Log: /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/logs/demand-backup-logical-minio-native-tls.log
Warning: version difference between client (1.36) and server (1.33) exceeds the supported minor version skew of +/-1
Warning: version difference between client (1.36) and server (1.33) exceeds the supported minor version skew of +/-1
Warning: version difference between client (1.36) and server (1.33) exceeds the supported minor version skew of +/-1
+ create_infra demand-backup-logical-minio-native-tls-23030
+ local ns=demand-backup-logical-minio-native-tls-23030
+ echo demand-backup-logical-minio-native-tls-23030
+ [[ 0 == 1 ]]
+ '[' -n psmdb-operator ']'
+ create_namespace psmdb-operator
+ local namespace=psmdb-operator
+ local skip_clean_namespace=
+ [[ 1 == 1 ]]
+ [[ -z '' ]]
+ destroy_chaos_mesh
++ helm list --all-namespaces --filter chaos-mesh
++ tail -n1
++ awk '-F ' '{print $2}'
++ sed s/NAMESPACE//
+ local chaos_mesh_ns=
+ desc 'destroy chaos-mesh'
+ set +o xtrace


-----------------------------------------------------------------------------------
destroy chaos-mesh
-----------------------------------------------------------------------------------

+ '[' -n '' ']'
++ kubectl get MutatingWebhookConfiguration
++ awk '{print $1}'
++ grep chaos-mesh
+ timeout 30 kubectl delete MutatingWebhookConfiguration
error: resource(s) were provided, but no name was specified
+ :
++ kubectl get ValidatingWebhookConfiguration
++ grep chaos-mesh
++ awk '{print $1}'
+ timeout 30 kubectl delete ValidatingWebhookConfiguration
error: resource(s) were provided, but no name was specified
+ :
++ kubectl get ValidatingWebhookConfiguration
++ grep validate-auth
++ awk '{print $1}'
+ timeout 30 kubectl delete ValidatingWebhookConfiguration
error: resource(s) were provided, but no name was specified
+ :
++ kubectl api-resources
++ grep chaos-mesh
++ awk '{print $1}'
++ kubectl get crd
++ grep chaos-mesh.org
++ awk '{print $1}'
+ timeout 30 kubectl delete crd
error: resource(s) were provided, but no name was specified
+ :
++ kubectl get clusterrolebinding
++ grep chaos-mesh
++ awk '{print $1}'
+ timeout 30 kubectl delete clusterrolebinding
error: resource(s) were provided, but no name was specified
+ :
++ kubectl get clusterrole
++ grep chaos-mesh
++ awk '{print $1}'
+ timeout 30 kubectl delete clusterrole
error: resource(s) were provided, but no name was specified
+ :
+ desc 'cleaned up all old namespaces'
+ set +o xtrace


-----------------------------------------------------------------------------------
cleaned up all old namespaces
-----------------------------------------------------------------------------------

+ kubectl_bin get ns
+ grep -E -v '^kube-|^default|Terminating|psmdb-operator|openshift|^gke-|^gmp-|^NAME'
++ mktemp
+ awk '{print$1}'
+ xargs kubectl delete ns
+ '[' -n '' ']'
+ desc 'cleaned up old namespaces psmdb-operator'
+ set +o xtrace


-----------------------------------------------------------------------------------
cleaned up old namespaces psmdb-operator
-----------------------------------------------------------------------------------

+ kubectl_bin delete namespace psmdb-operator --ignore-not-found
++ mktemp
+ local LAST_OUT=/tmp/tmp.scUa2m8Fai
++ mktemp
+ local LAST_OUT=/tmp/tmp.OVoTKzCiUX
++ mktemp
+ local LAST_ERR=/tmp/tmp.PWlFlbhetK
+ local exit_status=0
+ local timeout=4
+ local LAST_ERR=/tmp/tmp.oqB2WWUziz
+ local exit_status=0
+ local timeout=4
++ seq 0 2
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl delete namespace psmdb-operator --ignore-not-found
+ for i in $(seq 0 2)
+ set +e
+ kubectl get ns
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.scUa2m8Fai
+ cat /tmp/tmp.PWlFlbhetK
+ rm /tmp/tmp.scUa2m8Fai /tmp/tmp.PWlFlbhetK
+ return 0
namespace "data-at-rest-encryption-27005" deleted
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.OVoTKzCiUX
namespace "psmdb-operator" deleted
+ cat /tmp/tmp.oqB2WWUziz
+ rm /tmp/tmp.OVoTKzCiUX /tmp/tmp.oqB2WWUziz
+ return 0
+ kubectl_bin wait --for=delete namespace psmdb-operator
++ mktemp
+ local LAST_OUT=/tmp/tmp.zc10L2TTdd
++ mktemp
+ local LAST_ERR=/tmp/tmp.W35RPKt3ep
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl wait --for=delete namespace psmdb-operator
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.zc10L2TTdd
+ cat /tmp/tmp.W35RPKt3ep
+ rm /tmp/tmp.zc10L2TTdd /tmp/tmp.W35RPKt3ep
+ return 0
+ desc 'create namespace psmdb-operator'
+ set +o xtrace


-----------------------------------------------------------------------------------
create namespace psmdb-operator
-----------------------------------------------------------------------------------

+ kubectl_bin create namespace psmdb-operator
++ mktemp
+ local LAST_OUT=/tmp/tmp.XCLz0ee5lQ
++ mktemp
+ local LAST_ERR=/tmp/tmp.xEtzdCQmMu
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl create namespace psmdb-operator
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.XCLz0ee5lQ
namespace/psmdb-operator created
+ cat /tmp/tmp.xEtzdCQmMu
+ rm /tmp/tmp.XCLz0ee5lQ /tmp/tmp.xEtzdCQmMu
+ return 0
+ set_kube_ctx psmdb-operator
+ local namespace=psmdb-operator
++ kubectl_bin config current-context
+++ mktemp
++ local LAST_OUT=/tmp/tmp.jljxbfvZls
+++ mktemp
++ local LAST_ERR=/tmp/tmp.OJD9yDZlej
++ local exit_status=0
++ local timeout=4
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl config current-context
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.jljxbfvZls
++ cat /tmp/tmp.OJD9yDZlej
++ rm /tmp/tmp.jljxbfvZls /tmp/tmp.OJD9yDZlej
++ return 0
+ kubectl_bin config set-context gke_cloud-dev-112233_us-central1-a_jen-psmdb-2058-fb8cc7187-17-cluster8 --namespace=psmdb-operator
++ mktemp
+ local LAST_OUT=/tmp/tmp.kCCN8tQN0I
++ mktemp
+ local LAST_ERR=/tmp/tmp.JrMi3i9EXV
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl config set-context gke_cloud-dev-112233_us-central1-a_jen-psmdb-2058-fb8cc7187-17-cluster8 --namespace=psmdb-operator
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.kCCN8tQN0I
Context "gke_cloud-dev-112233_us-central1-a_jen-psmdb-2058-fb8cc7187-17-cluster8" modified.
+ cat /tmp/tmp.JrMi3i9EXV
+ rm /tmp/tmp.kCCN8tQN0I /tmp/tmp.JrMi3i9EXV
+ return 0
+ deploy_operator
+ desc 'start PSMDB operator: docker.io/perconalab/percona-server-mongodb-operator:PR-2058-fb8cc7187'
+ set +o xtrace


