\n {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.annotations"\n },\n "path": "annotations"\n }\n ]\n },\n "name": "database-containerinfo"\n },\n {\n "name": "pgbackrest-server",\n "projected": {\n "defaultMode": 420,\n "sources": [\n {\n "secret": {\n "items": [\n {\n "key": "pgbackrest-server.crt",\n "path": "server-tls.crt"\n },\n {\n "key": "pgbackrest-server.key",\n "mode": 384,\n "path": "server-tls.key"\n }\n ],\n "name": "cert-management-policy-instance1-67wh-certs"\n }\n }\n ]\n }\n },\n {\n "name": "pgbackrest-config",\n "projected": {\n "defaultMode": 420,\n "sources": [\n {\n "configMap": {\n "items": [\n {\n "key": "pgbackrest_instance.conf",\n "path": "pgbackrest_instance.conf"\n },\n {\n "key": "config-hash",\n "path": "config-hash"\n },\n {\n "key": "pgbackrest-server.conf",\n "path": "~postgres-operator_server.conf"\n }\n ],\n "name": "cert-management-policy-pgbackrest-config"\n }\n },\n {\n "secret": {\n "items": [\n {\n "key": "pgbackrest.ca-roots",\n "path": "~postgres-operator/tls-ca.crt"\n },\n {\n "key": "pgbackrest-client.crt",\n "path": "~postgres-operator/client-tls.crt"\n },\n {\n "key": "pgbackrest-client.key",\n "mode": 384,\n "path": "~postgres-operator/client-tls.key"\n }\n ],\n "name": "cert-management-policy-pgbackrest"\n }\n }\n ]\n }\n },\n {\n "name": "patroni-config",\n "projected": {\n "defaultMode": 420,\n "sources": [\n {\n "configMap": {\n "items": [\n {\n "key": "patroni.yaml",\n "path": "~postgres-operator_cluster.yaml"\n }\n ],\n "name": "cert-management-policy-config"\n }\n },\n {\n "configMap": {\n "items": [\n {\n "key": "patroni.yaml",\n "path": "~postgres-operator_instance.yaml"\n }\n ],\n "name": "cert-management-policy-instance1-67wh-config"\n }\n },\n {\n "secret": {\n "items": [\n {\n "key": "patroni.ca-roots",\n "path": "~postgres-operator/patroni.ca-roots"\n },\n {\n "key": "patroni.crt-combined",\n "path": "~postgres-operator/patroni.crt+key"\n }\n ],\n "name": "cert-management-policy-instance1-67wh-certs"\n }\n }\n ]\n }\n },\n {\n "emptyDir": {},\n "name": "crunchy-bin"\n },\n {\n "emptyDir": {\n "sizeLimit": "2Gi"\n },\n "name": "tmp"\n },\n {\n "emptyDir": {\n "medium": "Memory"\n },\n "name": "dshm"\n }\n ]\n }\n },\n "updateStrategy": {\n "type": "OnDelete"\n }\n },\n "status": {\n "availableReplicas": 1,\n "collisionCount": 0,\n "currentReplicas": 1,\n "currentRevision": "cert-management-policy-instance1-67wh-5b9c864b6",\n "observedGeneration": 1,\n "readyReplicas": 1,\n "replicas": 1,\n "updateRevision": "cert-management-policy-instance1-67wh-5b9c864b6",\n "updatedReplicas": 1\n }\n },\n {\n "apiVersion": "apps/v1",\n "kind": "StatefulSet",\n "metadata": {\n "annotations": {\n "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n },\n "creationTimestamp": "2026-09-01T20:32:14Z",\n "generation": 1,\n "labels": {\n "app.kubernetes.io/component": "pg",\n "app.kubernetes.io/instance": "cert-management-policy",\n "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n "app.kubernetes.io/name": "percona-postgresql",\n "app.kubernetes.io/part-of": "percona-postgresql",\n "pgv2.percona.com/version": "3.1.0",\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n "postgres-operator.crunchydata.com/data": "postgres",\n "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-f59q",\n "postgres-operator.crunchydata.com/instance-set": "instance1"\n },\n "name": "cert-management-policy-instance1-f59q",\n "namespace": "kuttl-test-stable-swift",\n "ownerReferences": [\n {\n "apiVersion": "upstream.pgv2.percona.com/v1beta1",\n "blockOwnerDeletion": true,\n "controller": true,\n "kind": "PostgresCluster",\n "name": "cert-management-policy",\n "uid": "bfa032ba-ea17-41e0-ba2d-5456e324f531"\n }\n ],\n "resourceVersion": "1788294795625663007",\n "uid": "86808021-218b-4a9b-b74c-41c69f27569a"\n },\n "spec": {\n "persistentVolumeClaimRetentionPolicy": {\n "whenDeleted": "Retain",\n "whenScaled": "Retain"\n },\n "podManagementPolicy": "OrderedReady",\n "replicas": 1,\n "revisionHistoryLimit": 0,\n "selector": {\n "matchLabels": {\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-f59q",\n "postgres-operator.crunchydata.com/instance-set": "instance1"\n }\n },\n "serviceName": "cert-management-policy-pods",\n "template": {\n "metadata": {\n "annotations": {\n "kubectl.kubernetes.io/default-container": "database",\n "pgv2.percona.com/logcollector-config-hash": "d9a116e02b828bdc02165325e92799d82961fb499041814c7c765d0ce263ce77"\n },\n "labels": {\n "app.kubernetes.io/component": "pg",\n "app.kubernetes.io/instance": "cert-management-policy",\n "app.kubernetes.io/managed-by": "percona-postgresql-operator",\n "app.kubernetes.io/name": "percona-postgresql",\n "app.kubernetes.io/part-of": "percona-postgresql",\n "pgv2.percona.com/version": "3.1.0",\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy",\n "postgres-operator.crunchydata.com/data": "postgres",\n "postgres-operator.crunchydata.com/instance": "cert-management-policy-instance1-f59q",\n "postgres-operator.crunchydata.com/instance-set": "instance1",\n "postgres-operator.crunchydata.com/patroni": "cert-management-policy-ha"\n }\n },\n "spec": {\n "affinity": {\n "podAntiAffinity": {\n "preferredDuringSchedulingIgnoredDuringExecution": [\n {\n "podAffinityTerm": {\n "labelSelector": {\n "matchLabels": {\n "postgres-operator.crunchydata.com/data": "postgres"\n }\n },\n "topologyKey": "kubernetes.io/hostname"\n },\n "weight": 1\n }\n ]\n }\n },\n "containers": [\n {\n "command": [\n "/opt/crunchy/bin/postgres-entrypoint.sh",\n "patroni",\n "/etc/patroni"\n ],\n "env": [\n {\n "name": "PGDATA",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PGHOST",\n "value": "/tmp/postgres"\n },\n {\n "name": "PGPORT",\n "value": "5432"\n },\n {\n "name": "KRB5_CONFIG",\n "value": "/etc/postgres/krb5.conf"\n },\n {\n "name": "KRB5RCACHEDIR",\n "value": "/tmp"\n },\n {\n "name": "LDAPTLS_CACERT",\n "value": "/etc/postgres/ldap/ca.crt"\n },\n {\n "name": "LC_ALL",\n "value": "en_US.utf-8"\n },\n {\n "name": "LANG",\n "value": "en_US.utf-8"\n },\n {\n "name": "PATRONI_NAME",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.name"\n }\n }\n },\n {\n "name": "PATRONI_KUBERNETES_POD_IP",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "status.podIP"\n }\n }\n },\n {\n "name": "PATRONI_KUBERNETES_PORTS",\n "value": "- name: postgres\\n port: 5432\\n protocol: TCP\\n"\n },\n {\n "name": "PATRONI_POSTGRESQL_CONNECT_ADDRESS",\n "value": "$(PATRONI_NAME).cert-management-policy-pods:5432"\n },\n {\n "name": "PATRONI_POSTGRESQL_LISTEN",\n "value": "*:5432"\n },\n {\n "name": "PATRONI_POSTGRESQL_CONFIG_DIR",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PATRONI_POSTGRESQL_DATA_DIR",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PATRONI_RESTAPI_CONNECT_ADDRESS",\n "value": "$(PATRONI_NAME).cert-management-policy-pods:8008"\n },\n {\n "name": "PATRONI_RESTAPI_LISTEN",\n "value": "*:8008"\n },\n {\n "name": "PATRONICTL_CONFIG_FILE",\n "value": "/etc/patroni"\n },\n {\n "name": "LD_PRELOAD",\n "value": "/usr/lib64/libnss_wrapper.so"\n },\n {\n "name": "NSS_WRAPPER_PASSWD",\n "value": "/tmp/nss_wrapper/postgres/passwd"\n },\n {\n "name": "NSS_WRAPPER_GROUP",\n "value": "/tmp/nss_wrapper/postgres/group"\n }\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "livenessProbe": {\n "exec": {\n "command": [\n "bash",\n "-c",\n "/opt/crunchy/bin/postgres-liveness-check.sh"\n ]\n },\n "failureThreshold": 3,\n "initialDelaySeconds": 3,\n "periodSeconds": 10,\n "successThreshold": 1,\n "timeoutSeconds": 5\n },\n "name": "database",\n "ports": [\n {\n "containerPort": 5432,\n "name": "postgres",\n "protocol": "TCP"\n }\n ],\n "readinessProbe": {\n "exec": {\n "command": [\n "bash",\n "-c",\n "/opt/crunchy/bin/postgres-readiness-check.sh"\n ]\n },\n "failureThreshold": 3,\n "initialDelaySeconds": 3,\n "periodSeconds": 10,\n "successThreshold": 1,\n "timeoutSeconds": 5\n },\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgconf/tls",\n "name": "cert-volume",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/etc/database-containerinfo",\n "name": "database-containerinfo",\n "readOnly": true\n },\n {\n "mountPath": "/etc/pgbackrest/conf.d",\n "name": "pgbackrest-config",\n "readOnly": true\n },\n {\n "mountPath": "/etc/patroni",\n "name": "patroni-config",\n "readOnly": true\n },\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n },\n {\n "mountPath": "/dev/shm",\n "name": "dshm"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-ceu",\n "--",\n "monitor() {\\n# Parameters for curl when managing autogrow annotation.\\nAPISERVER=\\"https://kubernetes.default.svc\\"\\nSERVICEACCOUNT=\\"/var/run/secrets/kubernetes.io/serviceaccount\\"\\nNAMESPACE=$(cat ${SERVICEACCOUNT}/namespace)\\nTOKEN=$(cat ${SERVICEACCOUNT}/token)\\nCACERT=${SERVICEACCOUNT}/ca.crt\\n\\ndeclare -r directory=\\"/pgconf/tls\\"\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nwhile read -r -t 5 -u \\"${fd}\\" ||:; do\\n # Manage replication certificate.\\n if [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n install -D --mode=0600 -t \\"/tmp/replication\\" \\"${directory}\\"/{replication/tls.crt,replication/tls.key,replication/ca.crt} \\u0026\\u0026\\n pkill -HUP --exact --parent=1 postgres\\n then\\n exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n fi\\n\\ndone\\n}; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n "replication-cert-copy"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "replication-cert-copy",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgconf/tls",\n "name": "cert-volume",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "args": [\n "fluent-bit"\n ],\n "command": [\n "/opt/crunchy/logcollector/entrypoint.sh"\n ],\n "env": [\n {\n "name": "PG_LOG_DIR",\n "value": "/pgdata/pg18/log"\n },\n {\n "name": "PGBACKREST_LOG_DIR",\n "value": "/pgdata/pgbackrest/log"\n },\n {\n "name": "POD_NAMESPACE",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.namespace"\n }\n }\n },\n {\n "name": "POD_NAME",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.name"\n }\n }\n }\n ],\n "image": "docker.io/perconalab/fluentbit:main-logcollector",\n "imagePullPolicy": "IfNotPresent",\n "name": "logs",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "runAsGroup": 26,\n "runAsNonRoot": true,\n "runAsUser": 26,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "args": [\n "logrotate"\n ],\n "command": [\n "/opt/crunchy/logcollector/entrypoint.sh"\n ],\n "env": [\n {\n "name": "POD_NAMESPACE",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.namespace"\n }\n }\n },\n {\n "name": "POD_NAME",\n "valueFrom": {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.name"\n }\n }\n },\n {\n "name": "LOGROTATE_SCHEDULE",\n "value": "0 0 * * *"\n },\n {\n "name": "LD_PRELOAD",\n "value": "/tmp/nss_wrapper/libnss_wrapper.so"\n },\n {\n "name": "NSS_WRAPPER_PASSWD",\n "value": "/tmp/nss_wrapper/postgres/passwd"\n },\n {\n "name": "NSS_WRAPPER_GROUP",\n "value": "/tmp/nss_wrapper/postgres/group"\n }\n ],\n "image": "docker.io/perconalab/fluentbit:main-logcollector",\n "imagePullPolicy": "IfNotPresent",\n "name": "logrotate",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "runAsGroup": 26,\n "runAsNonRoot": true,\n "runAsUser": 26,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "pgbackrest",\n "server"\n ],\n "env": [\n {\n "name": "LD_PRELOAD",\n "value": "/usr/lib64/libnss_wrapper.so"\n },\n {\n "name": "NSS_WRAPPER_PASSWD",\n "value": "/tmp/nss_wrapper/postgres/passwd"\n },\n {\n "name": "NSS_WRAPPER_GROUP",\n "value": "/tmp/nss_wrapper/postgres/group"\n }\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n "imagePullPolicy": "Always",\n "livenessProbe": {\n "exec": {\n "command": [\n "pgbackrest",\n "server-ping"\n ]\n },\n "failureThreshold": 3,\n "periodSeconds": 10,\n "successThreshold": 1,\n "timeoutSeconds": 1\n },\n "name": "pgbackrest",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/etc/pgbackrest/server",\n "name": "pgbackrest-server",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/etc/pgbackrest/conf.d",\n "name": "pgbackrest-config",\n "readOnly": true\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-ceu",\n "--",\n "monitor() {\\nexec {fd}\\u003c\\u003e \\u003c(:||:)\\nuntil read -r -t 5 -u \\"${fd}\\"; do\\n if\\n [[ \\"${filename}\\" -nt \\"/proc/self/fd/${fd}\\" ]] \\u0026\\u0026\\n pkill -HUP --exact --parent=0 pgbackrest\\n then\\n exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n stat --dereference --format=\'Loaded configuration dated %y\' \\"${filename}\\"\\n elif\\n { [[ \\"${directory}\\" -nt \\"/proc/self/fd/${fd}\\" ]] ||\\n [[ \\"${authority}\\" -nt \\"/proc/self/fd/${fd}\\" ]]\\n } \\u0026\\u0026\\n pkill -HUP --exact --parent=0 pgbackrest\\n then\\n exec {fd}\\u003e\\u0026- \\u0026\\u0026 exec {fd}\\u003c\\u003e \\u003c(:||:)\\n stat --format=\'Loaded certificates dated %y\' \\"${directory}\\"\\n fi\\ndone\\n}; export directory=\\"$1\\" authority=\\"$2\\" filename=\\"$3\\"; export -f monitor; exec -a \\"$0\\" bash -ceu monitor",\n "pgbackrest-config",\n "/etc/pgbackrest/server",\n "/etc/pgbackrest/conf.d/~postgres-operator/tls-ca.crt",\n "/etc/pgbackrest/conf.d/~postgres-operator_server.conf"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18",\n "imagePullPolicy": "Always",\n "name": "pgbackrest-config",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/etc/pgbackrest/server",\n "name": "pgbackrest-server",\n "readOnly": true\n },\n {\n "mountPath": "/etc/pgbackrest/conf.d",\n "name": "pgbackrest-config",\n "readOnly": true\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n }\n ],\n "dnsPolicy": "ClusterFirst",\n "enableServiceLinks": false,\n "initContainers": [\n {\n "command": [\n "/usr/local/bin/init-entrypoint.sh"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd",\n "imagePullPolicy": "Always",\n "name": "database-init",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/opt/crunchy",\n "name": "crunchy-bin"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-ceu",\n "--",\n "declare -r expected_major_version=\\"$1\\" pgwal_directory=\\"$2\\" pgbrLog_directory=\\"$3\\"\\npermissions() { while [[ -n \\"$1\\" ]]; do set \\"${1%/*}\\" \\"$@\\"; done; shift; stat -Lc \'%A %4u %4g %n\' \\"$@\\"; }\\nhalt() { local rc=$?; \\u003e\\u00262 echo \\"$@\\"; exit \\"${rc/#0/1}\\"; }\\nresults() { printf \'::postgres-operator: %s::%s\\\\n\' \\"$@\\"; }\\nrecreate() (\\n local tmp; tmp=$(mktemp -d -p \\"${1%/*}\\"); GLOBIGNORE=\'.:..\'; set -x\\n chmod \\"$2\\" \\"${tmp}\\"; mv \\"$1\\"/* \\"${tmp}\\"; rmdir \\"$1\\"; mv \\"${tmp}\\" \\"$1\\"\\n)\\nsafelink() (\\n local desired=\\"$1\\" name=\\"$2\\" current\\n current=$(realpath \\"${name}\\")\\n if [[ \\"${current}\\" == \\"${desired}\\" ]]; then return; fi\\n set -x; mv --no-target-directory \\"${current}\\" \\"${desired}\\"\\n ln --no-dereference --force --symbolic \\"${desired}\\" \\"${name}\\"\\n)\\necho Initializing ...\\nresults \'uid\' \\"$(id -u ||:)\\" \'gid\' \\"$(id -G ||:)\\"\\nif [[ \\"${pgwal_directory}\\" == *\\"pgwal/\\"* ]] \\u0026\\u0026 [[ ! -d \\"/pgwal/pgbackrest-spool\\" ]];then rm -rf \\"/pgdata/pgbackrest-spool\\" \\u0026\\u0026 mkdir -p \\"/pgwal/pgbackrest-spool\\" \\u0026\\u0026 ln --force --symbolic \\"/pgwal/pgbackrest-spool\\" \\"/pgdata/pgbackrest-spool\\";fi\\nif [[ ! -e \\"/pgdata/pgbackrest-spool\\" ]];then rm -rf /pgdata/pgbackrest-spool;fi\\nresults \'postgres path\' \\"$(command -v postgres ||:)\\"\\nresults \'postgres version\' \\"${postgres_version:=$(postgres --version ||:)}\\"\\n[[ \\"${postgres_version}\\" =~ \\") ${expected_major_version}\\"($|[^0-9]) ]] ||\\nhalt Expected PostgreSQL version \\"${expected_major_version}\\"\\nresults \'config directory\' \\"${PGDATA:?}\\"\\npostgres_data_directory=$([[ -d \\"${PGDATA}\\" ]] \\u0026\\u0026 postgres -C data_directory || echo \\"${PGDATA}\\")\\nresults \'data directory\' \\"${postgres_data_directory}\\"\\n[[ \\"${postgres_data_directory}\\" == \\"${PGDATA}\\" ]] ||\\nhalt Expected matching config and data directories\\nbootstrap_dir=\\"${postgres_data_directory}_bootstrap\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 results \'bootstrap directory\' \\"${bootstrap_dir}\\"\\n[[ -d \\"${bootstrap_dir}\\" ]] \\u0026\\u0026 postgres_data_directory=\\"${bootstrap_dir}\\"\\nif [[ ! -e \\"${postgres_data_directory}\\" || -O \\"${postgres_data_directory}\\" ]]; then\\ninstall --directory --mode=0700 \\"${postgres_data_directory}\\"\\nelif [[ -w \\"${postgres_data_directory}\\" \\u0026\\u0026 -g \\"${postgres_data_directory}\\" ]]; then\\nrecreate \\"${postgres_data_directory}\\" \'0700\'\\nelse (halt Permissions!); fi ||\\nhalt \\"$(permissions \\"${postgres_data_directory}\\" ||:)\\"\\nresults \'pgBackRest log directory\' \\"${pgbrLog_directory}\\"\\ninstall --directory --mode=0775 \\"${pgbrLog_directory}\\" ||\\nhalt \\"$(permissions \\"${pgbrLog_directory}\\" ||:)\\"\\ninstall -D --mode=0600 -t \\"/tmp/replication\\" \\"/pgconf/tls/replication\\"/{tls.crt,tls.key,ca.crt}\\n\\n[[ -f \\"${postgres_data_directory}/PG_VERSION\\" ]] || exit 0\\nresults \'data version\' \\"${postgres_data_version:=$(\\u003c \\"${postgres_data_directory}/PG_VERSION\\")}\\"\\n[[ \\"${postgres_data_version}\\" == \\"${expected_major_version}\\" ]] ||\\nhalt Expected PostgreSQL data version \\"${expected_major_version}\\"\\n[[ ! -f \\"${postgres_data_directory}/postgresql.conf\\" ]] \\u0026\\u0026\\ntouch \\"${postgres_data_directory}/postgresql.conf\\"\\nsafelink \\"${pgwal_directory}\\" \\"${postgres_data_directory}/pg_wal\\"\\nresults \'wal directory\' \\"$(realpath \\"${postgres_data_directory}/pg_wal\\" ||:)\\"\\nrm -f \\"${postgres_data_directory}/recovery.signal\\"",\n "startup",\n "18",\n "/pgdata/pg18_wal",\n "/pgdata/pgbackrest/log"\n ],\n "env": [\n {\n "name": "PGDATA",\n "value": "/pgdata/pg18"\n },\n {\n "name": "PGHOST",\n "value": "/tmp/postgres"\n },\n {\n "name": "PGPORT",\n "value": "5432"\n },\n {\n "name": "KRB5_CONFIG",\n "value": "/etc/postgres/krb5.conf"\n },\n {\n "name": "KRB5RCACHEDIR",\n "value": "/tmp"\n },\n {\n "name": "LDAPTLS_CACERT",\n "value": "/etc/postgres/ldap/ca.crt"\n },\n {\n "name": "LC_ALL",\n "value": "en_US.utf-8"\n },\n {\n "name": "LANG",\n "value": "en_US.utf-8"\n }\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "postgres-startup",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/pgconf/tls",\n "name": "cert-volume",\n "readOnly": true\n },\n {\n "mountPath": "/pgdata",\n "name": "postgres-data"\n },\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-c",\n "mkdir -p /tmp/nss_wrapper \\u0026\\u0026 { [[ -f /tmp/nss_wrapper/libnss_wrapper.so ]] || cp /usr/lib64/libnss_wrapper.so /tmp/nss_wrapper/libnss_wrapper.so; }"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "nss-wrapper-init-logcollector",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "runAsGroup": 26,\n "runAsNonRoot": true,\n "runAsUser": 26,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n },\n {\n "command": [\n "bash",\n "-c",\n "export NSS_WRAPPER_SUBDIR=postgres CRUNCHY_NSS_USERNAME=postgres CRUNCHY_NSS_USER_DESC=\\"postgres\\" \\n# Define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper. The\\n# nss_wrapper_env.sh script (which also sets these vars) isn\'t sourced here since the nss_wrapper\\n# has not yet been setup, and we therefore don\'t yet want the nss_wrapper vars in the environment.