-----------------------------------------------------------------------------------
start PSMDB operator: docker.io/perconalab/percona-server-mongodb-operator:PR-2058-fb8cc7187
-----------------------------------------------------------------------------------

+ local cr_file
+ '[' -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/demand-backup-logical-minio-native-tls/conf/crd.yaml ']'
+ cr_file=/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/deploy/crd.yaml
+ kubectl_bin apply --server-side --force-conflicts -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/deploy/crd.yaml
++ mktemp
+ local LAST_OUT=/tmp/tmp.R83saWsmu8
++ mktemp
+ local LAST_ERR=/tmp/tmp.W6AnrAfDcP
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply --server-side --force-conflicts -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/deploy/crd.yaml
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.R83saWsmu8
customresourcedefinition.apiextensions.k8s.io/perconaservermongodbbackups.psmdb.percona.com serverside-applied
customresourcedefinition.apiextensions.k8s.io/perconaservermongodbrestores.psmdb.percona.com serverside-applied
customresourcedefinition.apiextensions.k8s.io/perconaservermongodbs.psmdb.percona.com serverside-applied
+ cat /tmp/tmp.W6AnrAfDcP
+ rm /tmp/tmp.R83saWsmu8 /tmp/tmp.W6AnrAfDcP
+ return 0
+ '[' -n psmdb-operator ']'
+ apply_rbac cw-rbac
+ local operator_namespace=psmdb-operator
+ local rbac=cw-rbac
+ cat /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/deploy/cw-rbac.yaml
+ sed -e 's^namespace: .*^namespace: psmdb-operator^'
+ kubectl_bin apply -n psmdb-operator -f -
++ mktemp
+ local LAST_OUT=/tmp/tmp.hChs3vU0Wq
++ mktemp
+ local LAST_ERR=/tmp/tmp.bp5DeWF8ko
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -n psmdb-operator -f -
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.hChs3vU0Wq
clusterrole.rbac.authorization.k8s.io/percona-server-mongodb-operator unchanged
serviceaccount/percona-server-mongodb-operator created
clusterrolebinding.rbac.authorization.k8s.io/service-account-percona-server-mongodb-operator unchanged
+ cat /tmp/tmp.bp5DeWF8ko
+ rm /tmp/tmp.hChs3vU0Wq /tmp/tmp.bp5DeWF8ko
+ return 0
+ yq eval $'\n\t\t\t(.spec.template.spec.containers[].image = "docker.io/perconalab/percona-server-mongodb-operator:PR-2058-fb8cc7187") |\n\t\t\t((.. | select(.[] == "DISABLE_TELEMETRY")) |= .value="true") |\n\t\t\t((.. | select(.[] == "LOG_LEVEL")) |= .value="DEBUG")' /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/deploy/cw-operator.yaml
+ kubectl_bin apply -n psmdb-operator -f -
++ mktemp
+ local LAST_OUT=/tmp/tmp.YMTEtT7BDV
++ mktemp
+ local LAST_ERR=/tmp/tmp.se2iWQGAaO
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -n psmdb-operator -f -
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.YMTEtT7BDV
deployment.apps/percona-server-mongodb-operator created
+ cat /tmp/tmp.se2iWQGAaO
+ rm /tmp/tmp.YMTEtT7BDV /tmp/tmp.se2iWQGAaO
+ return 0
+ sleep 20
++ get_operator_pod
++ kubectl_bin get pods --selector=name=percona-server-mongodb-operator -o 'jsonpath={.items[].metadata.name}' -n psmdb-operator
+++ mktemp
++ local LAST_OUT=/tmp/tmp.jxqaabyPDx
+++ mktemp
++ local LAST_ERR=/tmp/tmp.VT7NSxMQ2N
++ local exit_status=0
++ local timeout=4
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get pods --selector=name=percona-server-mongodb-operator -o 'jsonpath={.items[].metadata.name}' -n psmdb-operator
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.jxqaabyPDx
++ cat /tmp/tmp.VT7NSxMQ2N
++ rm /tmp/tmp.jxqaabyPDx /tmp/tmp.VT7NSxMQ2N
++ return 0
+ wait_operator_pod percona-server-mongodb-operator-859f4bc6d7-l8kdv
+ local pod=percona-server-mongodb-operator-859f4bc6d7-l8kdv
+ set +o xtrace
waiting for pod/percona-server-mongodb-operator-859f4bc6d7-l8kdv to be ready.OK
+ echo 'Print operator info from log'
Print operator info from log
+ grep 'Manager starting up'
++ get_operator_pod
++ kubectl_bin get pods --selector=name=percona-server-mongodb-operator -o 'jsonpath={.items[].metadata.name}' -n psmdb-operator
+++ mktemp
++ local LAST_OUT=/tmp/tmp.OgUFi3V1Tl
+++ mktemp
++ local LAST_ERR=/tmp/tmp.Pp7HppJf3E
++ local exit_status=0
++ local timeout=4
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get pods --selector=name=percona-server-mongodb-operator -o 'jsonpath={.items[].metadata.name}' -n psmdb-operator
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.OgUFi3V1Tl
++ cat /tmp/tmp.Pp7HppJf3E
++ rm /tmp/tmp.OgUFi3V1Tl /tmp/tmp.Pp7HppJf3E
++ return 0
+ kubectl_bin logs -n psmdb-operator percona-server-mongodb-operator-859f4bc6d7-l8kdv
++ mktemp
+ local LAST_OUT=/tmp/tmp.3NEZ6HTgxY
++ mktemp
+ local LAST_ERR=/tmp/tmp.t24ufdizVr
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl logs -n psmdb-operator percona-server-mongodb-operator-859f4bc6d7-l8kdv
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.3NEZ6HTgxY
+ cat /tmp/tmp.t24ufdizVr
+ rm /tmp/tmp.3NEZ6HTgxY /tmp/tmp.t24ufdizVr
+ return 0
2026-06-09T07:45:59.383Z	INFO	setup	Manager starting up	{"gitCommit": "fb8cc718776dc8f9e011cd5f23fe48cf7f65143e", "gitBranch": "PR-2058-fb8cc7187", "buildTime": "", "goVersion": "go1.26.4", "os": "linux", "arch": "amd64"}
+ create_namespace demand-backup-logical-minio-native-tls-23030
+ local namespace=demand-backup-logical-minio-native-tls-23030
+ local skip_clean_namespace=
+ [[ 1 == 1 ]]
+ [[ -z '' ]]
+ destroy_chaos_mesh
++ helm list --all-namespaces --filter chaos-mesh
++ tail -n1
++ awk '-F ' '{print $2}'
++ sed s/NAMESPACE//
+ local chaos_mesh_ns=
+ desc 'destroy chaos-mesh'
+ set +o xtrace


-----------------------------------------------------------------------------------
destroy chaos-mesh
-----------------------------------------------------------------------------------