\\nmkdir -p /tmp/nss_wrapper\\nchmod g+rwx /tmp/nss_wrapper\\n\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\n# create the nss_wrapper directory\\nmkdir -p \\"${NSS_WRAPPER_DIR}\\"\\n\\n# grab the current user ID and group ID\\nUSER_ID=$(id -u)\\nexport USER_ID\\nGROUP_ID=$(id -g)\\nexport GROUP_ID\\n\\n# get copies of the passwd and group files\\n[[ -f \\"${NSS_WRAPPER_PASSWD}\\" ]] || cp \\"/etc/passwd\\" \\"${NSS_WRAPPER_PASSWD}\\"\\n[[ -f \\"${NSS_WRAPPER_GROUP}\\" ]] || cp \\"/etc/group\\" \\"${NSS_WRAPPER_GROUP}\\"\\n\\n# if the username is missing from the passwd file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_PASSWD}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n echo \\"nss_wrapper: adding user\\"\\n passwd_tmp=\\"${NSS_WRAPPER_DIR}/passwd_tmp\\"\\n cp \\"${NSS_WRAPPER_PASSWD}\\" \\"${passwd_tmp}\\"\\n sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${passwd_tmp}\\"\\n # needed for OCP 4.x because crio updates /etc/passwd with an entry for USER_ID\\n sed -i \\"/${USER_ID}:x:/d\\" \\"${passwd_tmp}\\"\\n printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${GROUP_ID}:${CRUNCHY_NSS_USER_DESC}:${HOME}:/bin/bash\\\\n\' \\u003e\\u003e \\"${passwd_tmp}\\"\\n envsubst \\u003c \\"${passwd_tmp}\\" \\u003e \\"${NSS_WRAPPER_PASSWD}\\"\\n rm \\"${passwd_tmp}\\"\\nelse\\n echo \\"nss_wrapper: user exists\\"\\nfi\\n\\n# if the username (which will be the same as the group name) is missing from group file, then add it\\nif [[ ! $(cat \\"${NSS_WRAPPER_GROUP}\\") =~ ${CRUNCHY_NSS_USERNAME}:x:${USER_ID} ]]; then\\n echo \\"nss_wrapper: adding group\\"\\n group_tmp=\\"${NSS_WRAPPER_DIR}/group_tmp\\"\\n cp \\"${NSS_WRAPPER_GROUP}\\" \\"${group_tmp}\\"\\n sed -i \\"/${CRUNCHY_NSS_USERNAME}:x:/d\\" \\"${group_tmp}\\"\\n printf \'${CRUNCHY_NSS_USERNAME}:x:${USER_ID}:${CRUNCHY_NSS_USERNAME}\\\\n\' \\u003e\\u003e \\"${group_tmp}\\"\\n envsubst \\u003c \\"${group_tmp}\\" \\u003e \\"${NSS_WRAPPER_GROUP}\\"\\n rm \\"${group_tmp}\\"\\nelse\\n echo \\"nss_wrapper: group exists\\"\\nfi\\n\\n# export the nss_wrapper env vars\\n# define nss_wrapper directory and passwd \\u0026 group files that will be utilized by nss_wrapper\\nNSS_WRAPPER_DIR=\\"/tmp/nss_wrapper/${NSS_WRAPPER_SUBDIR}\\"\\nNSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_DIR}/passwd\\"\\nNSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_DIR}/group\\"\\n\\nexport LD_PRELOAD=/usr/lib64/libnss_wrapper.so\\nexport NSS_WRAPPER_PASSWD=\\"${NSS_WRAPPER_PASSWD}\\"\\nexport NSS_WRAPPER_GROUP=\\"${NSS_WRAPPER_GROUP}\\"\\n\\necho \\"nss_wrapper: environment configured\\"\\n"\n ],\n "image": "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres",\n "imagePullPolicy": "Always",\n "name": "nss-wrapper-init",\n "resources": {},\n "securityContext": {\n "allowPrivilegeEscalation": false,\n "capabilities": {\n "drop": [\n "ALL"\n ]\n },\n "privileged": false,\n "readOnlyRootFilesystem": true,\n "runAsNonRoot": true,\n "seccompProfile": {\n "type": "RuntimeDefault"\n }\n },\n "terminationMessagePath": "/dev/termination-log",\n "terminationMessagePolicy": "File",\n "volumeMounts": [\n {\n "mountPath": "/tmp",\n "name": "tmp"\n }\n ]\n }\n ],\n "restartPolicy": "Always",\n "schedulerName": "default-scheduler",\n "securityContext": {\n "fsGroup": 26,\n "fsGroupChangePolicy": "OnRootMismatch"\n },\n "serviceAccount": "cert-management-policy-instance",\n "serviceAccountName": "cert-management-policy-instance",\n "shareProcessNamespace": true,\n "terminationGracePeriodSeconds": 30,\n "topologySpreadConstraints": [\n {\n "labelSelector": {\n "matchExpressions": [\n {\n "key": "postgres-operator.crunchydata.com/data",\n "operator": "In",\n "values": [\n "postgres",\n "pgbackrest"\n ]\n }\n ],\n "matchLabels": {\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n }\n },\n "maxSkew": 1,\n "topologyKey": "kubernetes.io/hostname",\n "whenUnsatisfiable": "ScheduleAnyway"\n },\n {\n "labelSelector": {\n "matchExpressions": [\n {\n "key": "postgres-operator.crunchydata.com/data",\n "operator": "In",\n "values": [\n "postgres",\n "pgbackrest"\n ]\n }\n ],\n "matchLabels": {\n "postgres-operator.crunchydata.com/cluster": "cert-management-policy"\n }\n },\n "maxSkew": 1,\n "topologyKey": "topology.kubernetes.io/zone",\n "whenUnsatisfiable": "ScheduleAnyway"\n }\n ],\n "volumes": [\n {\n "name": "cert-volume",\n "projected": {\n "defaultMode": 384,\n "sources": [\n {\n "secret": {\n "items": [\n {\n "key": "tls.crt",\n "path": "tls.crt"\n },\n {\n "key": "tls.key",\n "path": "tls.key"\n },\n {\n "key": "ca.crt",\n "path": "ca.crt"\n }\n ],\n "name": "cert-management-policy-cluster-cert"\n }\n },\n {\n "secret": {\n "items": [\n {\n "key": "tls.crt",\n "path": "replication/tls.crt"\n },\n {\n "key": "tls.key",\n "path": "replication/tls.key"\n },\n {\n "key": "ca.crt",\n "path": "replication/ca.crt"\n }\n ],\n "name": "cert-management-policy-replication-cert"\n }\n }\n ]\n }\n },\n {\n "name": "postgres-data",\n "persistentVolumeClaim": {\n "claimName": "cert-management-policy-instance1-f59q-pgdata"\n }\n },\n {\n "downwardAPI": {\n "defaultMode": 420,\n "items": [\n {\n "path": "cpu_limit",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1m",\n "resource": "limits.cpu"\n }\n },\n {\n "path": "cpu_request",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1m",\n "resource": "requests.cpu"\n }\n },\n {\n "path": "mem_limit",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1Mi",\n "resource": "limits.memory"\n }\n },\n {\n "path": "mem_request",\n "resourceFieldRef": {\n "containerName": "database",\n "divisor": "1Mi",\n "resource": "requests.memory"\n }\n },\n {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.labels"\n },\n "path": "labels"\n },\n {\n "fieldRef": {\n "apiVersion": "v1",\n "fieldPath": "metadata.annotations"\n },\n "path": "annotations"\n }\n ]\n },\n "name": "database-containerinfo"\n },\n {\n "name": "pgbackrest-server",\n "projected": {\n "defaultMode": 420,\n "sources": [\n {\n "secret": {\n "items": [\n {\n "key": "pgbackrest-server.crt",\n "path": "server-tls.crt"\n },\n {\n "key": "pgbackrest-server.key",\n "mode": 384,\n "path": "server-tls.key"\n }\n ],\n "name": "cert-management-policy-instance1-f59q-certs"\n }\n }\n ]\n }\n },\n {\n "name": "pgbackrest-config",\n "projected": {\n "defaultMode": 420,\n "sources": [\n {\n "configMap": {\n "items": [\n {\n "key": "pgbackrest_instance.conf",\n "path": "pgbackrest_instance.conf"\n },\n {\n "key": "config-hash",\n "path": "config-hash"\n },\n {\n "key": "pgbackrest-server.conf",\n "path": "~postgres-operator_server.conf"\n }\n ],\n "name": "cert-management-policy-pgbackrest-config"\n }\n },\n {\n "secret": {\n "items": [\n {\n "key": "pgbackrest.ca-roots",\n "path": "~postgres-operator/tls-ca.crt"\n },\n {\n "key": "pgbackrest-client.crt",\n "path": "~postgres-operator/client-tls.crt"\n },\n {\n "key": "pgbackrest-client.key",\n "mode": 384,\n "path": "~postgres-operator/client-tls.key"\n }\n ],\n "name": "cert-management-policy-pgbackrest"\n }\n }\n ]\n }\n },\n {\n "name": "patroni-config",\n "projected": {\n "defaultMode": 420,\n "sources": [\n {\n "configMap": {\n "items": [\n {\n "key": "patroni.yaml",\n "path": "~postgres-operator_cluster.yaml"\n }\n ],\n "name": "cert-management-policy-config"\n }\n },\n {\n "configMap": {\n "items": [\n {\n "key": "patroni.yaml",\n "path": "~postgres-operator_instance.yaml"\n }\n ],\n "name": "cert-management-policy-instance1-f59q-config"\n }\n },\n {\n "secret": {\n "items": [\n {\n "key": "patroni.ca-roots",\n "path": "~postgres-operator/patroni.ca-roots"\n },\n {\n "key": "patroni.crt-combined",\n "path": "~postgres-operator/patroni.crt+key"\n }\n ],\n "name": "cert-management-policy-instance1-f59q-certs"\n }\n }\n ]\n }\n },\n {\n "emptyDir": {},\n "name": "crunchy-bin"\n },\n {\n "emptyDir": {\n "sizeLimit": "2Gi"\n },\n "name": "tmp"\n },\n {\n "emptyDir": {\n "medium": "Memory"\n },\n "name": "dshm"\n }\n ]\n }\n },\n "updateStrategy": {\n "type": "OnDelete"\n }\n },\n "status": {\n "availableReplicas": 1,\n "collisionCount": 0,\n "currentReplicas": 1,\n "currentRevision": "cert-management-policy-instance1-f59q-57b74cc8d7",\n "observedGeneration": 1,\n "readyReplicas": 1,\n "replicas": 1,\n "updateRevision": "cert-management-policy-instance1-f59q-57b74cc8d7",\n "updatedReplicas": 1\n }\n }\n ],\n "kind": "List",\n "metadata": {\n "resourceVersion": ""\n }\n}' logger.go:42: 20:34:11 | cert-management-policy/11-verify-secrets-unchanged | + jq -e '.items | length == 3' logger.go:42: 20:34:11 | cert-management-policy/11-verify-secrets-unchanged | ++ jq -r '.items[].metadata.name' logger.go:42: 20:34:11 | cert-management-policy/11-verify-secrets-unchanged | ++ sort logger.go:42: 20:34:11 | cert-management-policy/11-verify-secrets-unchanged | + instances=$'cert-management-policy-instance1-49wh\ncert-management-policy-instance1-67wh\ncert-management-policy-instance1-f59q' logger.go:42: 20:34:11 | cert-management-policy/11-verify-secrets-unchanged | + for instance in $instances logger.go:42: 20:34:11 | cert-management-policy/11-verify-secrets-unchanged | + assert_secret_unchanged cert-management-policy-instance1-49wh-certs logger.go:42: 20:34:11 | cert-management-policy/11-verify-secrets-unchanged | + local secret=cert-management-policy-instance1-49wh-certs logger.go:42: 20:34:11 | cert-management-policy/11-verify-secrets-unchanged | + local filter=.data logger.go:42: 20:34:11 | cert-management-policy/11-verify-secrets-unchanged | + local expected logger.go:42: 20:34:11 | cert-management-policy/11-verify-secrets-unchanged | + local actual logger.go:42: 20:34:11 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-instance1-49wh-certs -o 'jsonpath={.metadata.annotations.e2e\.percona\.com/secret-checksum}' logger.go:42: 20:34:12 | cert-management-policy/11-verify-secrets-unchanged | + expected=ebe89d1d123d6033b3c7f064d96818f918d9b77bf3551c9d593540f5cfebcda7 logger.go:42: 20:34:12 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-instance1-49wh-certs -o json logger.go:42: 20:34:12 | cert-management-policy/11-verify-secrets-unchanged | ++ jq --compact-output --sort-keys .data logger.go:42: 20:34:12 | cert-management-policy/11-verify-secrets-unchanged | ++ sha256sum logger.go:42: 20:34:12 | cert-management-policy/11-verify-secrets-unchanged | ++ awk '{print $1}' logger.go:42: 20:34:12 | cert-management-policy/11-verify-secrets-unchanged | + actual=ebe89d1d123d6033b3c7f064d96818f918d9b77bf3551c9d593540f5cfebcda7 logger.go:42: 20:34:12 | cert-management-policy/11-verify-secrets-unchanged | + [[ -z ebe89d1d123d6033b3c7f064d96818f918d9b77bf3551c9d593540f5cfebcda7 ]] logger.go:42: 20:34:12 | cert-management-policy/11-verify-secrets-unchanged | + [[ ebe89d1d123d6033b3c7f064d96818f918d9b77bf3551c9d593540f5cfebcda7 != ebe89d1d123d6033b3c7f064d96818f918d9b77bf3551c9d593540f5cfebcda7 ]] logger.go:42: 20:34:12 | cert-management-policy/11-verify-secrets-unchanged | + for instance in $instances logger.go:42: 20:34:12 | cert-management-policy/11-verify-secrets-unchanged | + assert_secret_unchanged cert-management-policy-instance1-67wh-certs logger.go:42: 20:34:12 | cert-management-policy/11-verify-secrets-unchanged | + local secret=cert-management-policy-instance1-67wh-certs logger.go:42: 20:34:12 | cert-management-policy/11-verify-secrets-unchanged | + local filter=.data logger.go:42: 20:34:12 | cert-management-policy/11-verify-secrets-unchanged | + local expected logger.go:42: 20:34:12 | cert-management-policy/11-verify-secrets-unchanged | + local actual logger.go:42: 20:34:12 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-instance1-67wh-certs -o 'jsonpath={.metadata.annotations.e2e\.percona\.com/secret-checksum}' logger.go:42: 20:34:13 | cert-management-policy/11-verify-secrets-unchanged | + expected=0990b7a1dee5a7b1384b103c399216749e4c5d537e9705c01ec6c55c0fd3bf38 logger.go:42: 20:34:13 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-instance1-67wh-certs -o json logger.go:42: 20:34:13 | cert-management-policy/11-verify-secrets-unchanged | ++ jq --compact-output --sort-keys .data logger.go:42: 20:34:13 | cert-management-policy/11-verify-secrets-unchanged | ++ sha256sum logger.go:42: 20:34:13 | cert-management-policy/11-verify-secrets-unchanged | ++ awk '{print $1}' logger.go:42: 20:34:13 | cert-management-policy/11-verify-secrets-unchanged | + actual=0990b7a1dee5a7b1384b103c399216749e4c5d537e9705c01ec6c55c0fd3bf38 logger.go:42: 20:34:13 | cert-management-policy/11-verify-secrets-unchanged | + [[ -z 0990b7a1dee5a7b1384b103c399216749e4c5d537e9705c01ec6c55c0fd3bf38 ]] logger.go:42: 20:34:13 | cert-management-policy/11-verify-secrets-unchanged | + [[ 0990b7a1dee5a7b1384b103c399216749e4c5d537e9705c01ec6c55c0fd3bf38 != 0990b7a1dee5a7b1384b103c399216749e4c5d537e9705c01ec6c55c0fd3bf38 ]] logger.go:42: 20:34:13 | cert-management-policy/11-verify-secrets-unchanged | + for instance in $instances logger.go:42: 20:34:13 | cert-management-policy/11-verify-secrets-unchanged | + assert_secret_unchanged cert-management-policy-instance1-f59q-certs logger.go:42: 20:34:13 | cert-management-policy/11-verify-secrets-unchanged | + local secret=cert-management-policy-instance1-f59q-certs logger.go:42: 20:34:13 | cert-management-policy/11-verify-secrets-unchanged | + local filter=.data logger.go:42: 20:34:13 | cert-management-policy/11-verify-secrets-unchanged | + local expected logger.go:42: 20:34:13 | cert-management-policy/11-verify-secrets-unchanged | + local actual logger.go:42: 20:34:13 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-instance1-f59q-certs -o 'jsonpath={.metadata.annotations.e2e\.percona\.com/secret-checksum}' logger.go:42: 20:34:14 | cert-management-policy/11-verify-secrets-unchanged | + expected=aa8f865e8aa399e649a0854e2a71411989bba8a1a0480c1aafbe162ace04f305 logger.go:42: 20:34:14 | cert-management-policy/11-verify-secrets-unchanged | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-instance1-f59q-certs -o json logger.go:42: 20:34:14 | cert-management-policy/11-verify-secrets-unchanged | ++ jq --compact-output --sort-keys .data logger.go:42: 20:34:14 | cert-management-policy/11-verify-secrets-unchanged | ++ sha256sum logger.go:42: 20:34:14 | cert-management-policy/11-verify-secrets-unchanged | ++ awk '{print $1}' logger.go:42: 20:34:14 | cert-management-policy/11-verify-secrets-unchanged | + actual=aa8f865e8aa399e649a0854e2a71411989bba8a1a0480c1aafbe162ace04f305 logger.go:42: 20:34:14 | cert-management-policy/11-verify-secrets-unchanged | + [[ -z aa8f865e8aa399e649a0854e2a71411989bba8a1a0480c1aafbe162ace04f305 ]] logger.go:42: 20:34:14 | cert-management-policy/11-verify-secrets-unchanged | + [[ aa8f865e8aa399e649a0854e2a71411989bba8a1a0480c1aafbe162ace04f305 != aa8f865e8aa399e649a0854e2a71411989bba8a1a0480c1aafbe162ace04f305 ]] logger.go:42: 20:34:14 | cert-management-policy/11-verify-secrets-unchanged | test step completed 11-verify-secrets-unchanged logger.go:42: 20:34:14 | cert-management-policy/12-recreate-cluster | starting test step 12-recreate-cluster logger.go:42: 20:34:14 | cert-management-policy/12-recreate-cluster | running command: [sh -c set -o errexit set -o xtrace source ../../functions cluster="cert-management-policy" kubectl -n "$NAMESPACE" delete perconapgcluster "$cluster" --wait=true kubectl -n "$NAMESPACE" delete postgrescluster "$cluster" --wait=true --ignore-not-found kubectl -n "$NAMESPACE" delete pvc \ -l postgres-operator.crunchydata.com/cluster="$cluster" --wait=true kubectl -n "$NAMESPACE" delete secret \ -l postgres-operator.crunchydata.com/cluster="$cluster" --wait=true get_cr "$cluster" \ | yq '.spec.tls.certManagementPolicy = "operatorProvidedOnly"' \ | yq '.spec.tls.issuerConf = {"name":"cert-management-policy-ignored-issuer","kind":"ClusterIssuer"}' \ | yq '.spec.proxy.pgBouncer.replicas = 1' \ | yq '.spec.instances[].replicas = 1' \ | kubectl -n "$NAMESPACE" apply -f -] logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | + source ../../functions logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ realpath ../../.. logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | ++ CERT_MANAGER_VER=1.20.2 logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | ++ CHAOS_MESH_VER=2.5.1 logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | ++ BUSYBOX_VER=1.36 logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | ++++ pwd logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | ++ test_name=cert-management-policy logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/vars.sh logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | ++++ git rev-parse --abbrev-ref HEAD logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ export GIT_BRANCH=PR-1812 logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ GIT_BRANCH=PR-1812 logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ export VERSION=PR-1812-09e4007fd logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ VERSION=PR-1812-09e4007fd logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ export SKIP_TEST_WARNINGS=true logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ SKIP_TEST_WARNINGS=true logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ export K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ export K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ export K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ export K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | +++ [[ -z '' ]] logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | ++++ detect_k8s_platform logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | ++++ local detected_platform logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | ++++ local xtrace_enabled=false logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | ++++ [[ -o xtrace ]] logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | ++++ xtrace_enabled=true logger.go:42: 20:34:15 | cert-management-policy/12-recreate-cluster | ++++ set +o xtrace logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ PLATFORM=gke logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export PLATFORM logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ ! -n '' ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ -n '' ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export PG_VER=18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ PG_VER=18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export PG_DISTRIBUTION= logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ PG_DISTRIBUTION= logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ '' == community ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export BUCKET=pg-operator-testing logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ BUCKET=pg-operator-testing logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export PGOV1_TAG=1.4.0 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ PGOV1_TAG=1.4.0 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export PGOV1_VER=14 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ PGOV1_VER=14 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export CPGO_VERSION=5.8.7 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ CPGO_VERSION=5.8.7 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export MINIO_VER=5.4.0 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ MINIO_VER=5.4.0 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export VAULT_VER=0.32.0 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ VAULT_VER=0.32.0 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export REGISTRY_NAME=docker.io logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ REGISTRY_NAME=docker.io logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | ++++ printenv logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | ++++ grep -E '^IMAGE' logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | ++++ awk -F= '{print $1}' logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | ++++ eval 'echo $IMAGE_BACKREST' logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | ++++ eval 'echo $IMAGE' logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ var_value=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == docker.io/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == percona/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == perconalab/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | ++++ eval 'echo $IMAGE_UPGRADE' logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++++ echo perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | ++++ eval 'echo $IMAGE_LOGCOLLECTOR' logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++++ echo perconalab/fluentbit:main-logcollector logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ var_value=perconalab/fluentbit:main-logcollector logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | ++++ eval 'echo $IMAGE_BASE' logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++++ echo perconalab/percona-postgresql-operator logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ var_value=perconalab/percona-postgresql-operator logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator == percona/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | ++++ eval 'echo $IMAGE_PGBOUNCER' logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | ++++ eval 'echo $IMAGE_POSTGRESQL' logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | ++++ eval 'echo $IMAGE_PMM_SERVER' logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++++ echo perconalab/pmm-server:3-dev-latest logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ var_value=perconalab/pmm-server:3-dev-latest logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | ++++ eval 'echo $IMAGE_PMM_CLIENT' logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++++ echo perconalab/pmm-client:3-dev-latest logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ var_value=perconalab/pmm-client:3-dev-latest logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]] logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | ++++ which gdate logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | ++++ which date logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ date=/usr/sbin/date logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | ++++ which gsed logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | ++++ which sed logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | +++ sed=/usr/sbin/sed logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | + cluster=cert-management-policy logger.go:42: 20:34:16 | cert-management-policy/12-recreate-cluster | + kubectl -n kuttl-test-stable-swift delete perconapgcluster cert-management-policy --wait=true logger.go:42: 20:34:17 | cert-management-policy/12-recreate-cluster | perconapgcluster.pgv2.percona.com "cert-management-policy" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:34:17 | cert-management-policy/12-recreate-cluster | + kubectl -n kuttl-test-stable-swift delete postgrescluster cert-management-policy --wait=true --ignore-not-found logger.go:42: 20:34:18 | cert-management-policy/12-recreate-cluster | postgrescluster.upstream.pgv2.percona.com "cert-management-policy" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:34:24 | cert-management-policy/12-recreate-cluster | + kubectl -n kuttl-test-stable-swift delete pvc -l postgres-operator.crunchydata.com/cluster=cert-management-policy --wait=true logger.go:42: 20:34:25 | cert-management-policy/12-recreate-cluster | persistentvolumeclaim "cert-management-policy-instance1-49wh-pgdata" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:34:25 | cert-management-policy/12-recreate-cluster | persistentvolumeclaim "cert-management-policy-instance1-67wh-pgdata" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:34:25 | cert-management-policy/12-recreate-cluster | persistentvolumeclaim "cert-management-policy-instance1-f59q-pgdata" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:34:25 | cert-management-policy/12-recreate-cluster | persistentvolumeclaim "cert-management-policy-repo1" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:34:26 | cert-management-policy/12-recreate-cluster | + kubectl -n kuttl-test-stable-swift delete secret -l postgres-operator.crunchydata.com/cluster=cert-management-policy --wait=true logger.go:42: 20:34:27 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-cluster-ca-cert" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:34:27 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-cluster-cert" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:34:27 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-instance1-49wh-certs" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:34:27 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-instance1-67wh-certs" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:34:27 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-instance1-f59q-certs" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:34:27 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-pgbackrest" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:34:28 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-pgbouncer" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:34:28 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-pguser-cert-management-policy" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:34:28 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-pguser-postgres" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:34:28 | cert-management-policy/12-recreate-cluster | secret "cert-management-policy-replication-cert" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + get_cr cert-management-policy logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + local cr_name=cert-management-policy logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + yq '.spec.tls.certManagementPolicy = "operatorProvidedOnly"' logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + local repo_path= logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + local source_path= logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + local platform=gke logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + local cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf/cert-management-policy.yaml logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + local platform_cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf/cert-management-policy-gke.yaml logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + local spaces_cr_file=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf/cert-management-policy-spaces.yaml logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + [[ -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf/cert-management-policy-gke.yaml ]] logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + [[ gke == doks ]] logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + crs=('/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy/cr.yaml') logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + local crs logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + [[ -f /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf/cert-management-policy.yaml ]] logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + yq '.spec.tls.issuerConf = {"name":"cert-management-policy-ignored-issuer","kind":"ClusterIssuer"}' logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + yq eval-all $'\n\t\tselect(fileIndex == 0) * (select(fileIndex == 1) // {}) |\n\t\t.metadata.name = "cert-management-policy" |\n\t\t.metadata.labels = {"e2e":"cert-management-policy"} |\n\t\t.spec.postgresVersion = 18 |\n\t\t.spec.users += [{"name":"postgres","password":{"type":"AlphaNumeric"}}] |\n\t\t.spec.users += [{"name":"cert-management-policy","password":{"type":"AlphaNumeric"}}] |\n\t\t.spec.image = "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" |\n\t\t.spec.initContainer.image = "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd" |\n\t\t.spec.backups.pgbackrest.image = "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" |\n\t\t.spec.proxy.pgBouncer.image = "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" |\n\t\t.spec.logcollector.image = "docker.io/perconalab/fluentbit:main-logcollector" |\n\t\t.spec.pmm.image = "docker.io/perconalab/pmm-client:3-dev-latest" |\n\t\t.spec.pmm.secret = "cert-management-policy-pmm-secret" |\n\t\t.spec.pmm.customClusterName = "cert-management-policy-pmm-custom-name" |\n\t\t.spec.pmm.postgresParams = "--environment=dev-postgres"\n\t' /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy/cr.yaml logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + yq '.spec.proxy.pgBouncer.replicas = 1' logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + yq '.spec.instances[].replicas = 1' logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + kubectl -n kuttl-test-stable-swift apply -f - logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + /usr/sbin/sed -i 's|||g' /tmp/kuttl/pg/cert-management-policy/cr.yaml logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + /usr/sbin/sed -i 's|||g' /tmp/kuttl/pg/cert-management-policy/cr.yaml logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + /usr/sbin/sed -i 's||pg-operator-testing|g' /tmp/kuttl/pg/cert-management-policy/cr.yaml logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + /usr/sbin/sed -i 's||docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd|g' /tmp/kuttl/pg/cert-management-policy/cr.yaml logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + [[ gke == openshift ]] logger.go:42: 20:34:29 | cert-management-policy/12-recreate-cluster | + cat /tmp/kuttl/pg/cert-management-policy/cr.yaml logger.go:42: 20:34:31 | cert-management-policy/12-recreate-cluster | perconapgcluster.pgv2.percona.com/cert-management-policy created logger.go:42: 20:34:31 | cert-management-policy/12-recreate-cluster | test step completed 12-recreate-cluster logger.go:42: 20:34:31 | cert-management-policy/13- | starting test step 13- logger.go:42: 20:35:05 | cert-management-policy/13- | test step completed 13- logger.go:42: 20:35:05 | cert-management-policy/14-verify-operator-provided-only | starting test step 14-verify-operator-provided-only logger.go:42: 20:35:05 | cert-management-policy/14-verify-operator-provided-only | running command: [sh -c set -o errexit set -o xtrace cluster="cert-management-policy" verify_secret_data() { local secret="$1" shift for key in "$@"; do local escaped_key="${key//./\\.}" local value value=$(kubectl -n "$NAMESPACE" get secret "$secret" \ -o jsonpath="{.data.${escaped_key}}") if [[ -z "$value" ]]; then echo "Secret $secret is missing key: $key" >&2 return 1 fi done } verify_secret_data "${cluster}-cluster-ca-cert" root.crt root.key verify_secret_data "${cluster}-cluster-cert" tls.crt tls.key ca.crt verify_secret_data "${cluster}-replication-cert" tls.crt tls.key ca.crt verify_secret_data "${cluster}-pgbackrest" pgbackrest.ca-roots pgbackrest-client.crt pgbackrest-client.key verify_secret_data "${cluster}-pgbouncer" pgbouncer-frontend.ca-roots pgbouncer-frontend.crt pgbouncer-frontend.key for secret in \ "${cluster}-cluster-ca-cert" \ "${cluster}-cluster-cert" \ "${cluster}-replication-cert" \ "${cluster}-pgbackrest" \ "${cluster}-pgbouncer"; do annotation=$(kubectl -n "$NAMESPACE" get secret "$secret" \ -o jsonpath='{.metadata.annotations.cert-manager\.io/certificate-name}' 2>/dev/null || true) if [[ -n "$annotation" ]]; then echo "Secret $secret is unexpectedly managed by cert-manager" >&2 exit 1 fi done instance_sts=$(kubectl -n "$NAMESPACE" get sts \ -l postgres-operator.crunchydata.com/cluster="$cluster",postgres-operator.crunchydata.com/instance-set=instance1 \ -o jsonpath='{.items[*].metadata.name}') if [[ -z "$instance_sts" ]]; then echo "No PostgreSQL instance StatefulSet found for $cluster" >&2 exit 1 fi for sts_name in $instance_sts; do verify_secret_data "${sts_name}-certs" dns.crt dns.key patroni.ca-roots patroni.crt-combined annotation=$(kubectl -n "$NAMESPACE" get secret "${sts_name}-certs" \ -o jsonpath='{.metadata.annotations.cert-manager\.io/certificate-name}' 2>/dev/null || true) if [[ -n "$annotation" ]]; then echo "Instance Secret ${sts_name}-certs is unexpectedly managed by cert-manager" >&2 exit 1 fi done certificates=$(kubectl -n "$NAMESPACE" get certificate \ -l postgres-operator.crunchydata.com/cluster="$cluster" \ -o name) if [[ -n "$certificates" ]]; then echo "Certificate resources were generated in operatorProvidedOnly mode: $certificates" >&2 exit 1 fi issuers=$(kubectl -n "$NAMESPACE" get issuer -o json \ | jq -r '.items[].metadata.name | select(startswith("cert-management-policy-"))') if [[ -n "$issuers" ]]; then echo "Issuer resources were generated in operatorProvidedOnly mode: $issuers" >&2 exit 1 fi if kubectl get clusterissuer cert-management-policy-ignored-issuer >/dev/null 2>&1; then echo "operatorProvidedOnly created the ClusterIssuer from issuerConf" >&2 exit 1 fi] logger.go:42: 20:35:05 | cert-management-policy/14-verify-operator-provided-only | + cluster=cert-management-policy logger.go:42: 20:35:05 | cert-management-policy/14-verify-operator-provided-only | + verify_secret_data cert-management-policy-cluster-ca-cert root.crt root.key logger.go:42: 20:35:05 | cert-management-policy/14-verify-operator-provided-only | + local secret=cert-management-policy-cluster-ca-cert logger.go:42: 20:35:05 | cert-management-policy/14-verify-operator-provided-only | + shift logger.go:42: 20:35:05 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@" logger.go:42: 20:35:05 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=root\.crt' logger.go:42: 20:35:05 | cert-management-policy/14-verify-operator-provided-only | + local value logger.go:42: 20:35:05 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-cluster-ca-cert -o 'jsonpath={.data.root\.crt}' logger.go:42: 20:35:06 | cert-management-policy/14-verify-operator-provided-only | + value=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 logger.go:42: 20:35:06 | cert-management-policy/14-verify-operator-provided-only | + [[ -z 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 ]] logger.go:42: 20:35:06 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@" logger.go:42: 20:35:06 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=root\.key' logger.go:42: 20:35:06 | cert-management-policy/14-verify-operator-provided-only | + local value logger.go:42: 20:35:06 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-cluster-ca-cert -o 'jsonpath={.data.root\.key}' logger.go:42: 20:35:06 | cert-management-policy/14-verify-operator-provided-only | + value=LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU00aVl2eFQxZi9kM0ZwUXdvS0d0dVlKY0lZYVRhblF5dUlyVHg3VDhFWXRvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFeVFUbSsrNlBPMnZqckxYSHZPckNIKzFxd3Z0QStsKyswWGJSeHpMTUdrRzgvWW9iNzYxOQpIWEtBMTQxU2lwL28vN0hmS1ZEZFBMOStMU0d3U2Rza3h3PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= logger.go:42: 20:35:06 | cert-management-policy/14-verify-operator-provided-only | + [[ -z LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU00aVl2eFQxZi9kM0ZwUXdvS0d0dVlKY0lZYVRhblF5dUlyVHg3VDhFWXRvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFeVFUbSsrNlBPMnZqckxYSHZPckNIKzFxd3Z0QStsKyswWGJSeHpMTUdrRzgvWW9iNzYxOQpIWEtBMTQxU2lwL28vN0hmS1ZEZFBMOStMU0d3U2Rza3h3PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= ]] logger.go:42: 20:35:06 | cert-management-policy/14-verify-operator-provided-only | + verify_secret_data cert-management-policy-cluster-cert tls.crt tls.key ca.crt logger.go:42: 20:35:06 | cert-management-policy/14-verify-operator-provided-only | + local secret=cert-management-policy-cluster-cert logger.go:42: 20:35:06 | cert-management-policy/14-verify-operator-provided-only | + shift logger.go:42: 20:35:06 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@" logger.go:42: 20:35:06 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=tls\.crt' logger.go:42: 20:35:06 | cert-management-policy/14-verify-operator-provided-only | + local value logger.go:42: 20:35:06 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-cluster-cert -o 'jsonpath={.data.tls\.crt}' logger.go:42: 20:35:07 | cert-management-policy/14-verify-operator-provided-only | + value=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 logger.go:42: 20:35:07 | cert-management-policy/14-verify-operator-provided-only | + [[ -z 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 ]] logger.go:42: 20:35:07 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@" logger.go:42: 20:35:07 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=tls\.key' logger.go:42: 20:35:07 | cert-management-policy/14-verify-operator-provided-only | + local value logger.go:42: 20:35:07 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-cluster-cert -o 'jsonpath={.data.tls\.key}' logger.go:42: 20:35:07 | cert-management-policy/14-verify-operator-provided-only | + value=LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUw2SVBjeWN5T2hHQTFQRmhoenFBb1JnQWN6bWJjNGhtRTdvaS9tdThOOW5vQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFeUdDZHVwbElvUXBYOHp4emNKR1lPY3BRdUhYeWxjbzdlR0RGTWFQeVEzOGxWZlk2cXZrWQo1NStHVnY2UTlYZEVGUUxQMVZRdmMzZXJZZkhwblpnMnRBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= logger.go:42: 20:35:07 | cert-management-policy/14-verify-operator-provided-only | + [[ -z LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUw2SVBjeWN5T2hHQTFQRmhoenFBb1JnQWN6bWJjNGhtRTdvaS9tdThOOW5vQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFeUdDZHVwbElvUXBYOHp4emNKR1lPY3BRdUhYeWxjbzdlR0RGTWFQeVEzOGxWZlk2cXZrWQo1NStHVnY2UTlYZEVGUUxQMVZRdmMzZXJZZkhwblpnMnRBPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= ]] logger.go:42: 20:35:07 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@" logger.go:42: 20:35:07 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=ca\.crt' logger.go:42: 20:35:07 | cert-management-policy/14-verify-operator-provided-only | + local value logger.go:42: 20:35:07 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-cluster-cert -o 'jsonpath={.data.ca\.crt}' logger.go:42: 20:35:08 | cert-management-policy/14-verify-operator-provided-only | + value=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 logger.go:42: 20:35:08 | cert-management-policy/14-verify-operator-provided-only | + [[ -z LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJnakNDQVNlZ0F3SUJBZ0lRVkJCRWE0dE1SaU5rQ3JsTTNBZHZtakFLQmdncWhrak9QUVFEQXpBZk1SMHcKR3dZRFZRUURFeFJ3YjNOMFozSmxjeTF2Y0dWeVlYUnZjaTFqWVRBZUZ3MHlOakE1TURFeE9UTTBNekZhRncwegpOakE0TWpreU1ETTBNekZhTUI4eEhUQWJCZ05WQkFNVEZIQnZjM1JuY21WekxXOXdaWEpoZEc5eUxXTmhNRmt3CkV3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFeVFUbSsrNlBPMnZqckxYSHZPckNIKzFxd3Z0QStsKysKMFhiUnh6TE1Ha0c4L1lvYjc2MTlIWEtBMTQxU2lwL28vN0hmS1ZEZFBMOStMU0d3U2Rza3g2TkZNRU13RGdZRApWUjBQQVFIL0JBUURBZ0VHTUJJR0ExVWRFd0VCL3dRSU1BWUJBZjhDQVFBd0hRWURWUjBPQkJZRUZKdWZyZFZhCmlVRXJZRzZtQUJlbVhCVDJISzNJTUFvR0NDcUdTTTQ5QkFNREEwa0FNRVlDSVFDOVBRanlnOW5QTklmamp0L2wKZnFUa0VPZ3hvNENOa0ZQMm83aFdKYmJmM1FJaEFMNVZTS3c2QXVCaUdaM0RHKytvNUxWSzBYRm1jSGR1QlYyUwpzWWdzRHF4MgotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== ]] logger.go:42: 20:35:08 | cert-management-policy/14-verify-operator-provided-only | + verify_secret_data cert-management-policy-replication-cert tls.crt tls.key ca.crt logger.go:42: 20:35:08 | cert-management-policy/14-verify-operator-provided-only | + local secret=cert-management-policy-replication-cert logger.go:42: 20:35:08 | cert-management-policy/14-verify-operator-provided-only | + shift logger.go:42: 20:35:08 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@" logger.go:42: 20:35:08 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=tls\.crt' logger.go:42: 20:35:08 | cert-management-policy/14-verify-operator-provided-only | + local value logger.go:42: 20:35:08 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-replication-cert -o 'jsonpath={.data.tls\.crt}' logger.go:42: 20:35:08 | cert-management-policy/14-verify-operator-provided-only | + value=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 logger.go:42: 20:35:08 | cert-management-policy/14-verify-operator-provided-only | + [[ -z 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 ]] logger.go:42: 20:35:08 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@" logger.go:42: 20:35:08 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=tls\.key' logger.go:42: 20:35:08 | cert-management-policy/14-verify-operator-provided-only | + local value logger.go:42: 20:35:08 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-replication-cert -o 