+ '[' -n '' ']'
++ kubectl get MutatingWebhookConfiguration
++ grep chaos-mesh
++ awk '{print $1}'
+ timeout 30 kubectl delete MutatingWebhookConfiguration
error: resource(s) were provided, but no name was specified
+ :
++ kubectl get ValidatingWebhookConfiguration
++ awk '{print $1}'
++ grep chaos-mesh
+ timeout 30 kubectl delete ValidatingWebhookConfiguration
error: resource(s) were provided, but no name was specified
+ :
++ kubectl get ValidatingWebhookConfiguration
++ grep validate-auth
++ awk '{print $1}'
+ timeout 30 kubectl delete ValidatingWebhookConfiguration
error: resource(s) were provided, but no name was specified
+ :
++ kubectl api-resources
++ grep chaos-mesh
++ awk '{print $1}'
++ kubectl get crd
++ grep chaos-mesh.org
++ awk '{print $1}'
+ timeout 30 kubectl delete crd
error: resource(s) were provided, but no name was specified
+ :
++ kubectl get clusterrolebinding
++ grep chaos-mesh
++ awk '{print $1}'
+ timeout 30 kubectl delete clusterrolebinding
error: resource(s) were provided, but no name was specified
+ :
++ kubectl get clusterrole
++ grep chaos-mesh
++ awk '{print $1}'
+ timeout 30 kubectl delete clusterrole
error: resource(s) were provided, but no name was specified
+ :
+ desc 'cleaned up all old namespaces'
+ set +o xtrace


-----------------------------------------------------------------------------------
cleaned up all old namespaces
-----------------------------------------------------------------------------------

+ kubectl_bin get ns
+ grep -E -v '^kube-|^default|Terminating|psmdb-operator|openshift|^gke-|^gmp-|^NAME'
+ '[' -n '' ']'
+ desc 'cleaned up old namespaces demand-backup-logical-minio-native-tls-23030'
+ set +o xtrace


-----------------------------------------------------------------------------------
cleaned up old namespaces demand-backup-logical-minio-native-tls-23030
-----------------------------------------------------------------------------------

+ kubectl_bin delete namespace demand-backup-logical-minio-native-tls-23030 --ignore-not-found
++ mktemp
+ awk '{print$1}'
+ local LAST_OUT=/tmp/tmp.fRZKAav5F9
++ mktemp
+ xargs kubectl delete ns
++ mktemp
+ local LAST_ERR=/tmp/tmp.xd49nGCodW
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ local LAST_OUT=/tmp/tmp.RfqbyLypiD
+ for i in $(seq 0 2)
+ set +e
+ kubectl get ns
++ mktemp
+ local LAST_ERR=/tmp/tmp.PMNQv136Jp
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl delete namespace demand-backup-logical-minio-native-tls-23030 --ignore-not-found
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.fRZKAav5F9
+ cat /tmp/tmp.xd49nGCodW
+ rm /tmp/tmp.fRZKAav5F9 /tmp/tmp.xd49nGCodW
+ return 0
error: resource(s) were provided, but no name was specified
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.RfqbyLypiD
+ cat /tmp/tmp.PMNQv136Jp
+ rm /tmp/tmp.RfqbyLypiD /tmp/tmp.PMNQv136Jp
+ return 0
+ kubectl_bin wait --for=delete namespace demand-backup-logical-minio-native-tls-23030
++ mktemp
+ local LAST_OUT=/tmp/tmp.NhwkANiVnU
++ mktemp
+ local LAST_ERR=/tmp/tmp.qSWRsuyEeH
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl wait --for=delete namespace demand-backup-logical-minio-native-tls-23030
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.NhwkANiVnU
+ cat /tmp/tmp.qSWRsuyEeH
+ rm /tmp/tmp.NhwkANiVnU /tmp/tmp.qSWRsuyEeH
+ return 0
+ desc 'create namespace demand-backup-logical-minio-native-tls-23030'
+ set +o xtrace


-----------------------------------------------------------------------------------
create namespace demand-backup-logical-minio-native-tls-23030
-----------------------------------------------------------------------------------

+ kubectl_bin create namespace demand-backup-logical-minio-native-tls-23030
++ mktemp
+ local LAST_OUT=/tmp/tmp.4st6dhZpL1
++ mktemp
+ local LAST_ERR=/tmp/tmp.MZHRNmW7E7
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl create namespace demand-backup-logical-minio-native-tls-23030
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.4st6dhZpL1
namespace/demand-backup-logical-minio-native-tls-23030 created
+ cat /tmp/tmp.MZHRNmW7E7
+ rm /tmp/tmp.4st6dhZpL1 /tmp/tmp.MZHRNmW7E7
+ return 0
+ set_kube_ctx demand-backup-logical-minio-native-tls-23030
+ local namespace=demand-backup-logical-minio-native-tls-23030
++ kubectl_bin config current-context
+++ mktemp
++ local LAST_OUT=/tmp/tmp.7hOzyWpT2l
+++ mktemp
++ local LAST_ERR=/tmp/tmp.H7jnXYDVI9
++ local exit_status=0
++ local timeout=4
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl config current-context
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.7hOzyWpT2l
++ cat /tmp/tmp.H7jnXYDVI9
++ rm /tmp/tmp.7hOzyWpT2l /tmp/tmp.H7jnXYDVI9
++ return 0
+ kubectl_bin config set-context gke_cloud-dev-112233_us-central1-a_jen-psmdb-2058-fb8cc7187-17-cluster8 --namespace=demand-backup-logical-minio-native-tls-23030
++ mktemp
+ local LAST_OUT=/tmp/tmp.dyW7t1VNRX
++ mktemp
+ local LAST_ERR=/tmp/tmp.d8nT2PYvpg
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl config set-context gke_cloud-dev-112233_us-central1-a_jen-psmdb-2058-fb8cc7187-17-cluster8 --namespace=demand-backup-logical-minio-native-tls-23030
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.dyW7t1VNRX
Context "gke_cloud-dev-112233_us-central1-a_jen-psmdb-2058-fb8cc7187-17-cluster8" modified.
+ cat /tmp/tmp.d8nT2PYvpg
+ rm /tmp/tmp.dyW7t1VNRX /tmp/tmp.d8nT2PYvpg
+ return 0
+ desc 'Deploy cert-manager for proper certificate generation'
+ set +o xtrace


-----------------------------------------------------------------------------------
Deploy cert-manager for proper certificate generation
-----------------------------------------------------------------------------------

+ deploy_cert_manager
+ desc 'deploy cert manager'
+ set +o xtrace


-----------------------------------------------------------------------------------
deploy cert manager
-----------------------------------------------------------------------------------