'jsonpath={.data.tls\.key}' logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | + value=LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU5ubUNFcnhDYSt1KzMwOTFhREx6OTI3SEhMNDlIRm1PUmNwL1diRXhTVGZvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFdkZwcWlOWVQ4N2kwSkxVWjJ5UFhNbFkwd3V5c0hCc00zczhIOWYzM3hQaUJqcVVJNWFkYQo3WTVCemNSMEpycHNCNWo2OS8wK3NxNDl5akV5dkhSUElRPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | + [[ -z LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU5ubUNFcnhDYSt1KzMwOTFhREx6OTI3SEhMNDlIRm1PUmNwL1diRXhTVGZvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFdkZwcWlOWVQ4N2kwSkxVWjJ5UFhNbFkwd3V5c0hCc00zczhIOWYzM3hQaUJqcVVJNWFkYQo3WTVCemNSMEpycHNCNWo2OS8wK3NxNDl5akV5dkhSUElRPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= ]] logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@" logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=ca\.crt' logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | + local value logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-replication-cert -o 'jsonpath={.data.ca\.crt}' logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | + value=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 logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | + [[ -z LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJnakNDQVNlZ0F3SUJBZ0lRVkJCRWE0dE1SaU5rQ3JsTTNBZHZtakFLQmdncWhrak9QUVFEQXpBZk1SMHcKR3dZRFZRUURFeFJ3YjNOMFozSmxjeTF2Y0dWeVlYUnZjaTFqWVRBZUZ3MHlOakE1TURFeE9UTTBNekZhRncwegpOakE0TWpreU1ETTBNekZhTUI4eEhUQWJCZ05WQkFNVEZIQnZjM1JuY21WekxXOXdaWEpoZEc5eUxXTmhNRmt3CkV3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFeVFUbSsrNlBPMnZqckxYSHZPckNIKzFxd3Z0QStsKysKMFhiUnh6TE1Ha0c4L1lvYjc2MTlIWEtBMTQxU2lwL28vN0hmS1ZEZFBMOStMU0d3U2Rza3g2TkZNRU13RGdZRApWUjBQQVFIL0JBUURBZ0VHTUJJR0ExVWRFd0VCL3dRSU1BWUJBZjhDQVFBd0hRWURWUjBPQkJZRUZKdWZyZFZhCmlVRXJZRzZtQUJlbVhCVDJISzNJTUFvR0NDcUdTTTQ5QkFNREEwa0FNRVlDSVFDOVBRanlnOW5QTklmamp0L2wKZnFUa0VPZ3hvNENOa0ZQMm83aFdKYmJmM1FJaEFMNVZTS3c2QXVCaUdaM0RHKytvNUxWSzBYRm1jSGR1QlYyUwpzWWdzRHF4MgotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== ]] logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | + verify_secret_data cert-management-policy-pgbackrest pgbackrest.ca-roots pgbackrest-client.crt pgbackrest-client.key logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | + local secret=cert-management-policy-pgbackrest logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | + shift logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@" logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=pgbackrest\.ca-roots' logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | + local value logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbackrest -o 'jsonpath={.data.pgbackrest\.ca-roots}' logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | + value=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 logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | + [[ -z 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 ]] logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@" logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=pgbackrest-client\.crt' logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | + local value logger.go:42: 20:35:09 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbackrest -o 'jsonpath={.data.pgbackrest-client\.crt}' logger.go:42: 20:35:10 | cert-management-policy/14-verify-operator-provided-only | + value=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 logger.go:42: 20:35:10 | cert-management-policy/14-verify-operator-provided-only | + [[ -z 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 ]] logger.go:42: 20:35:10 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@" logger.go:42: 20:35:10 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=pgbackrest-client\.key' logger.go:42: 20:35:10 | cert-management-policy/14-verify-operator-provided-only | + local value logger.go:42: 20:35:10 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbackrest -o 'jsonpath={.data.pgbackrest-client\.key}' logger.go:42: 20:35:10 | cert-management-policy/14-verify-operator-provided-only | + value=LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU1QQVl3TC9EYkgwL2RIdmlSQW84Y2Z5d3NvbWNqMlNJL1dIenEzbUlZaG9vQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFcGJyU1h3dDExZlNmZlI2aHZPT0R0dVVNQmpPbFhlZW5wYmZ0WGpIQ1ZCSHZ5ckdpeDc0RAprMU1mcGNiTTQyYjFXa3ozMk9HWE9CUVFLcnJFQUltMS9RPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= logger.go:42: 20:35:10 | cert-management-policy/14-verify-operator-provided-only | + [[ -z LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSU1QQVl3TC9EYkgwL2RIdmlSQW84Y2Z5d3NvbWNqMlNJL1dIenEzbUlZaG9vQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFcGJyU1h3dDExZlNmZlI2aHZPT0R0dVVNQmpPbFhlZW5wYmZ0WGpIQ1ZCSHZ5ckdpeDc0RAprMU1mcGNiTTQyYjFXa3ozMk9HWE9CUVFLcnJFQUltMS9RPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= ]] logger.go:42: 20:35:10 | cert-management-policy/14-verify-operator-provided-only | + verify_secret_data cert-management-policy-pgbouncer pgbouncer-frontend.ca-roots pgbouncer-frontend.crt pgbouncer-frontend.key logger.go:42: 20:35:10 | cert-management-policy/14-verify-operator-provided-only | + local secret=cert-management-policy-pgbouncer logger.go:42: 20:35:10 | cert-management-policy/14-verify-operator-provided-only | + shift logger.go:42: 20:35:10 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@" logger.go:42: 20:35:10 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=pgbouncer-frontend\.ca-roots' logger.go:42: 20:35:10 | cert-management-policy/14-verify-operator-provided-only | + local value logger.go:42: 20:35:10 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o 'jsonpath={.data.pgbouncer-frontend\.ca-roots}' logger.go:42: 20:35:11 | cert-management-policy/14-verify-operator-provided-only | + value=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 logger.go:42: 20:35:11 | cert-management-policy/14-verify-operator-provided-only | + [[ -z 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 ]] logger.go:42: 20:35:11 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@" logger.go:42: 20:35:11 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=pgbouncer-frontend\.crt' logger.go:42: 20:35:11 | cert-management-policy/14-verify-operator-provided-only | + local value logger.go:42: 20:35:11 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o 'jsonpath={.data.pgbouncer-frontend\.crt}' logger.go:42: 20:35:11 | cert-management-policy/14-verify-operator-provided-only | + value=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 logger.go:42: 20:35:11 | cert-management-policy/14-verify-operator-provided-only | + [[ -z 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 ]] logger.go:42: 20:35:11 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@" logger.go:42: 20:35:11 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=pgbouncer-frontend\.key' logger.go:42: 20:35:11 | cert-management-policy/14-verify-operator-provided-only | + local value logger.go:42: 20:35:11 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o 'jsonpath={.data.pgbouncer-frontend\.key}' logger.go:42: 20:35:12 | cert-management-policy/14-verify-operator-provided-only | + value=LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUd1YUNzUGY5NnlnK2lDNHFVWDYrSHJCYTdYclVFcU03QzB6K2F0TlZwdjJvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFZ2I3Q1dwL2c2eEg3dndjSjhsWWFSMUEza1lwQy81NHlqN2FlUzUwdDZ3UXBYQ1ZsZ0pHYQplZ2dzektoamk4M21rR3ZZSUdpcjg3Y25IcHRTY0pqTm53PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= logger.go:42: 20:35:12 | cert-management-policy/14-verify-operator-provided-only | + [[ -z LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUd1YUNzUGY5NnlnK2lDNHFVWDYrSHJCYTdYclVFcU03QzB6K2F0TlZwdjJvQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFZ2I3Q1dwL2c2eEg3dndjSjhsWWFSMUEza1lwQy81NHlqN2FlUzUwdDZ3UXBYQ1ZsZ0pHYQplZ2dzektoamk4M21rR3ZZSUdpcjg3Y25IcHRTY0pqTm53PT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= ]] logger.go:42: 20:35:12 | cert-management-policy/14-verify-operator-provided-only | + for secret in "${cluster}-cluster-ca-cert" "${cluster}-cluster-cert" "${cluster}-replication-cert" "${cluster}-pgbackrest" "${cluster}-pgbouncer" logger.go:42: 20:35:12 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-cluster-ca-cert -o 'jsonpath={.metadata.annotations.cert-manager\.io/certificate-name}' logger.go:42: 20:35:12 | cert-management-policy/14-verify-operator-provided-only | + annotation= logger.go:42: 20:35:12 | cert-management-policy/14-verify-operator-provided-only | + [[ -n '' ]] logger.go:42: 20:35:12 | cert-management-policy/14-verify-operator-provided-only | + for secret in "${cluster}-cluster-ca-cert" "${cluster}-cluster-cert" "${cluster}-replication-cert" "${cluster}-pgbackrest" "${cluster}-pgbouncer" logger.go:42: 20:35:12 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-cluster-cert -o 'jsonpath={.metadata.annotations.cert-manager\.io/certificate-name}' logger.go:42: 20:35:13 | cert-management-policy/14-verify-operator-provided-only | + annotation= logger.go:42: 20:35:13 | cert-management-policy/14-verify-operator-provided-only | + [[ -n '' ]] logger.go:42: 20:35:13 | cert-management-policy/14-verify-operator-provided-only | + for secret in "${cluster}-cluster-ca-cert" "${cluster}-cluster-cert" "${cluster}-replication-cert" "${cluster}-pgbackrest" "${cluster}-pgbouncer" logger.go:42: 20:35:13 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-replication-cert -o 'jsonpath={.metadata.annotations.cert-manager\.io/certificate-name}' logger.go:42: 20:35:13 | cert-management-policy/14-verify-operator-provided-only | + annotation= logger.go:42: 20:35:13 | cert-management-policy/14-verify-operator-provided-only | + [[ -n '' ]] logger.go:42: 20:35:13 | cert-management-policy/14-verify-operator-provided-only | + for secret in "${cluster}-cluster-ca-cert" "${cluster}-cluster-cert" "${cluster}-replication-cert" "${cluster}-pgbackrest" "${cluster}-pgbouncer" logger.go:42: 20:35:13 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbackrest -o 'jsonpath={.metadata.annotations.cert-manager\.io/certificate-name}' logger.go:42: 20:35:14 | cert-management-policy/14-verify-operator-provided-only | + annotation= logger.go:42: 20:35:14 | cert-management-policy/14-verify-operator-provided-only | + [[ -n '' ]] logger.go:42: 20:35:14 | cert-management-policy/14-verify-operator-provided-only | + for secret in "${cluster}-cluster-ca-cert" "${cluster}-cluster-cert" "${cluster}-replication-cert" "${cluster}-pgbackrest" "${cluster}-pgbouncer" logger.go:42: 20:35:14 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-pgbouncer -o 'jsonpath={.metadata.annotations.cert-manager\.io/certificate-name}' logger.go:42: 20:35:14 | cert-management-policy/14-verify-operator-provided-only | + annotation= logger.go:42: 20:35:14 | cert-management-policy/14-verify-operator-provided-only | + [[ -n '' ]] logger.go:42: 20:35:14 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get sts -l postgres-operator.crunchydata.com/cluster=cert-management-policy,postgres-operator.crunchydata.com/instance-set=instance1 -o 'jsonpath={.items[*].metadata.name}' logger.go:42: 20:35:15 | cert-management-policy/14-verify-operator-provided-only | + instance_sts=cert-management-policy-instance1-h4c4 logger.go:42: 20:35:15 | cert-management-policy/14-verify-operator-provided-only | + [[ -z cert-management-policy-instance1-h4c4 ]] logger.go:42: 20:35:15 | cert-management-policy/14-verify-operator-provided-only | + for sts_name in $instance_sts logger.go:42: 20:35:15 | cert-management-policy/14-verify-operator-provided-only | + verify_secret_data cert-management-policy-instance1-h4c4-certs dns.crt dns.key patroni.ca-roots patroni.crt-combined logger.go:42: 20:35:15 | cert-management-policy/14-verify-operator-provided-only | + local secret=cert-management-policy-instance1-h4c4-certs logger.go:42: 20:35:15 | cert-management-policy/14-verify-operator-provided-only | + shift logger.go:42: 20:35:15 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@" logger.go:42: 20:35:15 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=dns\.crt' logger.go:42: 20:35:15 | cert-management-policy/14-verify-operator-provided-only | + local value logger.go:42: 20:35:15 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-instance1-h4c4-certs -o 'jsonpath={.data.dns\.crt}' logger.go:42: 20:35:15 | cert-management-policy/14-verify-operator-provided-only | + value=LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSURYVENDQXdPZ0F3SUJBZ0lRV3lsT1hrRm1RTzMyOWZVcjlWV2NtVEFLQmdncWhrak9QUVFEQXpBZk1SMHcKR3dZRFZRUURFeFJ3YjNOMFozSmxjeTF2Y0dWeVlYUnZjaTFqWVRBZUZ3MHlOakE1TURFeE9UTTBNekphRncweQpOekE1TURFeU1ETTBNekphTUhneGRqQjBCZ05WQkFNVGJXTmxjblF0YldGdVlXZGxiV1Z1ZEMxd2IyeHBZM2t0CmFXNXpkR0Z1WTJVeExXZzBZelF0TUM1alpYSjBMVzFoYm1GblpXMWxiblF0Y0c5c2FXTjVMWEJ2WkhNdWEzVjAKZEd3dGRHVnpkQzF6ZEdGaWJHVXRjM2RwWm5RdWMzWmpMbU5zZFhOMFpYSXViRzlqWVd3d1dUQVRCZ2NxaGtqTwpQUUlCQmdncWhrak9QUU1CQndOQ0FBUUVhTmVGVjJlUUxMek8xZkhSbU9RazRYQmlFdUs2bytXcnd1VTVWMGNVCnFEaUJ4bXN0MTdaTzNLOEVxSnA4MWhnVmlDTjZ0MEhKTU1NN1AxcTVaM000bzRJQnhqQ0NBY0l3RGdZRFZSMFAKQVFIL0JBUURBZ1dnTUF3R0ExVWRFd0VCL3dRQ01BQXdId1lEVlIwakJCZ3dGb0FVbTUrdDFWcUpRU3RnYnFZQQpGNlpjRlBZY3JjZ3dnZ0YvQmdOVkhSRUVnZ0YyTUlJQmNvSnRZMlZ5ZEMxdFlXNWhaMlZ0Wlc1MExYQnZiR2xqCmVTMXBibk4wWVc1alpURXRhRFJqTkMwd0xtTmxjblF0YldGdVlXZGxiV1Z1ZEMxd2IyeHBZM2t0Y0c5a2N5NXIKZFhSMGJDMTBaWE4wTFhOMFlXSnNaUzF6ZDJsbWRDNXpkbU11WTJ4MWMzUmxjaTVzYjJOaGJJSmZZMlZ5ZEMxdApZVzVoWjJWdFpXNTBMWEJ2YkdsamVTMXBibk4wWVc1alpURXRhRFJqTkMwd0xtTmxjblF0YldGdVlXZGxiV1Z1CmRDMXdiMnhwWTNrdGNHOWtjeTVyZFhSMGJDMTBaWE4wTFhOMFlXSnNaUzF6ZDJsbWRDNXpkbU9DVzJObGNuUXQKYldGdVlXZGxiV1Z1ZEMxd2IyeHBZM2t0YVc1emRHRnVZMlV4TFdnMFl6UXRNQzVqWlhKMExXMWhibUZuWlcxbApiblF0Y0c5c2FXTjVMWEJ2WkhNdWEzVjBkR3d0ZEdWemRDMXpkR0ZpYkdVdGMzZHBablNDUTJObGNuUXRiV0Z1CllXZGxiV1Z1ZEMxd2IyeHBZM2t0YVc1emRHRnVZMlV4TFdnMFl6UXRNQzVqWlhKMExXMWhibUZuWlcxbGJuUXQKY0c5c2FXTjVMWEJ2WkhNd0NnWUlLb1pJemowRUF3TURTQUF3UlFJaEFQSlg0WERpSkdCZFRHTWFSaHBnbDFkMQpobmtNaGVMOW1kRUUrNWtZZDlOOUFpQiswbGVEbWVkNzZqbENycWJCZ3BPREpZWVQ2UkQvR05hV290QnhWT3VqCnV3PT0KLS0tLS1FTkQgQ0VSVElGSUNBVEUtLS0tLQo= logger.go:42: 20:35:15 | cert-management-policy/14-verify-operator-provided-only | + [[ -z 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 ]] logger.go:42: 20:35:15 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@" logger.go:42: 20:35:15 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=dns\.key' logger.go:42: 20:35:15 | cert-management-policy/14-verify-operator-provided-only | + local value logger.go:42: 20:35:15 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-instance1-h4c4-certs -o 'jsonpath={.data.dns\.key}' logger.go:42: 20:35:16 | cert-management-policy/14-verify-operator-provided-only | + value=LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUM4OEpGb25iTmhUOWo3N2R2ODBqbzZLaW9kRmRhdnVlQmQvSzZuYmhZZk9vQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFQkdqWGhWZG5rQ3k4enRYeDBaamtKT0Z3WWhMaXVxUGxxOExsT1ZkSEZLZzRnY1pyTGRlMgpUdHl2QktpYWZOWVlGWWdqZXJkQnlURERPejlhdVdkek9BPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= logger.go:42: 20:35:16 | cert-management-policy/14-verify-operator-provided-only | + [[ -z LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUM4OEpGb25iTmhUOWo3N2R2ODBqbzZLaW9kRmRhdnVlQmQvSzZuYmhZZk9vQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFQkdqWGhWZG5rQ3k4enRYeDBaamtKT0Z3WWhMaXVxUGxxOExsT1ZkSEZLZzRnY1pyTGRlMgpUdHl2QktpYWZOWVlGWWdqZXJkQnlURERPejlhdVdkek9BPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQo= ]] logger.go:42: 20:35:16 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@" logger.go:42: 20:35:16 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=patroni\.ca-roots' logger.go:42: 20:35:16 | cert-management-policy/14-verify-operator-provided-only | + local value logger.go:42: 20:35:16 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-instance1-h4c4-certs -o 'jsonpath={.data.patroni\.ca-roots}' logger.go:42: 20:35:16 | cert-management-policy/14-verify-operator-provided-only | + value=LS0tLS1CRUdJTiBDRVJUSUZJQ0FURS0tLS0tCk1JSUJnakNDQVNlZ0F3SUJBZ0lRVkJCRWE0dE1SaU5rQ3JsTTNBZHZtakFLQmdncWhrak9QUVFEQXpBZk1SMHcKR3dZRFZRUURFeFJ3YjNOMFozSmxjeTF2Y0dWeVlYUnZjaTFqWVRBZUZ3MHlOakE1TURFeE9UTTBNekZhRncwegpOakE0TWpreU1ETTBNekZhTUI4eEhUQWJCZ05WQkFNVEZIQnZjM1JuY21WekxXOXdaWEpoZEc5eUxXTmhNRmt3CkV3WUhLb1pJemowQ0FRWUlLb1pJemowREFRY0RRZ0FFeVFUbSsrNlBPMnZqckxYSHZPckNIKzFxd3Z0QStsKysKMFhiUnh6TE1Ha0c4L1lvYjc2MTlIWEtBMTQxU2lwL28vN0hmS1ZEZFBMOStMU0d3U2Rza3g2TkZNRU13RGdZRApWUjBQQVFIL0JBUURBZ0VHTUJJR0ExVWRFd0VCL3dRSU1BWUJBZjhDQVFBd0hRWURWUjBPQkJZRUZKdWZyZFZhCmlVRXJZRzZtQUJlbVhCVDJISzNJTUFvR0NDcUdTTTQ5QkFNREEwa0FNRVlDSVFDOVBRanlnOW5QTklmamp0L2wKZnFUa0VPZ3hvNENOa0ZQMm83aFdKYmJmM1FJaEFMNVZTS3c2QXVCaUdaM0RHKytvNUxWSzBYRm1jSGR1QlYyUwpzWWdzRHF4MgotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== logger.go:42: 20:35:16 | cert-management-policy/14-verify-operator-provided-only | + [[ -z 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 ]] logger.go:42: 20:35:16 | cert-management-policy/14-verify-operator-provided-only | + for key in "$@" logger.go:42: 20:35:16 | cert-management-policy/14-verify-operator-provided-only | + local 'escaped_key=patroni\.crt-combined' logger.go:42: 20:35:16 | cert-management-policy/14-verify-operator-provided-only | + local value logger.go:42: 20:35:16 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-instance1-h4c4-certs -o 'jsonpath={.data.patroni\.crt-combined}' logger.go:42: 20:35:17 | cert-management-policy/14-verify-operator-provided-only | + value=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 logger.go:42: 20:35:17 | cert-management-policy/14-verify-operator-provided-only | + [[ -z LS0tLS1CRUdJTiBFQyBQUklWQVRFIEtFWS0tLS0tCk1IY0NBUUVFSUM4OEpGb25iTmhUOWo3N2R2ODBqbzZLaW9kRmRhdnVlQmQvSzZuYmhZZk9vQW9HQ0NxR1NNNDkKQXdFSG9VUURRZ0FFQkdqWGhWZG5rQ3k4enRYeDBaamtKT0Z3WWhMaXVxUGxxOExsT1ZkSEZLZzRnY1pyTGRlMgpUdHl2QktpYWZOWVlGWWdqZXJkQnlURERPejlhdVdkek9BPT0KLS0tLS1FTkQgRUMgUFJJVkFURSBLRVktLS0tLQotLS0tLUJFR0lOIENFUlRJRklDQVRFLS0tLS0KTUlJRFhUQ0NBd09nQXdJQkFnSVFXeWxPWGtGbVFPMzI5ZlVyOVZXY21UQUtCZ2dxaGtqT1BRUURBekFmTVIwdwpHd1lEVlFRREV4UndiM04wWjNKbGN5MXZjR1Z5WVhSdmNpMWpZVEFlRncweU5qQTVNREV4T1RNME16SmFGdzB5Ck56QTVNREV5TURNME16SmFNSGd4ZGpCMEJnTlZCQU1UYldObGNuUXRiV0Z1WVdkbGJXVnVkQzF3YjJ4cFkza3QKYVc1emRHRnVZMlV4TFdnMFl6UXRNQzVqWlhKMExXMWhibUZuWlcxbGJuUXRjRzlzYVdONUxYQnZaSE11YTNWMApkR3d0ZEdWemRDMXpkR0ZpYkdVdGMzZHBablF1YzNaakxtTnNkWE4wWlhJdWJHOWpZV3d3V1RBVEJnY3Foa2pPClBRSUJCZ2dxaGtqT1BRTUJCd05DQUFRRWFOZUZWMmVRTEx6TzFmSFJtT1FrNFhCaUV1SzZvK1dyd3VVNVYwY1UKcURpQnhtc3QxN1pPM0s4RXFKcDgxaGdWaUNONnQwSEpNTU03UDFxNVozTTRvNElCeGpDQ0FjSXdEZ1lEVlIwUApBUUgvQkFRREFnV2dNQXdHQTFVZEV3RUIvd1FDTUFBd0h3WURWUjBqQkJnd0ZvQVVtNSt0MVZxSlFTdGdicVlBCkY2WmNGUFljcmNnd2dnRi9CZ05WSFJFRWdnRjJNSUlCY29KdFkyVnlkQzF0WVc1aFoyVnRaVzUwTFhCdmJHbGoKZVMxcGJuTjBZVzVqWlRFdGFEUmpOQzB3TG1ObGNuUXRiV0Z1WVdkbGJXVnVkQzF3YjJ4cFkza3RjRzlrY3k1cgpkWFIwYkMxMFpYTjBMWE4wWVdKc1pTMXpkMmxtZEM1emRtTXVZMngxYzNSbGNpNXNiMk5oYklKZlkyVnlkQzF0CllXNWhaMlZ0Wlc1MExYQnZiR2xqZVMxcGJuTjBZVzVqWlRFdGFEUmpOQzB3TG1ObGNuUXRiV0Z1WVdkbGJXVnUKZEMxd2IyeHBZM2t0Y0c5a2N5NXJkWFIwYkMxMFpYTjBMWE4wWVdKc1pTMXpkMmxtZEM1emRtT0NXMk5sY25RdApiV0Z1WVdkbGJXVnVkQzF3YjJ4cFkza3RhVzV6ZEdGdVkyVXhMV2cwWXpRdE1DNWpaWEowTFcxaGJtRm5aVzFsCmJuUXRjRzlzYVdONUxYQnZaSE11YTNWMGRHd3RkR1Z6ZEMxemRHRmliR1V0YzNkcFpuU0NRMk5sY25RdGJXRnUKWVdkbGJXVnVkQzF3YjJ4cFkza3RhVzV6ZEdGdVkyVXhMV2cwWXpRdE1DNWpaWEowTFcxaGJtRm5aVzFsYm5RdApjRzlzYVdONUxYQnZaSE13Q2dZSUtvWkl6ajBFQXdNRFNBQXdSUUloQVBKWDRYRGlKR0JkVEdNYVJocGdsMWQxCmhua01oZUw5bWRFRSs1a1lkOU45QWlCKzBsZURtZWQ3NmpsQ3JxYkJncE9ESllZVDZSRC9HTmFXb3RCeFZPdWoKdXc9PQotLS0tLUVORCBDRVJUSUZJQ0FURS0tLS0tCg== ]] logger.go:42: 20:35:17 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get secret cert-management-policy-instance1-h4c4-certs -o 'jsonpath={.metadata.annotations.cert-manager\.io/certificate-name}' logger.go:42: 20:35:17 | cert-management-policy/14-verify-operator-provided-only | + annotation= logger.go:42: 20:35:17 | cert-management-policy/14-verify-operator-provided-only | + [[ -n '' ]] logger.go:42: 20:35:17 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get certificate -l postgres-operator.crunchydata.com/cluster=cert-management-policy -o name logger.go:42: 20:35:18 | cert-management-policy/14-verify-operator-provided-only | + certificates= logger.go:42: 20:35:18 | cert-management-policy/14-verify-operator-provided-only | + [[ -n '' ]] logger.go:42: 20:35:18 | cert-management-policy/14-verify-operator-provided-only | ++ kubectl -n kuttl-test-stable-swift get issuer -o json logger.go:42: 20:35:18 | cert-management-policy/14-verify-operator-provided-only | ++ jq -r '.items[].metadata.name | select(startswith("cert-management-policy-"))' logger.go:42: 20:35:18 | cert-management-policy/14-verify-operator-provided-only | + issuers= logger.go:42: 20:35:18 | cert-management-policy/14-verify-operator-provided-only | + [[ -n '' ]] logger.go:42: 20:35:18 | cert-management-policy/14-verify-operator-provided-only | + kubectl get clusterissuer cert-management-policy-ignored-issuer logger.go:42: 20:35:19 | cert-management-policy/14-verify-operator-provided-only | test step completed 14-verify-operator-provided-only logger.go:42: 20:35:19 | cert-management-policy/99-remove-cluster-gracefully | starting test step 99-remove-cluster-gracefully logger.go:42: 20:35:19 | cert-management-policy/99-remove-cluster-gracefully | PerconaPGCluster:kuttl-test-stable-swift/cert-management-policy deleted logger.go:42: 20:35:20 | cert-management-policy/99-remove-cluster-gracefully | PostgresCluster:kuttl-test-stable-swift/cert-management-policy deleted logger.go:42: 20:35:22 | cert-management-policy/99-remove-cluster-gracefully | running command: [sh -c set -o errexit set -o xtrace source ../../functions cluster="cert-management-policy" remove_all_finalizers kubectl -n "$NAMESPACE" delete pvc -l postgres-operator.crunchydata.com/cluster="$cluster" || true kubectl -n "$NAMESPACE" delete secret -l postgres-operator.crunchydata.com/cluster="$cluster" || true kubectl -n "$NAMESPACE" delete secret \ "${cluster}-cluster-ca-cert" \ "${cluster}-cluster-cert" \ "${cluster}-replication-cert" \ --ignore-not-found || true check_operator_panic destroy_operator destroy_cert_manager] logger.go:42: 20:35:22 | cert-management-policy/99-remove-cluster-gracefully | + source ../../functions logger.go:42: 20:35:22 | cert-management-policy/99-remove-cluster-gracefully | +++ realpath ../../.. logger.go:42: 20:35:22 | cert-management-policy/99-remove-cluster-gracefully | ++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:35:22 | cert-management-policy/99-remove-cluster-gracefully | ++ CERT_MANAGER_VER=1.20.2 logger.go:42: 20:35:22 | cert-management-policy/99-remove-cluster-gracefully | ++ CERT_MANAGER_TEST_LABEL=e2e.percona.com/managed-by=percona-postgresql-operator-tests logger.go:42: 20:35:22 | cert-management-policy/99-remove-cluster-gracefully | ++ CHAOS_MESH_VER=2.5.1 logger.go:42: 20:35:22 | cert-management-policy/99-remove-cluster-gracefully | ++ BUSYBOX_VER=1.36 logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | ++++ pwd logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ basename /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | ++ test_name=cert-management-policy logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | ++ source /mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/vars.sh logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ export ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ ROOT_REPO=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812 logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ export DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ DEPLOY_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/deploy logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ export TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ TESTS_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ export TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ TESTS_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/conf logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ export TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ TEST_CONFIG_DIR=/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/e2e-tests/tests/cert-management-policy/conf logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ export TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ TEMP_DIR=/tmp/kuttl/pg/cert-management-policy logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | ++++ git rev-parse --abbrev-ref HEAD logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ export GIT_BRANCH=PR-1812 logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ GIT_BRANCH=PR-1812 logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ export VERSION=PR-1812-09e4007fd logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ VERSION=PR-1812-09e4007fd logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ export SKIP_TEST_WARNINGS=true logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ SKIP_TEST_WARNINGS=true logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ export K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ K8S_UPGRADE_PLATFORM=gke logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ export K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ K8S_UPGRADE_REGION=us-central1-a logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ export K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ K8S_UPGRADE_INITIAL_VERSION= logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ export K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ K8S_UPGRADE_FINAL_VERSION= logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ -z '' ]] logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | ++++ detect_k8s_platform logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | ++++ local detected_platform logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | ++++ local xtrace_enabled=false logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | ++++ [[ -o xtrace ]] logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | ++++ xtrace_enabled=true logger.go:42: 20:35:23 | cert-management-policy/99-remove-cluster-gracefully | ++++ set +o xtrace logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ PLATFORM=gke logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export PLATFORM logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_BASE=perconalab/percona-postgresql-operator logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ ! -n '' ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ -n '' ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export PG_VER=18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ PG_VER=18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export PG_DISTRIBUTION= logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ PG_DISTRIBUTION= logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ '' == community ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_PGBOUNCER=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_POSTGRESQL=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_BACKREST=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_UPGRADE=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export BUCKET=pg-operator-testing logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ BUCKET=pg-operator-testing logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ PMM_SERVER_VERSION=9.9.9 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_PMM_CLIENT=perconalab/pmm-client:3-dev-latest logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_PMM_SERVER=perconalab/pmm-server:3-dev-latest logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_LOGCOLLECTOR=perconalab/fluentbit:main-logcollector logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export PGOV1_TAG=1.4.0 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ PGOV1_TAG=1.4.0 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export PGOV1_VER=14 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ PGOV1_VER=14 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export CPGO_VERSION=5.8.7 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ CPGO_VERSION=5.8.7 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export MINIO_VER=5.4.0 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ MINIO_VER=5.4.0 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export VAULT_VER=0.32.0 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ VAULT_VER=0.32.0 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export REGISTRY_NAME=docker.io logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ REGISTRY_NAME=docker.io logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ REGISTRY_NAME_FULL=docker.io/ logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | ++++ printenv logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | ++++ grep -E '^IMAGE' logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | ++++ awk -F= '{print $1}' logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | ++++ eval 'echo $IMAGE_BACKREST' logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++++ echo perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ var_value=perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == docker.io/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == percona/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-pgbackrest18 == perconalab/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ echo IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | IMAGE_BACKREST=docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | ++++ eval 'echo $IMAGE' logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++++ echo perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ var_value=perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == docker.io/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == percona/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:PR-1812-09e4007fd == perconalab/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ new_value=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ echo IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | IMAGE=docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | ++++ eval 'echo $IMAGE_UPGRADE' logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++++ echo perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ var_value=perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == docker.io/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == percona/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-upgrade == perconalab/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ echo IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | IMAGE_UPGRADE=docker.io/perconalab/percona-postgresql-operator:main-upgrade logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | ++++ eval 'echo $IMAGE_LOGCOLLECTOR' logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++++ echo perconalab/fluentbit:main-logcollector logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ var_value=perconalab/fluentbit:main-logcollector logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/fluentbit:main-logcollector == docker.io/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/fluentbit:main-logcollector == percona/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/fluentbit:main-logcollector == perconalab/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ new_value=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ echo IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | ++++ eval 'echo $IMAGE_BASE' logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++++ echo perconalab/percona-postgresql-operator logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ var_value=perconalab/percona-postgresql-operator logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator == docker.io/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator == percona/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator == perconalab/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ new_value=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ echo IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | IMAGE_BASE=docker.io/perconalab/percona-postgresql-operator logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | ++++ eval 'echo $IMAGE_PGBOUNCER' logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++++ echo perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ var_value=perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == docker.io/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == percona/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-pgbouncer18 == perconalab/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ echo IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | IMAGE_PGBOUNCER=docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18 logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | ++++ eval 'echo $IMAGE_POSTGRESQL' logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++++ echo perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ var_value=perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == docker.io/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == percona/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/percona-postgresql-operator:main-ppg18-postgres == perconalab/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ new_value=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ echo IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | IMAGE_POSTGRESQL=docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | ++++ eval 'echo $IMAGE_PMM_SERVER' logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++++ echo perconalab/pmm-server:3-dev-latest logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ var_value=perconalab/pmm-server:3-dev-latest logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/pmm-server:3-dev-latest == docker.io/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/pmm-server:3-dev-latest == percona/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/pmm-server:3-dev-latest == perconalab/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ new_value=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ echo IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | IMAGE_PMM_SERVER=docker.io/perconalab/pmm-server:3-dev-latest logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ for var in $(printenv | grep -E '^IMAGE' | awk -F'=' '{print $1}') logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | ++++ eval 'echo $IMAGE_PMM_CLIENT' logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++++ echo perconalab/pmm-client:3-dev-latest logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ var_value=perconalab/pmm-client:3-dev-latest logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/pmm-client:3-dev-latest == docker.io/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/pmm-client:3-dev-latest == percona/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ [[ perconalab/pmm-client:3-dev-latest == perconalab/* ]] logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ new_value=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ export IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ echo IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | IMAGE_PMM_CLIENT=docker.io/perconalab/pmm-client:3-dev-latest logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ echo docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | ++++ which gdate logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | which: no gdate in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | ++++ which date logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ date=/usr/sbin/date logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | ++++ which gsed logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | which: no gsed in (/mnt/jenkins/workspace/cloud-pg-operator_PR-1812/bin/:/root/.krew/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/var/lib/snapd/snap/bin) logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | ++++ which sed logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | +++ sed=/usr/sbin/sed logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | + cluster=cert-management-policy logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | + remove_all_finalizers logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | + resource_types=("pg-restore" "pg-backup" "pg") logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | + for resource in "${resource_types[@]}" logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | + echo 'removing all finalizers for pg-restore resources' logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | removing all finalizers for pg-restore resources logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | + kubectl -n kuttl-test-stable-swift get pg-restore -o json logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | + jq '.items[] | .metadata.name' -r logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | + IFS= logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | + read -r name logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | + for resource in "${resource_types[@]}" logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | + echo 'removing all finalizers for pg-backup resources' logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | removing all finalizers for pg-backup resources logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | + kubectl -n kuttl-test-stable-swift get pg-backup -o json logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | + jq '.items[] | .metadata.name' -r logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | + IFS= logger.go:42: 20:35:25 | cert-management-policy/99-remove-cluster-gracefully | + read -r name logger.go:42: 20:35:26 | cert-management-policy/99-remove-cluster-gracefully | ++ kubectl -n kuttl-test-stable-swift get pg-backup cert-management-policy-backup-wqmx-krwwd -o yaml logger.go:42: 20:35:26 | cert-management-policy/99-remove-cluster-gracefully | ++ yq '.metadata.finalizers | length' logger.go:42: 20:35:26 | cert-management-policy/99-remove-cluster-gracefully | + [[ 1 == 0 ]] logger.go:42: 20:35:26 | cert-management-policy/99-remove-cluster-gracefully | + kubectl -n kuttl-test-stable-swift patch pg-backup cert-management-policy-backup-wqmx-krwwd --type=json '-p=[{"op": "remove", "path": "/metadata/finalizers"}]' logger.go:42: 20:35:27 | cert-management-policy/99-remove-cluster-gracefully | perconapgbackup.pgv2.percona.com/cert-management-policy-backup-wqmx-krwwd patched logger.go:42: 20:35:27 | cert-management-policy/99-remove-cluster-gracefully | + kubectl -n kuttl-test-stable-swift delete pg-backup cert-management-policy-backup-wqmx-krwwd --wait=0 logger.go:42: 20:35:27 | cert-management-policy/99-remove-cluster-gracefully | perconapgbackup.pgv2.percona.com "cert-management-policy-backup-wqmx-krwwd" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:35:27 | cert-management-policy/99-remove-cluster-gracefully | + IFS= logger.go:42: 20:35:27 | cert-management-policy/99-remove-cluster-gracefully | + read -r name logger.go:42: 20:35:27 | cert-management-policy/99-remove-cluster-gracefully | + for resource in "${resource_types[@]}" logger.go:42: 20:35:27 | cert-management-policy/99-remove-cluster-gracefully | + echo 'removing all finalizers for pg resources' logger.go:42: 20:35:27 | cert-management-policy/99-remove-cluster-gracefully | removing all finalizers for pg resources logger.go:42: 20:35:27 | cert-management-policy/99-remove-cluster-gracefully | + kubectl -n kuttl-test-stable-swift get pg -o json logger.go:42: 20:35:27 | cert-management-policy/99-remove-cluster-gracefully | + jq '.items[] | .metadata.name' -r logger.go:42: 20:35:27 | cert-management-policy/99-remove-cluster-gracefully | + IFS= logger.go:42: 20:35:27 | cert-management-policy/99-remove-cluster-gracefully | + read -r name logger.go:42: 20:35:28 | cert-management-policy/99-remove-cluster-gracefully | + kubectl -n kuttl-test-stable-swift delete pvc -l postgres-operator.crunchydata.com/cluster=cert-management-policy logger.go:42: 20:35:28 | cert-management-policy/99-remove-cluster-gracefully | persistentvolumeclaim "cert-management-policy-instance1-h4c4-pgdata" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:35:28 | cert-management-policy/99-remove-cluster-gracefully | persistentvolumeclaim "cert-management-policy-repo1" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:35:29 | cert-management-policy/99-remove-cluster-gracefully | + kubectl -n kuttl-test-stable-swift delete secret -l postgres-operator.crunchydata.com/cluster=cert-management-policy logger.go:42: 20:35:29 | cert-management-policy/99-remove-cluster-gracefully | secret "cert-management-policy-cluster-cert" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:35:29 | cert-management-policy/99-remove-cluster-gracefully | secret "cert-management-policy-instance1-h4c4-certs" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:35:30 | cert-management-policy/99-remove-cluster-gracefully | secret "cert-management-policy-pgbackrest" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:35:30 | cert-management-policy/99-remove-cluster-gracefully | secret "cert-management-policy-pgbouncer" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:35:30 | cert-management-policy/99-remove-cluster-gracefully | secret "cert-management-policy-pguser-cert-management-policy" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:35:30 | cert-management-policy/99-remove-cluster-gracefully | secret "cert-management-policy-pguser-postgres" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:35:30 | cert-management-policy/99-remove-cluster-gracefully | secret "cert-management-policy-replication-cert" deleted from kuttl-test-stable-swift namespace logger.go:42: 20:35:31 | cert-management-policy/99-remove-cluster-gracefully | + kubectl -n kuttl-test-stable-swift delete secret cert-management-policy-cluster-ca-cert cert-management-policy-cluster-cert cert-management-policy-replication-cert --ignore-not-found logger.go:42: 20:35:32 | cert-management-policy/99-remove-cluster-gracefully | + check_operator_panic logger.go:42: 20:35:32 | cert-management-policy/99-remove-cluster-gracefully | ++ get_operator_pod logger.go:42: 20:35:32 | cert-management-policy/99-remove-cluster-gracefully | +++ kubectl get pods -n pg-operator --selector=app.kubernetes.io/name=percona-postgresql-operator -o 'jsonpath={.items[].metadata.name}' logger.go:42: 20:35:33 | cert-management-policy/99-remove-cluster-gracefully | ++ echo percona-postgresql-operator-85d86fb9f8-bqrqh logger.go:42: 20:35:33 | cert-management-policy/99-remove-cluster-gracefully | + local operator_pod=percona-postgresql-operator-85d86fb9f8-bqrqh logger.go:42: 20:35:33 | cert-management-policy/99-remove-cluster-gracefully | + local panic_log logger.go:42: 20:35:33 | cert-management-policy/99-remove-cluster-gracefully | ++ kubectl logs -n pg-operator percona-postgresql-operator-85d86fb9f8-bqrqh -c operator logger.go:42: 20:35:33 | cert-management-policy/99-remove-cluster-gracefully | ++ grep -A 100 'Observed a panic' logger.go:42: 20:35:34 | cert-management-policy/99-remove-cluster-gracefully | ++ true logger.go:42: 20:35:34 | cert-management-policy/99-remove-cluster-gracefully | + panic_log= logger.go:42: 20:35:34 | cert-management-policy/99-remove-cluster-gracefully | + '[' -n '' ']' logger.go:42: 20:35:34 | cert-management-policy/99-remove-cluster-gracefully | + destroy_operator logger.go:42: 20:35:34 | cert-management-policy/99-remove-cluster-gracefully | + kubectl -n pg-operator delete deployment percona-postgresql-operator --force --grace-period=0 logger.go:42: 20:35:34 | cert-management-policy/99-remove-cluster-gracefully | Warning: Immediate deletion does not wait for confirmation that the running resource has been terminated. The resource may continue to run on the cluster indefinitely. logger.go:42: 20:35:34 | cert-management-policy/99-remove-cluster-gracefully | deployment.apps "percona-postgresql-operator" force deleted from pg-operator namespace logger.go:42: 20:35:34 | cert-management-policy/99-remove-cluster-gracefully | + [[ -n pg-operator ]] logger.go:42: 20:35:34 | cert-management-policy/99-remove-cluster-gracefully | + kubectl delete namespace pg-operator --force --grace-period=0 --ignore-not-found logger.go:42: 20:35:34 | cert-management-policy/99-remove-cluster-gracefully | Warning: Immediate deletion does not wait for confirmation that the running resource has been terminated. The resource may continue to run on the cluster indefinitely. logger.go:42: 20:35:35 | cert-management-policy/99-remove-cluster-gracefully | namespace "pg-operator" force deleted logger.go:42: 20:35:47 | cert-management-policy/99-remove-cluster-gracefully | + destroy_cert_manager logger.go:42: 20:35:47 | cert-management-policy/99-remove-cluster-gracefully | + [[ gke == rancher ]] logger.go:42: 20:35:47 | cert-management-policy/99-remove-cluster-gracefully | + helm uninstall cert-manager -n cert-manager logger.go:42: 20:35:51 | cert-management-policy/99-remove-cluster-gracefully | + kubectl get crd -o name logger.go:42: 20:35:51 | cert-management-policy/99-remove-cluster-gracefully | + grep cert-manager.io logger.go:42: 20:35:51 | cert-management-policy/99-remove-cluster-gracefully | + xargs -r kubectl delete logger.go:42: 20:35:53 | cert-management-policy/99-remove-cluster-gracefully | customresourcedefinition.apiextensions.k8s.io "certificaterequests.cert-manager.io" deleted logger.go:42: 20:35:54 | cert-management-policy/99-remove-cluster-gracefully | customresourcedefinition.apiextensions.k8s.io "certificates.cert-manager.io" deleted logger.go:42: 20:35:54 | cert-management-policy/99-remove-cluster-gracefully | customresourcedefinition.apiextensions.k8s.io "challenges.acme.cert-manager.io" deleted logger.go:42: 20:35:54 | cert-management-policy/99-remove-cluster-gracefully | customresourcedefinition.apiextensions.k8s.io "clusterissuers.cert-manager.io" deleted logger.go:42: 20:35:55 | cert-management-policy/99-remove-cluster-gracefully | customresourcedefinition.apiextensions.k8s.io "issuers.cert-manager.io" deleted logger.go:42: 20:35:55 | cert-management-policy/99-remove-cluster-gracefully | customresourcedefinition.apiextensions.k8s.io "orders.acme.cert-manager.io" deleted logger.go:42: 20:35:56 | cert-management-policy/99-remove-cluster-gracefully | + kubectl get mutatingwebhookconfiguration -o name logger.go:42: 20:35:56 | cert-management-policy/99-remove-cluster-gracefully | + grep cert-manager logger.go:42: 20:35:56 | cert-management-policy/99-remove-cluster-gracefully | + xargs kubectl delete logger.go:42: 20:35:57 | cert-management-policy/99-remove-cluster-gracefully | + : logger.go:42: 20:35:57 | cert-management-policy/99-remove-cluster-gracefully | + kubectl get validatingwebhookconfiguration -o name logger.go:42: 20:35:57 | cert-management-policy/99-remove-cluster-gracefully | + grep cert-manager logger.go:42: 20:35:57 | cert-management-policy/99-remove-cluster-gracefully | + xargs kubectl delete logger.go:42: 20:35:57 | cert-management-policy/99-remove-cluster-gracefully | + : logger.go:42: 20:35:57 | cert-management-policy/99-remove-cluster-gracefully | + kubectl get clusterrole,clusterrolebinding -o name logger.go:42: 20:35:57 | cert-management-policy/99-remove-cluster-gracefully | + grep cert-manager logger.go:42: 20:35:57 | cert-management-policy/99-remove-cluster-gracefully | + xargs -r kubectl delete logger.go:42: 20:35:58 | cert-management-policy/99-remove-cluster-gracefully | + kubectl delete namespace cert-manager --grace-period=0 --force=true --ignore-not-found logger.go:42: 20:36:10 | cert-management-policy/99-remove-cluster-gracefully | test step completed 99-remove-cluster-gracefully logger.go:42: 20:36:11 | cert-management-policy | cert-management-policy events from ns kuttl-test-stable-swift: logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:12 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-instance1-49wh-pgdata WaitForFirstConsumer waiting for first consumer to be created before binding persistentvolume-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:13 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-instance1-49wh-pgdata ExternalProvisioning Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered. persistentvolume-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:13 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-instance1-49wh-pgdata Provisioning External provisioner is provisioning volume for claim "kuttl-test-stable-swift/cert-management-policy-instance1-49wh-pgdata" pd.csi.storage.gke.io_gke-c6aaa511db014d729735-cd02-f74b-vm_d17f65ab-3170-4d7d-8dcd-19344a0ccb2e logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:13 +0000 UTC Normal StatefulSet.apps cert-management-policy-instance1-49wh SuccessfulCreate create Pod cert-management-policy-instance1-49wh-0 in StatefulSet cert-management-policy-instance1-49wh successful statefulset-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:14 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-instance1-67wh-pgdata WaitForFirstConsumer waiting for first consumer to be created before binding persistentvolume-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:14 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-instance1-67wh-pgdata Provisioning External provisioner is provisioning volume for claim "kuttl-test-stable-swift/cert-management-policy-instance1-67wh-pgdata" pd.csi.storage.gke.io_gke-c6aaa511db014d729735-cd02-f74b-vm_d17f65ab-3170-4d7d-8dcd-19344a0ccb2e logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:14 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-instance1-67wh-pgdata ExternalProvisioning Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered. persistentvolume-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:14 +0000 UTC Normal StatefulSet.apps cert-management-policy-instance1-67wh SuccessfulCreate create Pod cert-management-policy-instance1-67wh-0 in StatefulSet cert-management-policy-instance1-67wh successful statefulset-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:14 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-instance1-f59q-pgdata WaitForFirstConsumer waiting for first consumer to be created before binding persistentvolume-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:14 +0000 UTC Normal StatefulSet.apps cert-management-policy-instance1-f59q SuccessfulCreate create Pod cert-management-policy-instance1-f59q-0 in StatefulSet cert-management-policy-instance1-f59q successful statefulset-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:15 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0 Scheduled Successfully assigned kuttl-test-stable-swift/cert-management-policy-instance1-49wh-0 to gke-jen-pg-1812-09e4007f-default-pool-bb01df06-zfs6 default-scheduler logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:15 +0000 UTC Warning Pod cert-management-policy-instance1-49wh-0 FailedMount MountVolume.SetUp failed for volume "pgbackrest-server" : secret "cert-management-policy-instance1-49wh-certs" not found kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:15 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-instance1-49wh-pgdata ProvisioningSucceeded Successfully provisioned volume pvc-d7b48baa-8e43-4d58-b3a8-838b33678b31 pd.csi.storage.gke.io_gke-c6aaa511db014d729735-cd02-f74b-vm_d17f65ab-3170-4d7d-8dcd-19344a0ccb2e logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:15 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-instance1-f59q-pgdata ExternalProvisioning Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered. persistentvolume-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:15 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-instance1-f59q-pgdata Provisioning External provisioner is provisioning volume for claim "kuttl-test-stable-swift/cert-management-policy-instance1-f59q-pgdata" pd.csi.storage.gke.io_gke-c6aaa511db014d729735-cd02-f74b-vm_d17f65ab-3170-4d7d-8dcd-19344a0ccb2e logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:15 +0000 UTC Normal StatefulSet.apps cert-management-policy-repo-host SuccessfulCreate create Pod cert-management-policy-repo-host-0 in StatefulSet cert-management-policy-repo-host successful statefulset-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:15 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-repo1 WaitForFirstConsumer waiting for first consumer to be created before binding persistentvolume-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:15 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-repo1 ExternalProvisioning Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered. persistentvolume-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:15 +0000 UTC Normal PostgresCluster.upstream.pgv2.percona.com cert-management-policy RepoHostCreated created pgBackRest repository host StatefulSet/cert-management-policy-repo-host postgrescluster-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:16 +0000 UTC Warning Pod cert-management-policy-instance1-49wh-0 FailedMount MountVolume.SetUp failed for volume "patroni-config" : secret "cert-management-policy-instance1-49wh-certs" not found kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:16 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-instance1-67wh-pgdata ProvisioningSucceeded Successfully provisioned volume pvc-7540b29e-0d6e-44e4-bf49-ba5e48e8100a pd.csi.storage.gke.io_gke-c6aaa511db014d729735-cd02-f74b-vm_d17f65ab-3170-4d7d-8dcd-19344a0ccb2e logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:16 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-instance1-f59q-pgdata ProvisioningSucceeded Successfully provisioned volume pvc-339f4063-628e-498a-82c2-8c724961b1e8 pd.csi.storage.gke.io_gke-c6aaa511db014d729735-cd02-f74b-vm_d17f65ab-3170-4d7d-8dcd-19344a0ccb2e logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:16 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-475xn Scheduled Successfully assigned kuttl-test-stable-swift/cert-management-policy-pgbouncer-95ff99b8f-475xn to gke-jen-pg-1812-09e4007f-default-pool-bb01df06-zfs6 default-scheduler logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:16 +0000 UTC Normal ReplicaSet.apps cert-management-policy-pgbouncer-95ff99b8f SuccessfulCreate Created pod: cert-management-policy-pgbouncer-95ff99b8f-475xn replicaset-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:16 +0000 UTC Normal Deployment.apps cert-management-policy-pgbouncer ScalingReplicaSet Scaled up replica set cert-management-policy-pgbouncer-95ff99b8f from 0 to 1 deployment-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:16 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-repo1 Provisioning External provisioner is provisioning volume for claim "kuttl-test-stable-swift/cert-management-policy-repo1" pd.csi.storage.gke.io_gke-c6aaa511db014d729735-cd02-f74b-vm_d17f65ab-3170-4d7d-8dcd-19344a0ccb2e logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:17 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0 Scheduled Successfully assigned kuttl-test-stable-swift/cert-management-policy-instance1-67wh-0 to gke-jen-pg-1812-09e4007f-default-pool-bb01df06-w6r9 default-scheduler logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:17 +0000 UTC Warning Pod cert-management-policy-instance1-67wh-0 FailedMount MountVolume.SetUp failed for volume "pgbackrest-server" : secret "cert-management-policy-instance1-67wh-certs" not found kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:17 +0000 UTC Warning Pod cert-management-policy-instance1-67wh-0 FailedMount MountVolume.SetUp failed for volume "patroni-config" : secret "cert-management-policy-instance1-67wh-certs" not found kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:17 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0 Scheduled Successfully assigned kuttl-test-stable-swift/cert-management-policy-instance1-f59q-0 to gke-jen-pg-1812-09e4007f-default-pool-bb01df06-7d01 default-scheduler logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:17 +0000 UTC Warning Pod cert-management-policy-instance1-f59q-0 FailedMount MountVolume.SetUp failed for volume "pgbackrest-server" : secret "cert-management-policy-instance1-f59q-certs" not found kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:17 +0000 UTC Warning Pod cert-management-policy-instance1-f59q-0 FailedMount MountVolume.SetUp failed for volume "patroni-config" : secret "cert-management-policy-instance1-f59q-certs" not found kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:17 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-475xn.spec.initContainers{pgbouncer-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:17 +0000 UTC Normal Pod cert-management-policy-repo-host-0 Scheduled Successfully assigned kuttl-test-stable-swift/cert-management-policy-repo-host-0 to gke-jen-pg-1812-09e4007f-default-pool-bb01df06-w6r9 default-scheduler logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:17 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-repo1 ProvisioningSucceeded Successfully provisioned volume pvc-ad56949a-9dc0-4c97-a57c-b17b2ffd5874 pd.csi.storage.gke.io_gke-c6aaa511db014d729735-cd02-f74b-vm_d17f65ab-3170-4d7d-8dcd-19344a0ccb2e logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:22 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0 SuccessfulAttachVolume AttachVolume.Attach succeeded for volume "pvc-d7b48baa-8e43-4d58-b3a8-838b33678b31" attachdetach-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:22 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-475xn.spec.initContainers{pgbouncer-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd" in 5.678s (5.678s including waiting). Image size: 87060507 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:22 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-475xn.spec.initContainers{pgbouncer-init} Created Created container: pgbouncer-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:23 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0 SuccessfulAttachVolume AttachVolume.Attach succeeded for volume "pvc-7540b29e-0d6e-44e4-bf49-ba5e48e8100a" attachdetach-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:23 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0 SuccessfulAttachVolume AttachVolume.Attach succeeded for volume "pvc-339f4063-628e-498a-82c2-8c724961b1e8" attachdetach-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:23 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-475xn.spec.initContainers{pgbouncer-init} Started Started container pgbouncer-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:25 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.initContainers{database-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:25 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.initContainers{database-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd" in 180ms (180ms including waiting). Image size: 87060507 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:25 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.initContainers{database-init} Created Created container: database-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:25 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.initContainers{database-init} Started Started container database-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:25 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-475xn.spec.containers{pgbouncer} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:26 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.initContainers{postgres-startup} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:32 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-475xn.spec.containers{pgbouncer} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 