+ kubectl_bin create namespace cert-manager
++ mktemp
+ local LAST_OUT=/tmp/tmp.C9wYAkgPb5
++ mktemp
+ local LAST_ERR=/tmp/tmp.zHRcXyzLLk
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl create namespace cert-manager
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.C9wYAkgPb5
namespace/cert-manager created
+ cat /tmp/tmp.zHRcXyzLLk
+ rm /tmp/tmp.C9wYAkgPb5 /tmp/tmp.zHRcXyzLLk
+ return 0
+ kubectl_bin label namespace cert-manager certmanager.k8s.io/disable-validation=true
++ mktemp
+ local LAST_OUT=/tmp/tmp.j7f0qzuEKX
++ mktemp
+ local LAST_ERR=/tmp/tmp.B5zJpzDVLS
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl label namespace cert-manager certmanager.k8s.io/disable-validation=true
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.j7f0qzuEKX
namespace/cert-manager labeled
+ cat /tmp/tmp.B5zJpzDVLS
+ rm /tmp/tmp.j7f0qzuEKX /tmp/tmp.B5zJpzDVLS
+ return 0
+ kubectl_bin apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.19.3/cert-manager.yaml --validate=false
++ mktemp
+ local LAST_OUT=/tmp/tmp.AFgrGKKcGp
++ mktemp
+ local LAST_ERR=/tmp/tmp.Lg0xNbWSsj
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f https://github.com/cert-manager/cert-manager/releases/download/v1.19.3/cert-manager.yaml --validate=false
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.AFgrGKKcGp
namespace/cert-manager configured
customresourcedefinition.apiextensions.k8s.io/challenges.acme.cert-manager.io created
customresourcedefinition.apiextensions.k8s.io/orders.acme.cert-manager.io created
customresourcedefinition.apiextensions.k8s.io/certificaterequests.cert-manager.io created
customresourcedefinition.apiextensions.k8s.io/certificates.cert-manager.io created
customresourcedefinition.apiextensions.k8s.io/clusterissuers.cert-manager.io created
customresourcedefinition.apiextensions.k8s.io/issuers.cert-manager.io created
serviceaccount/cert-manager-cainjector created
serviceaccount/cert-manager created
serviceaccount/cert-manager-webhook created
clusterrole.rbac.authorization.k8s.io/cert-manager-cainjector created
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-issuers created
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers created
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-certificates created
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-orders created
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-challenges created
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim created
clusterrole.rbac.authorization.k8s.io/cert-manager-cluster-view created
clusterrole.rbac.authorization.k8s.io/cert-manager-view created
clusterrole.rbac.authorization.k8s.io/cert-manager-edit created
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io created
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests created
clusterrole.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-cainjector created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-issuers created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-certificates created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-orders created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-challenges created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests created
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews created
role.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection created
role.rbac.authorization.k8s.io/cert-manager:leaderelection created
role.rbac.authorization.k8s.io/cert-manager-tokenrequest created
role.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving created
rolebinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection created
rolebinding.rbac.authorization.k8s.io/cert-manager:leaderelection created
rolebinding.rbac.authorization.k8s.io/cert-manager-tokenrequest created
rolebinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving created
service/cert-manager-cainjector created
service/cert-manager created
service/cert-manager-webhook created
deployment.apps/cert-manager-cainjector created
deployment.apps/cert-manager created
deployment.apps/cert-manager-webhook created
mutatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook created
validatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook created
+ cat /tmp/tmp.Lg0xNbWSsj
Warning: resource namespaces/cert-manager is missing the kubectl.kubernetes.io/last-applied-configuration annotation which is required by kubectl apply. kubectl apply should only be used on resources created declaratively by either kubectl create --save-config or kubectl apply. The missing annotation will be patched automatically.
+ rm /tmp/tmp.AFgrGKKcGp /tmp/tmp.Lg0xNbWSsj
+ return 0
+ kubectl_bin -n cert-manager wait pod -l app.kubernetes.io/instance=cert-manager --for=condition=ready
++ mktemp
+ local LAST_OUT=/tmp/tmp.s5FILvCw5n
++ mktemp
+ local LAST_ERR=/tmp/tmp.eO8Fl6X6xy
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl -n cert-manager wait pod -l app.kubernetes.io/instance=cert-manager --for=condition=ready
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.s5FILvCw5n
pod/cert-manager-559d798845-7m8nx condition met
pod/cert-manager-cainjector-64958d9c7c-44jm5 condition met
pod/cert-manager-webhook-7fb6f99b56-7crv2 condition met
+ cat /tmp/tmp.eO8Fl6X6xy
E0609 07:47:00.819625  303522 reflector.go:227] "Failed to watch" err="Get \"https://35.239.85.99/api/v1/namespaces/cert-manager/pods?allowWatchBookmarks=true&fieldSelector=metadata.name%3Dcert-manager-cainjector-64958d9c7c-44jm5&resourceVersion=1780991220436255007&timeoutSeconds=440&watch=true\": context canceled" reflector="k8s.io/client-go/tools/watch/informerwatcher.go:162" type="*unstructured.Unstructured"
+ rm /tmp/tmp.s5FILvCw5n /tmp/tmp.eO8Fl6X6xy
+ return 0
+ sleep 120
+ desc 'Create self-signed issuer'
+ set +o xtrace


-----------------------------------------------------------------------------------
Create self-signed issuer
-----------------------------------------------------------------------------------

+ kubectl_bin apply -f -
++ mktemp
+ local LAST_OUT=/tmp/tmp.Imu4NSAWh0
++ mktemp
+ local LAST_ERR=/tmp/tmp.nIDLzE55LR
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f -
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.Imu4NSAWh0
issuer.cert-manager.io/selfsigned-issuer created
+ cat /tmp/tmp.nIDLzE55LR
+ rm /tmp/tmp.Imu4NSAWh0 /tmp/tmp.nIDLzE55LR
+ return 0
+ desc 'Generate certificate for MinIO via cert-manager'
+ set +o xtrace


-----------------------------------------------------------------------------------
Generate certificate for MinIO via cert-manager
-----------------------------------------------------------------------------------

+ kubectl_bin apply -f -
++ mktemp
+ local LAST_OUT=/tmp/tmp.ZLa9ixCvLp
++ mktemp
+ local LAST_ERR=/tmp/tmp.dz1zKeOZMn
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f -
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.ZLa9ixCvLp
certificate.cert-manager.io/minio-cert created
+ cat /tmp/tmp.dz1zKeOZMn
Warning: spec.privateKey.rotationPolicy: In cert-manager >= v1.18.0, the default value changed from `Never` to `Always`.
+ rm /tmp/tmp.ZLa9ixCvLp /tmp/tmp.dz1zKeOZMn
+ return 0
+ kubectl_bin wait --for=condition=Ready certificate/minio-cert -n demand-backup-logical-minio-native-tls-23030 --timeout=120s
++ mktemp
+ local LAST_OUT=/tmp/tmp.Z5UnsxecIC
++ mktemp
+ local LAST_ERR=/tmp/tmp.h9QPOPDUno
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl wait --for=condition=Ready certificate/minio-cert -n demand-backup-logical-minio-native-tls-23030 --timeout=120s
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.Z5UnsxecIC
certificate.cert-manager.io/minio-cert condition met
+ cat /tmp/tmp.h9QPOPDUno
E0609 07:49:14.332866  324899 reflector.go:227] "Failed to watch" err="Get \"https://35.239.85.99/apis/cert-manager.io/v1/namespaces/demand-backup-logical-minio-native-tls-23030/certificates?allowWatchBookmarks=true&fieldSelector=metadata.name%3Dminio-cert&resourceVersion=1780991353470799014&timeoutSeconds=327&watch=true\": context canceled" reflector="k8s.io/client-go/tools/watch/informerwatcher.go:162" type="*unstructured.Unstructured"
+ rm /tmp/tmp.Z5UnsxecIC /tmp/tmp.h9QPOPDUno
+ return 0
+ kubectl_bin get secret minio-tls-temp -n demand-backup-logical-minio-native-tls-23030 -o 'jsonpath={.data.tls\.crt}'
+ base64 -d
++ mktemp
+ local LAST_OUT=/tmp/tmp.9Al6xQHHIg
++ mktemp
+ local LAST_ERR=/tmp/tmp.QopLwQiplz
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl get secret minio-tls-temp -n demand-backup-logical-minio-native-tls-23030 -o 'jsonpath={.data.tls\.crt}'
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.9Al6xQHHIg
+ cat /tmp/tmp.QopLwQiplz
+ rm /tmp/tmp.9Al6xQHHIg /tmp/tmp.QopLwQiplz
+ return 0
+ kubectl_bin get secret minio-tls-temp -n demand-backup-logical-minio-native-tls-23030 -o 'jsonpath={.data.tls\.key}'
+ base64 -d
++ mktemp
+ local LAST_OUT=/tmp/tmp.ARBj7QmL3g
++ mktemp
+ local LAST_ERR=/tmp/tmp.LkmuQYSZYl
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl get secret minio-tls-temp -n demand-backup-logical-minio-native-tls-23030 -o 'jsonpath={.data.tls\.key}'
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.ARBj7QmL3g
+ cat /tmp/tmp.LkmuQYSZYl
+ rm /tmp/tmp.ARBj7QmL3g /tmp/tmp.LkmuQYSZYl
+ return 0
+ kubectl_bin create secret generic minio-tls -n demand-backup-logical-minio-native-tls-23030 --from-file=public.crt=/tmp/minio-cert.pem --from-file=private.key=/tmp/minio-key.pem
++ mktemp
+ local LAST_OUT=/tmp/tmp.RHB1B4hH1U
++ mktemp
+ local LAST_ERR=/tmp/tmp.ssGrC2gT5z
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl create secret generic minio-tls -n demand-backup-logical-minio-native-tls-23030 --from-file=public.crt=/tmp/minio-cert.pem --from-file=private.key=/tmp/minio-key.pem
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.RHB1B4hH1U
secret/minio-tls created
+ cat /tmp/tmp.ssGrC2gT5z
+ rm /tmp/tmp.RHB1B4hH1U /tmp/tmp.ssGrC2gT5z
+ return 0
+ kubectl_bin create secret generic minio-ca-bundle -n demand-backup-logical-minio-native-tls-23030 --from-file=ca.crt=/tmp/minio-cert.pem
++ mktemp
+ local LAST_OUT=/tmp/tmp.BdgXazjFvU
++ mktemp
+ local LAST_ERR=/tmp/tmp.oko1ycdwHF
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl create secret generic minio-ca-bundle -n demand-backup-logical-minio-native-tls-23030 --from-file=ca.crt=/tmp/minio-cert.pem
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.BdgXazjFvU
secret/minio-ca-bundle created
+ cat /tmp/tmp.oko1ycdwHF
+ rm /tmp/tmp.BdgXazjFvU /tmp/tmp.oko1ycdwHF
+ return 0
+ desc 'Deploy MinIO with TLS'
+ set +o xtrace


-----------------------------------------------------------------------------------
Deploy MinIO with TLS
-----------------------------------------------------------------------------------

+ deploy_minio minio-tls
+ local cert_secret=minio-tls
+ local service_name=minio-service
+ desc 'install MinIO: minio-service'
+ set +o xtrace


-----------------------------------------------------------------------------------
install MinIO: minio-service
-----------------------------------------------------------------------------------

+ helm uninstall minio-service
+ :
+ helm repo remove minio
"minio" has been removed from your repositories
+ helm repo add minio https://charts.min.io/
"minio" has been added to your repositories
+ local endpoint=http://minio-service:9000
+ minio_args=('--version' '5.4.0' '--set' 'replicas=1' '--set' 'mode=standalone' '--set' 'resources.requests.memory=256Mi' '--set' 'rootUser=rootuser' '--set' 'rootPassword=rootpass123' '--set' 'users[0].accessKey=some-access-key' '--set' 'users[0].secretKey=some-secret-key' '--set' 'users[0].policy=consoleAdmin' '--set' 'service.type=ClusterIP' '--set' 'configPathmc=/tmp/' '--set' 'securityContext.enabled=false' '--set' 'persistence.size=2G' '--set' 'fullnameOverride=minio-service' '--set' 'serviceAccount.create=true' '--set' 'serviceAccount.name=minio-service-sa')
+ local minio_args
+ [[ -n minio-tls ]]
+ endpoint=https://minio-service:9000
+ minio_args+=(--set tls.enabled=true --set tls.certSecret="$cert_secret")
+ retry 10 60 helm install minio-service --version 5.4.0 --set replicas=1 --set mode=standalone --set resources.requests.memory=256Mi --set rootUser=rootuser --set rootPassword=rootpass123 --set 'users[0].accessKey=some-access-key' --set 'users[0].secretKey=some-secret-key' --set 'users[0].policy=consoleAdmin' --set service.type=ClusterIP --set configPathmc=/tmp/ --set securityContext.enabled=false --set persistence.size=2G --set fullnameOverride=minio-service --set serviceAccount.create=true --set serviceAccount.name=minio-service-sa --set tls.enabled=true --set tls.certSecret=minio-tls minio/minio
+ local max=10
+ local delay=60
+ shift 2
+ local n=1
+ helm install minio-service --version 5.4.0 --set replicas=1 --set mode=standalone --set resources.requests.memory=256Mi --set rootUser=rootuser --set rootPassword=rootpass123 --set 'users[0].accessKey=some-access-key' --set 'users[0].secretKey=some-secret-key' --set 'users[0].policy=consoleAdmin' --set service.type=ClusterIP --set configPathmc=/tmp/ --set securityContext.enabled=false --set persistence.size=2G --set fullnameOverride=minio-service --set serviceAccount.create=true --set serviceAccount.name=minio-service-sa --set tls.enabled=true --set tls.certSecret=minio-tls minio/minio
NAME: minio-service
LAST DEPLOYED: Tue Jun  9 07:49:21 2026
NAMESPACE: demand-backup-logical-minio-native-tls-23030
STATUS: deployed
REVISION: 1
TEST SUITE: None
NOTES:
MinIO can be accessed via port 9000 on the following DNS name from within your cluster:
minio-service.demand-backup-logical-minio-native-tls-23030.cluster.local

To access MinIO from localhost, run the below commands:

  1. export POD_NAME=$(kubectl get pods --namespace demand-backup-logical-minio-native-tls-23030 -l "release=minio-service" -o jsonpath="{.items[0].metadata.name}")

  2. kubectl port-forward $POD_NAME 9000 --namespace demand-backup-logical-minio-native-tls-23030

Read more about port forwarding here: http://kubernetes.io/docs/user-guide/kubectl/kubectl_port-forward/