6.298s (6.298s including waiting). Image size: 84617369 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:32 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-475xn.spec.containers{pgbouncer} Created Created container: pgbouncer kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:32 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-475xn.spec.containers{pgbouncer} Started Started container pgbouncer kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:32 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-475xn.spec.containers{pgbouncer-config} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:32 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-475xn.spec.containers{pgbouncer-config} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 116ms (116ms including waiting). Image size: 84617369 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:32 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-475xn.spec.containers{pgbouncer-config} Created Created container: pgbouncer-config kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:32 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-475xn.spec.containers{pgbouncer-config} Started Started container pgbouncer-config kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:32 +0000 UTC Normal Pod cert-management-policy-repo-host-0 SuccessfulAttachVolume AttachVolume.Attach succeeded for volume "pvc-ad56949a-9dc0-4c97-a57c-b17b2ffd5874" attachdetach-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:33 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.initContainers{database-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:33 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.initContainers{database-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:33 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.initContainers{database-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd" in 143ms (143ms including waiting). Image size: 87060507 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:33 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.initContainers{database-init} Created Created container: database-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:33 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.initContainers{database-init} Started Started container database-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:34 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.initContainers{postgres-startup} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:34 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.initContainers{pgbackrest-log-dir} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:38 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.initContainers{database-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd" in 4.974s (4.974s including waiting). Image size: 87060507 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:38 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.initContainers{database-init} Created Created container: database-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:38 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.initContainers{database-init} Started Started container database-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:42 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.initContainers{postgres-startup} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:43 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.initContainers{pgbackrest-log-dir} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 8.946s (8.946s including waiting). Image size: 122692543 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:43 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.initContainers{pgbackrest-log-dir} Created Created container: pgbackrest-log-dir kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:43 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.initContainers{pgbackrest-log-dir} Started Started container pgbackrest-log-dir kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:46 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.initContainers{postgres-startup} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 20.13s (20.13s including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:46 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.initContainers{postgres-startup} Created Created container: postgres-startup kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:46 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.initContainers{nss-wrapper-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:46 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.initContainers{nss-wrapper-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 103ms (103ms including waiting). Image size: 122692543 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:46 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.initContainers{nss-wrapper-init} Created Created container: nss-wrapper-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:46 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.initContainers{nss-wrapper-init} Started Started container nss-wrapper-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:47 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.initContainers{postgres-startup} Started Started container postgres-startup kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:47 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:47 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 134ms (134ms including waiting). Image size: 122692543 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:47 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest} Created Created container: pgbackrest kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:47 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest} Started Started container pgbackrest kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:47 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:47 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 127ms (127ms including waiting). Image size: 122692543 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:47 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config} Created Created container: pgbackrest-config kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:48 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config} Started Started container pgbackrest-config kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:52 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.initContainers{postgres-startup} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 17.507s (17.508s including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:52 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.initContainers{postgres-startup} Created Created container: postgres-startup kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:52 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.initContainers{postgres-startup} Started Started container postgres-startup kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:55 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.initContainers{nss-wrapper-init-logcollector} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:56 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.initContainers{nss-wrapper-init-logcollector} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 516ms (516ms including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:56 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.initContainers{nss-wrapper-init-logcollector} Created Created container: nss-wrapper-init-logcollector kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:56 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.initContainers{nss-wrapper-init-logcollector} Started Started container nss-wrapper-init-logcollector kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:56 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.initContainers{nss-wrapper-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:57 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.initContainers{nss-wrapper-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 175ms (175ms including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:57 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.initContainers{nss-wrapper-init} Created Created container: nss-wrapper-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:57 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.initContainers{nss-wrapper-init} Started Started container nss-wrapper-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:57 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.containers{database} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:58 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.containers{database} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 167ms (167ms including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:58 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.containers{database} Created Created container: database kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:58 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.containers{database} Started Started container database kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:58 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.containers{replication-cert-copy} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:58 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.containers{replication-cert-copy} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 158ms (158ms including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:58 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.containers{replication-cert-copy} Created Created container: replication-cert-copy kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:58 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.containers{replication-cert-copy} Started Started container replication-cert-copy kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:32:58 +0000 UTC Normal Pod cert-management-policy-instance1-49wh-0.spec.containers{logs} Pulling Pulling image "docker.io/perconalab/fluentbit:main-logcollector" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:00 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.initContainers{nss-wrapper-init-logcollector} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:01 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.initContainers{nss-wrapper-init-logcollector} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 163ms (163ms including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:01 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.initContainers{nss-wrapper-init-logcollector} Created Created container: nss-wrapper-init-logcollector kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:01 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.initContainers{nss-wrapper-init-logcollector} Started Started container nss-wrapper-init-logcollector kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:01 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.initContainers{nss-wrapper-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:02 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.initContainers{nss-wrapper-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 152ms (152ms including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:02 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.initContainers{nss-wrapper-init} Created Created container: nss-wrapper-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:02 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.initContainers{nss-wrapper-init} Started Started container nss-wrapper-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:02 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.containers{database} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:03 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.containers{database} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 148ms (148ms including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:03 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.containers{database} Created Created container: database kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:03 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.containers{database} Started Started container database kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:03 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.containers{replication-cert-copy} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:03 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.containers{replication-cert-copy} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 138ms (138ms including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:03 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.containers{replication-cert-copy} Created Created container: replication-cert-copy kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:03 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.containers{replication-cert-copy} Started Started container replication-cert-copy kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:03 +0000 UTC Normal Pod cert-management-policy-instance1-f59q-0.spec.containers{logs} Pulling Pulling image "docker.io/perconalab/fluentbit:main-logcollector" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:05 +0000 UTC Normal Pod cert-management-policy-backup-5lr2-vtlh6 Scheduled Successfully assigned kuttl-test-stable-swift/cert-management-policy-backup-5lr2-vtlh6 to gke-jen-pg-1812-09e4007f-default-pool-bb01df06-7d01 default-scheduler logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:05 +0000 UTC Normal Job.batch cert-management-policy-backup-5lr2 SuccessfulCreate Created pod: cert-management-policy-backup-5lr2-vtlh6 job-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:05 +0000 UTC Normal PostgresCluster.upstream.pgv2.percona.com cert-management-policy StanzasCreated pgBackRest stanza creation completed successfully postgrescluster-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:06 +0000 UTC Normal Pod cert-management-policy-backup-5lr2-vtlh6.spec.initContainers{pgbackrest-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:06 +0000 UTC Normal Pod cert-management-policy-backup-5lr2-vtlh6.spec.initContainers{pgbackrest-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd" in 120ms (120ms including waiting). Image size: 87060507 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:06 +0000 UTC Normal Pod cert-management-policy-backup-5lr2-vtlh6.spec.initContainers{pgbackrest-init} Created Created container: pgbackrest-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:06 +0000 UTC Normal Pod cert-management-policy-backup-5lr2-vtlh6.spec.initContainers{pgbackrest-init} Started Started container pgbackrest-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:06 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.initContainers{postgres-startup} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 24.321s (24.321s including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:06 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.initContainers{postgres-startup} Created Created container: postgres-startup kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:06 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.initContainers{postgres-startup} Started Started container postgres-startup kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:08 +0000 UTC Normal Pod cert-management-policy-backup-5lr2-vtlh6.spec.containers{pgbackrest} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:14 +0000 UTC Normal Pod cert-management-policy-backup-5lr2-vtlh6.spec.containers{pgbackrest} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 5.373s (5.373s including waiting). Image size: 122692543 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:14 +0000 UTC Normal Pod cert-management-policy-backup-5lr2-vtlh6.spec.containers{pgbackrest} Created Created container: pgbackrest kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:14 +0000 UTC Normal Pod cert-management-policy-backup-5lr2-vtlh6.spec.containers{pgbackrest} Started Started container pgbackrest kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:14 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.initContainers{nss-wrapper-init-logcollector} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:14 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.initContainers{nss-wrapper-init-logcollector} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 133ms (133ms including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:14 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.initContainers{nss-wrapper-init-logcollector} Created Created container: nss-wrapper-init-logcollector kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:14 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.initContainers{nss-wrapper-init-logcollector} Started Started container nss-wrapper-init-logcollector kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:15 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.initContainers{nss-wrapper-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:15 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.initContainers{nss-wrapper-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 114ms (114ms including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:15 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.initContainers{nss-wrapper-init} Created Created container: nss-wrapper-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:15 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.initContainers{nss-wrapper-init} Started Started container nss-wrapper-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:16 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.containers{database} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:16 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.containers{database} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 159ms (159ms including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:16 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.containers{database} Created Created container: database kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:16 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.containers{database} Started Started container database kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:16 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.containers{replication-cert-copy} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:16 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.containers{replication-cert-copy} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 117ms (118ms including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:16 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.containers{replication-cert-copy} Created Created container: replication-cert-copy kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:17 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.containers{replication-cert-copy} Started Started container replication-cert-copy kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:17 +0000 UTC Normal Pod cert-management-policy-instance1-67wh-0.spec.containers{logs} Pulling Pulling image "docker.io/perconalab/fluentbit:main-logcollector" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:33:52 +0000 UTC Normal Job.batch cert-management-policy-backup-5lr2 Completed Job completed job-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:17 +0000 UTC Normal StatefulSet.apps cert-management-policy-instance1-67wh SuccessfulDelete delete Pod cert-management-policy-instance1-67wh-0 in StatefulSet cert-management-policy-instance1-67wh successful statefulset-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:17 +0000 UTC Normal StatefulSet.apps cert-management-policy-instance1-f59q