You can now access MinIO server on http://localhost:9000. Follow the below steps to connect to MinIO server with mc client:

  1. Download the MinIO mc client - https://min.io/docs/minio/linux/reference/minio-mc.html#quickstart

  2. export MC_HOST_minio-service-local=http://$(kubectl get secret --namespace demand-backup-logical-minio-native-tls-23030 minio-service -o jsonpath="{.data.rootUser}" | base64 --decode):$(kubectl get secret --namespace demand-backup-logical-minio-native-tls-23030 minio-service -o jsonpath="{.data.rootPassword}" | base64 --decode)@localhost:9000

  3. mc ls minio-service-local
++ kubectl_bin get pods --selector=release=minio-service -o 'jsonpath={.items[].metadata.name}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.bEmaY8vJnO
+++ mktemp
++ local LAST_ERR=/tmp/tmp.WUlIaJJr0H
++ local exit_status=0
++ local timeout=4
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get pods --selector=release=minio-service -o 'jsonpath={.items[].metadata.name}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.bEmaY8vJnO
++ cat /tmp/tmp.WUlIaJJr0H
++ rm /tmp/tmp.bEmaY8vJnO /tmp/tmp.WUlIaJJr0H
++ return 0
+ local MINIO_POD=minio-service-6f4667bf4c-z5m9z
+ wait_pod minio-service-6f4667bf4c-z5m9z
+ local pod=minio-service-6f4667bf4c-z5m9z
+ set +o xtrace
waiting for pod/minio-service-6f4667bf4c-z5m9z to be ready.OK
+ '[' -n psmdb-operator ']'
+ kubectl_bin create svc -n psmdb-operator externalname minio-service --external-name=minio-service.demand-backup-logical-minio-native-tls-23030.svc.cluster.local --tcp=9000
service/minio-service created
+ create_minio_bucket operator-testing https://minio-service:9000
+ local bucket=operator-testing
+ local endpoint=https://minio-service:9000
+ kubectl_bin run -i --rm aws-cli --image=docker.io/perconalab/awscli --restart=Never -- bash -c $'AWS_ACCESS_KEY_ID=some-access-key \t\tAWS_SECRET_ACCESS_KEY=some-secret-key \t\tAWS_DEFAULT_REGION=us-east-1         /usr/bin/aws --no-verify-ssl --endpoint-url https://minio-service:9000 s3 mb s3://operator-testing'
++ mktemp
+ local LAST_OUT=/tmp/tmp.F4mJK9Z2SY
++ mktemp
+ local LAST_ERR=/tmp/tmp.Rc5SJeXh9g
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl run -i --rm aws-cli --image=docker.io/perconalab/awscli --restart=Never -- bash -c $'AWS_ACCESS_KEY_ID=some-access-key \t\tAWS_SECRET_ACCESS_KEY=some-secret-key \t\tAWS_DEFAULT_REGION=us-east-1         /usr/bin/aws --no-verify-ssl --endpoint-url https://minio-service:9000 s3 mb s3://operator-testing'
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.F4mJK9Z2SY
/usr/lib/python2.7/site-packages/botocore/vendored/requests/packages/urllib3/connectionpool.py:768: InsecureRequestWarning: Unverified HTTPS request is being made. Adding certificate verification is strongly advised. See: https://urllib3.readthedocs.org/en/latest/security.html
  InsecureRequestWarning)
make_bucket: operator-testing
pod "aws-cli" deleted from demand-backup-logical-minio-native-tls-23030 namespace
+ cat /tmp/tmp.Rc5SJeXh9g
+ rm /tmp/tmp.F4mJK9Z2SY /tmp/tmp.Rc5SJeXh9g
+ return 0
+ apply_s3_storage_secrets
+ desc 'create secrets for cloud storages'
+ set +o xtrace


-----------------------------------------------------------------------------------
create secrets for cloud storages
-----------------------------------------------------------------------------------