SuccessfulDelete delete Pod cert-management-policy-instance1-f59q-0 in StatefulSet cert-management-policy-instance1-f59q successful statefulset-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:20 +0000 UTC Normal StatefulSet.apps cert-management-policy-instance1-49wh SuccessfulDelete delete Pod cert-management-policy-instance1-49wh-0 in StatefulSet cert-management-policy-instance1-49wh successful statefulset-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:23 +0000 UTC Normal PodDisruptionBudget.policy cert-management-policy-set-instance1 NoPods No matching pods found controllermanager logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:25 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-475xn.spec.containers{pgbouncer} Killing Stopping container pgbouncer kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:25 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-475xn.spec.containers{pgbouncer-config} Killing Stopping container pgbouncer-config kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:25 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest} Killing Stopping container pgbackrest kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:25 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config} Killing Stopping container pgbackrest-config kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:32 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-instance1-h4c4-pgdata WaitForFirstConsumer waiting for first consumer to be created before binding persistentvolume-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:32 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-instance1-h4c4-pgdata ExternalProvisioning Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered. persistentvolume-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:32 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-instance1-h4c4-pgdata Provisioning External provisioner is provisioning volume for claim "kuttl-test-stable-swift/cert-management-policy-instance1-h4c4-pgdata" pd.csi.storage.gke.io_gke-c6aaa511db014d729735-cd02-f74b-vm_d17f65ab-3170-4d7d-8dcd-19344a0ccb2e logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:32 +0000 UTC Normal StatefulSet.apps cert-management-policy-instance1-h4c4 SuccessfulCreate create Pod cert-management-policy-instance1-h4c4-0 in StatefulSet cert-management-policy-instance1-h4c4 successful statefulset-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:33 +0000 UTC Normal Deployment.apps cert-management-policy-pgbouncer ScalingReplicaSet Scaled up replica set cert-management-policy-pgbouncer-95ff99b8f from 0 to 1 deployment-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:33 +0000 UTC Normal StatefulSet.apps cert-management-policy-repo-host SuccessfulCreate create Pod cert-management-policy-repo-host-0 in StatefulSet cert-management-policy-repo-host successful statefulset-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:33 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-repo1 WaitForFirstConsumer waiting for first consumer to be created before binding persistentvolume-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:33 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-repo1 ExternalProvisioning Waiting for a volume to be created either by the external provisioner 'pd.csi.storage.gke.io' or manually by the system administrator. If volume creation is delayed, please verify that the provisioner is running and correctly registered. persistentvolume-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:33 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-repo1 Provisioning External provisioner is provisioning volume for claim "kuttl-test-stable-swift/cert-management-policy-repo1" pd.csi.storage.gke.io_gke-c6aaa511db014d729735-cd02-f74b-vm_d17f65ab-3170-4d7d-8dcd-19344a0ccb2e logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:33 +0000 UTC Normal PostgresCluster.upstream.pgv2.percona.com cert-management-policy RepoHostCreated created pgBackRest repository host StatefulSet/cert-management-policy-repo-host postgrescluster-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:34 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0 Scheduled Successfully assigned kuttl-test-stable-swift/cert-management-policy-instance1-h4c4-0 to gke-jen-pg-1812-09e4007f-default-pool-bb01df06-w6r9 default-scheduler logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:34 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-instance1-h4c4-pgdata ProvisioningSucceeded Successfully provisioned volume pvc-96fb1b12-4e0a-4035-b272-94a7c13e0012 pd.csi.storage.gke.io_gke-c6aaa511db014d729735-cd02-f74b-vm_d17f65ab-3170-4d7d-8dcd-19344a0ccb2e logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:34 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-42mhb Scheduled Successfully assigned kuttl-test-stable-swift/cert-management-policy-pgbouncer-95ff99b8f-42mhb to gke-jen-pg-1812-09e4007f-default-pool-bb01df06-zfs6 default-scheduler logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:34 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-42mhb.spec.initContainers{pgbouncer-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:34 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-42mhb.spec.initContainers{pgbouncer-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd" in 149ms (149ms including waiting). Image size: 87060507 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:34 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-42mhb.spec.initContainers{pgbouncer-init} Created Created container: pgbouncer-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:34 +0000 UTC Normal ReplicaSet.apps cert-management-policy-pgbouncer-95ff99b8f SuccessfulCreate Created pod: cert-management-policy-pgbouncer-95ff99b8f-42mhb replicaset-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:35 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-42mhb.spec.initContainers{pgbouncer-init} Started Started container pgbouncer-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:35 +0000 UTC Normal Pod cert-management-policy-repo-host-0 Scheduled Successfully assigned kuttl-test-stable-swift/cert-management-policy-repo-host-0 to gke-jen-pg-1812-09e4007f-default-pool-bb01df06-7d01 default-scheduler logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:35 +0000 UTC Normal PersistentVolumeClaim cert-management-policy-repo1 ProvisioningSucceeded Successfully provisioned volume pvc-1d70dfea-edff-41e3-ab09-1a4cfc48560c pd.csi.storage.gke.io_gke-c6aaa511db014d729735-cd02-f74b-vm_d17f65ab-3170-4d7d-8dcd-19344a0ccb2e logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:36 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-42mhb.spec.containers{pgbouncer} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:36 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-42mhb.spec.containers{pgbouncer} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 166ms (166ms including waiting). Image size: 84617369 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:36 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-42mhb.spec.containers{pgbouncer} Created Created container: pgbouncer kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:36 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-42mhb.spec.containers{pgbouncer} Started Started container pgbouncer kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:36 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-42mhb.spec.containers{pgbouncer-config} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:36 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-42mhb.spec.containers{pgbouncer-config} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbouncer18" in 171ms (171ms including waiting). Image size: 84617369 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:37 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-42mhb.spec.containers{pgbouncer-config} Created Created container: pgbouncer-config kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:37 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-42mhb.spec.containers{pgbouncer-config} Started Started container pgbouncer-config kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:43 +0000 UTC Normal Pod cert-management-policy-repo-host-0 SuccessfulAttachVolume AttachVolume.Attach succeeded for volume "pvc-1d70dfea-edff-41e3-ab09-1a4cfc48560c" attachdetach-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:45 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.initContainers{pgbackrest-log-dir} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:45 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.initContainers{pgbackrest-log-dir} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 138ms (138ms including waiting). Image size: 122692543 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:45 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.initContainers{pgbackrest-log-dir} Created Created container: pgbackrest-log-dir kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:45 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.initContainers{pgbackrest-log-dir} Started Started container pgbackrest-log-dir kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:46 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0 SuccessfulAttachVolume AttachVolume.Attach succeeded for volume "pvc-96fb1b12-4e0a-4035-b272-94a7c13e0012" attachdetach-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:46 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.initContainers{nss-wrapper-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:46 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.initContainers{nss-wrapper-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 126ms (126ms including waiting). Image size: 122692543 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:46 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.initContainers{nss-wrapper-init} Created Created container: nss-wrapper-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:46 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.initContainers{nss-wrapper-init} Started Started container nss-wrapper-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:47 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.initContainers{database-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:47 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:47 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 117ms (117ms including waiting). Image size: 122692543 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:47 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest} Created Created container: pgbackrest kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:47 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest} Started Started container pgbackrest kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:47 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:47 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 139ms (139ms including waiting). Image size: 122692543 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:47 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config} Created Created container: pgbackrest-config kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:47 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config} Started Started container pgbackrest-config kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:48 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.initContainers{database-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd" in 142ms (142ms including waiting). Image size: 87060507 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:48 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.initContainers{database-init} Created Created container: database-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:48 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.initContainers{database-init} Started Started container database-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:48 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.initContainers{postgres-startup} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:49 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.initContainers{postgres-startup} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 128ms (128ms including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:49 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.initContainers{postgres-startup} Created Created container: postgres-startup kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:49 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.initContainers{postgres-startup} Started Started container postgres-startup kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:49 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.initContainers{nss-wrapper-init-logcollector} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:50 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.initContainers{nss-wrapper-init-logcollector} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 119ms (119ms including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:50 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.initContainers{nss-wrapper-init-logcollector} Created Created container: nss-wrapper-init-logcollector kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:50 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.initContainers{nss-wrapper-init-logcollector} Started Started container nss-wrapper-init-logcollector kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:50 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.initContainers{nss-wrapper-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:51 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.initContainers{nss-wrapper-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 147ms (147ms including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:51 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.initContainers{nss-wrapper-init} Created Created container: nss-wrapper-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:51 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.initContainers{nss-wrapper-init} Started Started container nss-wrapper-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:51 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.containers{database} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:52 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.containers{database} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 153ms (153ms including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:52 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.containers{database} Created Created container: database kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:52 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.containers{database} Started Started container database kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:52 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.containers{replication-cert-copy} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:52 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.containers{replication-cert-copy} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-ppg18-postgres" in 125ms (125ms including waiting). Image size: 449168764 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:52 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.containers{replication-cert-copy} Created Created container: replication-cert-copy kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:52 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.containers{replication-cert-copy} Started Started container replication-cert-copy kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:52 +0000 UTC Normal Pod cert-management-policy-instance1-h4c4-0.spec.containers{logs} Pulled Container image "docker.io/perconalab/fluentbit:main-logcollector" already present on machine kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:34:56 +0000 UTC Warning Pod cert-management-policy-instance1-h4c4-0.spec.containers{database} Unhealthy Readiness probe failed: kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:35:04 +0000 UTC Normal PostgresCluster.upstream.pgv2.percona.com cert-management-policy StanzasCreated pgBackRest stanza creation completed successfully postgrescluster-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:35:08 +0000 UTC Normal Pod cert-management-policy-backup-wqmx-pfkzc Scheduled Successfully assigned kuttl-test-stable-swift/cert-management-policy-backup-wqmx-pfkzc to gke-jen-pg-1812-09e4007f-default-pool-bb01df06-7d01 default-scheduler logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:35:08 +0000 UTC Normal Job.batch cert-management-policy-backup-wqmx SuccessfulCreate Created pod: cert-management-policy-backup-wqmx-pfkzc job-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:35:09 +0000 UTC Normal Pod cert-management-policy-backup-wqmx-pfkzc.spec.initContainers{pgbackrest-init} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:35:09 +0000 UTC Normal Pod cert-management-policy-backup-wqmx-pfkzc.spec.initContainers{pgbackrest-init} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:PR-1812-09e4007fd" in 139ms (139ms including waiting). Image size: 87060507 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:35:09 +0000 UTC Normal Pod cert-management-policy-backup-wqmx-pfkzc.spec.initContainers{pgbackrest-init} Created Created container: pgbackrest-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:35:09 +0000 UTC Normal Pod cert-management-policy-backup-wqmx-pfkzc.spec.initContainers{pgbackrest-init} Started Started container pgbackrest-init kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:35:10 +0000 UTC Normal Pod cert-management-policy-backup-wqmx-pfkzc.spec.containers{pgbackrest} Pulling Pulling image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:35:10 +0000 UTC Normal Pod cert-management-policy-backup-wqmx-pfkzc.spec.containers{pgbackrest} Pulled Successfully pulled image "docker.io/perconalab/percona-postgresql-operator:main-pgbackrest18" in 106ms (106ms including waiting). Image size: 122692543 bytes. kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:35:10 +0000 UTC Normal Pod cert-management-policy-backup-wqmx-pfkzc.spec.containers{pgbackrest} Created Created container: pgbackrest kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:35:10 +0000 UTC Normal Pod cert-management-policy-backup-wqmx-pfkzc.spec.containers{pgbackrest} Started Started container pgbackrest kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:35:20 +0000 UTC Normal StatefulSet.apps cert-management-policy-instance1-h4c4 SuccessfulDelete delete Pod cert-management-policy-instance1-h4c4-0 in StatefulSet cert-management-policy-instance1-h4c4 successful statefulset-controller logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:35:23 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-42mhb.spec.containers{pgbouncer} Killing Stopping container pgbouncer kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:35:23 +0000 UTC Normal Pod cert-management-policy-pgbouncer-95ff99b8f-42mhb.spec.containers{pgbouncer-config} Killing Stopping container pgbouncer-config kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:35:23 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest} Killing Stopping container pgbackrest kubelet logger.go:42: 20:36:11 | cert-management-policy | 2026-09-01 20:35:23 +0000 UTC Normal Pod cert-management-policy-repo-host-0.spec.containers{pgbackrest-config} Killing Stopping container pgbackrest-config kubelet logger.go:42: 20:36:11 | cert-management-policy | Deleting namespace "kuttl-test-stable-swift" === NAME kuttl harness.go:403: run tests finished harness.go:520: cleaning up harness.go:577: removing temp folder: "" --- PASS: kuttl (348.15s) --- PASS: kuttl/harness (0.00s) --- PASS: kuttl/harness/cert-management-policy (347.39s) PASS