+ '[' -z '' ']'
+ kubectl_bin apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/conf/minio-secret.yml -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/conf/cloud-secret.yml
++ mktemp
+ local LAST_OUT=/tmp/tmp.zLsCx4sIQl
++ mktemp
+ local LAST_ERR=/tmp/tmp.tf0SsDOh8V
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/conf/minio-secret.yml -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/conf/cloud-secret.yml
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.zLsCx4sIQl
secret/minio-secret created
secret/aws-s3-secret created
secret/alibaba-cloud-secret created
secret/gcp-cs-secret created
secret/azure-secret created
secret/gcp-cs-sa-key-secret created
+ cat /tmp/tmp.tf0SsDOh8V
+ rm /tmp/tmp.zLsCx4sIQl /tmp/tmp.tf0SsDOh8V
+ return 0
+ cluster=some-name
+ kubectl_bin apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/demand-backup-logical-minio-native-tls/conf/secrets.yml
++ mktemp
+ local LAST_OUT=/tmp/tmp.Fggkd2IbfC
++ mktemp
+ local LAST_ERR=/tmp/tmp.59IYOK2tMR
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/demand-backup-logical-minio-native-tls/conf/secrets.yml
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.Fggkd2IbfC
secret/some-users created
+ cat /tmp/tmp.59IYOK2tMR
+ rm /tmp/tmp.Fggkd2IbfC /tmp/tmp.59IYOK2tMR
+ return 0
+ kubectl_bin apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/conf/client_with_tls.yml
++ mktemp
+ local LAST_OUT=/tmp/tmp.FsLyhG6SO1
++ mktemp
+ local LAST_ERR=/tmp/tmp.JiuruYdN1t
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/conf/client_with_tls.yml
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.FsLyhG6SO1
deployment.apps/psmdb-client created
+ cat /tmp/tmp.JiuruYdN1t
+ rm /tmp/tmp.FsLyhG6SO1 /tmp/tmp.JiuruYdN1t
+ return 0
+ apply_cluster /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/demand-backup-logical-minio-native-tls/conf/some-name-single-ca.yml
+ '[' -z '' ']'
+ kubectl_bin apply -f -
+ cat_config /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/demand-backup-logical-minio-native-tls/conf/some-name-single-ca.yml
++ mktemp
+ cat /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/demand-backup-logical-minio-native-tls/conf/some-name-single-ca.yml
+ yq eval '(.spec | select(.image == null)).image = "docker.io/perconalab/percona-server-mongodb-operator:main-mongod8.0"'
+ yq eval '(.spec | select(has("pmm"))).pmm.image = "docker.io/percona/pmm-client:2.44.1-1"'
+ yq eval '(.spec | select(has("initImage"))).initImage = "docker.io/perconalab/percona-server-mongodb-operator:PR-2058-fb8cc7187"'
+ yq eval '(.spec | select(has("backup"))).backup.image = "docker.io/perconalab/percona-server-mongodb-operator:main-backup"'
+ /usr/sbin/sed -e s/NAME_SPACE/demand-backup-logical-minio-native-tls-23030/g
+ local LAST_OUT=/tmp/tmp.ulIkYCbcE8
++ mktemp
+ yq eval '.spec.upgradeOptions.apply="Never"'
+ local LAST_ERR=/tmp/tmp.ewxT0DSrmg
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f -
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.ulIkYCbcE8
perconaservermongodb.psmdb.percona.com/some-name created
+ cat /tmp/tmp.ewxT0DSrmg
+ rm /tmp/tmp.ulIkYCbcE8 /tmp/tmp.ewxT0DSrmg
+ return 0
+ wait_for_running some-name-rs0 3
+ local name=some-name-rs0
+ let last_pod=2
+ local check_cluster_readyness=true
+ set_debug
+ [[ 1 == 1 ]]
+ set -o xtrace
+ local rs_name=rs0
+ local cluster_name=some-name
++ seq 0 2
+ for i in $(seq 0 $last_pod)
+ [[ 0 -eq 2 ]]
+ wait_pod some-name-rs0-0
+ local pod=some-name-rs0-0
+ set +o xtrace
waiting for pod/some-name-rs0-0 to be ready.......OK
+ for i in $(seq 0 $last_pod)
+ [[ 1 -eq 2 ]]
+ wait_pod some-name-rs0-1
+ local pod=some-name-rs0-1
+ set +o xtrace
waiting for pod/some-name-rs0-1 to be ready......OK
+ for i in $(seq 0 $last_pod)
+ [[ 2 -eq 2 ]]
++ kubectl_bin get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="rs0")].arbiter.enabled}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.4PMSXt8F8g
+++ mktemp
++ local LAST_ERR=/tmp/tmp.FWF2wm599H
++ local exit_status=0
++ local timeout=4
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="rs0")].arbiter.enabled}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.4PMSXt8F8g
++ cat /tmp/tmp.FWF2wm599H
++ rm /tmp/tmp.4PMSXt8F8g /tmp/tmp.FWF2wm599H
++ return 0
+ [[ '' == true ]]
+ wait_pod some-name-rs0-2
+ local pod=some-name-rs0-2
+ set +o xtrace
waiting for pod/some-name-rs0-2 to be ready......OK
++ kubectl_bin get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="rs0")].nonvoting.enabled}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.dj6quMWiWU
+++ mktemp
++ local LAST_ERR=/tmp/tmp.gb1PEx6Cx7
++ local exit_status=0
++ local timeout=4
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="rs0")].nonvoting.enabled}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.dj6quMWiWU
++ cat /tmp/tmp.gb1PEx6Cx7
++ rm /tmp/tmp.dj6quMWiWU /tmp/tmp.gb1PEx6Cx7
++ return 0
+ [[ '' == true ]]
++ kubectl_bin get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="rs0")].hidden.enabled}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.geiOmTckoz
+++ mktemp
++ local LAST_ERR=/tmp/tmp.PbT619AutL
++ local exit_status=0
++ local timeout=4
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="rs0")].hidden.enabled}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.geiOmTckoz
++ cat /tmp/tmp.PbT619AutL
++ rm /tmp/tmp.geiOmTckoz /tmp/tmp.PbT619AutL
++ return 0
+ [[ '' == true ]]
+ sleep 10
+ [[ true == true ]]
+ set +x
Waiting for cluster readyness...............
+ wait_cluster_consistency some-name
+ local cluster_name=some-name
+ local wait_time=32
+ retry=0
+ sleep 7
+ echo -n 'waiting for cluster readyness'
waiting for cluster readyness++ kubectl_bin get psmdb some-name -o 'jsonpath={.status.state}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.9QmS3llbdg
+++ mktemp
++ local LAST_ERR=/tmp/tmp.FrT412yiUO
++ local exit_status=0
++ local timeout=4
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get psmdb some-name -o 'jsonpath={.status.state}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.9QmS3llbdg
++ cat /tmp/tmp.FrT412yiUO
++ rm /tmp/tmp.9QmS3llbdg /tmp/tmp.FrT412yiUO
++ return 0
+ [[ ready == ready ]]
+ echo .OK
.OK
+ desc 'Verify CA bundle infrastructure'
+ set +o xtrace


-----------------------------------------------------------------------------------
Verify CA bundle infrastructure
-----------------------------------------------------------------------------------

+ kubectl_bin exec some-name-rs0-0 -n demand-backup-logical-minio-native-tls-23030 -c backup-agent -- test -f /etc/s3/certs/ca-bundle.crt
++ mktemp
+ local LAST_OUT=/tmp/tmp.DCfo2c0MEM
++ mktemp
+ local LAST_ERR=/tmp/tmp.LkGdq8AJgC
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl exec some-name-rs0-0 -n demand-backup-logical-minio-native-tls-23030 -c backup-agent -- test -f /etc/s3/certs/ca-bundle.crt
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.DCfo2c0MEM
+ cat /tmp/tmp.LkGdq8AJgC
+ rm /tmp/tmp.DCfo2c0MEM /tmp/tmp.LkGdq8AJgC
+ return 0
+ grep SSL_CERT_FILE
+ kubectl_bin exec some-name-rs0-0 -n demand-backup-logical-minio-native-tls-23030 -c backup-agent -- env
++ mktemp
+ local LAST_OUT=/tmp/tmp.qOMUp969ql
++ mktemp
+ local LAST_ERR=/tmp/tmp.ZaE4vxJB1j
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl exec some-name-rs0-0 -n demand-backup-logical-minio-native-tls-23030 -c backup-agent -- env
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.qOMUp969ql
+ cat /tmp/tmp.ZaE4vxJB1j
+ rm /tmp/tmp.qOMUp969ql /tmp/tmp.ZaE4vxJB1j
+ return 0
SSL_CERT_FILE=/etc/s3/certs/ca-bundle.crt
++ kubectl_bin exec some-name-rs0-0 -n demand-backup-logical-minio-native-tls-23030 -c backup-agent -- grep -c 'BEGIN CERTIFICATE' /etc/s3/certs/ca-bundle.crt
+++ mktemp
++ local LAST_OUT=/tmp/tmp.bTarNV0vlk
+++ mktemp
++ local LAST_ERR=/tmp/tmp.nhgl3jBDaw
++ local exit_status=0
++ local timeout=4
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl exec some-name-rs0-0 -n demand-backup-logical-minio-native-tls-23030 -c backup-agent -- grep -c 'BEGIN CERTIFICATE' /etc/s3/certs/ca-bundle.crt
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.bTarNV0vlk
++ cat /tmp/tmp.nhgl3jBDaw
++ rm /tmp/tmp.bTarNV0vlk /tmp/tmp.nhgl3jBDaw
++ return 0
+ cert_count=1
+ '[' 1 = 1 ']'
+ desc 'Compare StatefulSet'
+ set +o xtrace


-----------------------------------------------------------------------------------
Compare StatefulSet
-----------------------------------------------------------------------------------

+ compare_kubectl statefulset/some-name-rs0
+ local resource=statefulset/some-name-rs0
+ local postfix=
+ local skip_generation_check=
+ local expected_result=/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/demand-backup-logical-minio-native-tls/compare/statefulset_some-name-rs0.yml
+ local new_result=/tmp/tmp.zLLTEeUa9z/statefulset_some-name-rs0.yml
+ '[' -n '' -a -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/demand-backup-logical-minio-native-tls/compare/statefulset_some-name-rs0-oc.yml ']'
+ kubectl_bin get -o yaml statefulset/some-name-rs0
+ yq eval $'\n\t\t\tdel(.metadata.ownerReferences[].apiVersion) |\n\t\t\tdel(.metadata.managedFields) |\n\t\t\tdel(.. | select(has("creationTimestamp")).creationTimestamp) |\n\t\t\tdel(.. | select(has("namespace")).namespace) |\n\t\t\tdel(.. | select(has("uid")).uid) |\n\t\t\tdel(.metadata.resourceVersion) |\n\t\t\tdel(.spec.template.spec.containers[].env[] | select(.name == "NAMESPACE")) |\n\t\t\tdel(.metadata.selfLink) |\n\t\t\tdel(.metadata.annotations."cloud.google.com/neg") |\n\t\t\tdel(.metadata.annotations."kubectl.kubernetes.io/last-applied-configuration") |\n\t\t\tdel(.. | select(has("image")).image) |\n\t\t\tdel(.. | select(has("clusterIP")).clusterIP) |\n\t\t\tdel(.. | select(has("clusterIPs")).clusterIPs) |\n\t\t\tdel(.. | select(has("dataSource")).dataSource) |\n\t\t\tdel(.. | select(has("procMount")).procMount) |\n\t\t\tdel(.. | select(has("storageClassName")).storageClassName) |\n\t\t\tdel(.. | select(has("finalizers")).finalizers) |\n\t\t\tdel(.. | select(has("kubernetes.io/pvc-protection"))."kubernetes.io/pvc-protection") |\n\t\t\tdel(.. | select(has("volumeName")).volumeName) |\n\t\t\tdel(.. | select(has("volume.beta.kubernetes.io/storage-provisioner"))."volume.beta.kubernetes.io/storage-provisioner") |\n\t\t\tdel(.. | select(has("volume.kubernetes.io/storage-provisioner"))."volume.kubernetes.io/storage-provisioner") |\n\t\t\tdel(.spec.volumeMode) |\n\t\t\tdel(.. | select(has("volume.kubernetes.io/selected-node"))."volume.kubernetes.io/selected-node") |\n\t\t\tdel(.. | select(has("percona.com/last-config-hash"))."percona.com/last-config-hash") |\n\t\t\tdel(.. | select(has("percona.com/configuration-hash"))."percona.com/configuration-hash") |\n\t\t\tdel(.. | select(has("percona.com/ssl-hash"))."percona.com/ssl-hash") |\n\t\t\tdel(.. | select(has("percona.com/ssl-internal-hash"))."percona.com/ssl-internal-hash") |\n\t\t\tdel(.spec.volumeClaimTemplates[].spec.volumeMode | select(. == "Filesystem")) |\n\t\t\tdel(.. | select(has("healthCheckNodePort")).healthCheckNodePort) |\n\t\t\tdel(.. | select(has("nodePort")).nodePort) |\n\t\t\tdel(.status) |\n\t\t\t(.. | select(tag == "!!str")) |= sub("demand-backup-logical-minio-native-tls-23030", "NAME_SPACE") |\n\t\t\tdel(.spec.volumeClaimTemplates[].apiVersion) |\n\t\t\tdel(.spec.volumeClaimTemplates[].kind) |\n\t\t\tdel(.spec.ipFamilies) |\n\t\t\tdel(.spec.ipFamilyPolicy) |\n\t\t\t(.. | select(. == "extensions/v1beta1")) = "apps/v1" |\n\t\t\t(.. | select(. == "batch/v1beta1")) = "batch/v1" ' -
++ mktemp
+ local LAST_OUT=/tmp/tmp.JryuOvkglj
++ mktemp
+ local LAST_ERR=/tmp/tmp.TGlwk8avN5
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl get -o yaml statefulset/some-name-rs0
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.JryuOvkglj
+ cat /tmp/tmp.TGlwk8avN5
+ rm /tmp/tmp.JryuOvkglj /tmp/tmp.TGlwk8avN5
+ return 0
+ yq -i eval 'del(.spec.persistentVolumeClaimRetentionPolicy)' /tmp/tmp.zLLTEeUa9z/statefulset_some-name-rs0.yml
+ version_gt 1.22
++ echo '1.33 >= 1.22'
++ bc -l
+ '[' 1 -eq 1 ']'
+ return 0
+ yq -i eval 'del(.spec.internalTrafficPolicy)' /tmp/tmp.zLLTEeUa9z/statefulset_some-name-rs0.yml
+ yq -i eval 'del(.spec.allocateLoadBalancerNodePorts)' /tmp/tmp.zLLTEeUa9z/statefulset_some-name-rs0.yml
+ [[ /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/demand-backup-logical-minio-native-tls/compare/statefulset_some-name-rs0.yml == */cronjob* ]]
+ '[' -n '' ']'
+ [[ 0 -eq 0 ]]
+ diff -u /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/demand-backup-logical-minio-native-tls/compare/statefulset_some-name-rs0.yml /tmp/tmp.zLLTEeUa9z/statefulset_some-name-rs0.yml
+ log 'compare_kubectl: statefulset/some-name-rs0 OK'
+ set +o xtrace
[2026-06-09T07:52:17+0000] compare_kubectl: statefulset/some-name-rs0 OK
+ wait_for_pbm_operations some-name
+ local cluster=some-name
+ set +o xtrace
waiting for PBM operation to finish.OK
+ run_mongo_tls 'db.createUser({user:"myApp",pwd:"myPass",roles:[{db:"myApp",role:"readWrite"}]})' userAdmin:userAdmin123456@some-name-rs0.demand-backup-logical-minio-native-tls-23030
+ local 'command=db.createUser({user:"myApp",pwd:"myPass",roles:[{db:"myApp",role:"readWrite"}]})'
+ local uri=userAdmin:userAdmin123456@some-name-rs0.demand-backup-logical-minio-native-tls-23030
+ local driver=mongodb+srv
+ local suffix=.svc.cluster.local
++ kubectl_bin get pods --selector=name=psmdb-client -o 'jsonpath={.items[].metadata.name}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.psp2q0zy4G
+++ mktemp
++ local LAST_ERR=/tmp/tmp.dGUh5jly8W
++ local exit_status=0
++ local timeout=4
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get pods --selector=name=psmdb-client -o 'jsonpath={.items[].metadata.name}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.psp2q0zy4G
++ cat /tmp/tmp.dGUh5jly8W
++ rm /tmp/tmp.psp2q0zy4G /tmp/tmp.dGUh5jly8W
++ return 0
+ local client_container=psmdb-client-5649fbb65f-rgssj
+ local mongo_flag=
+ local port=27017
++ echo .svc.cluster.local
++ awk -F: '{print $2}'
+ suffix_port=
+ [[ -z '' ]]
+ suffix=.svc.cluster.local:27017
+ [[ userAdmin:userAdmin123456@some-name-rs0.demand-backup-logical-minio-native-tls-23030 == *cfg* ]]
+ replica_set=rs0
+ kubectl_bin exec psmdb-client-5649fbb65f-rgssj -- bash -c 'printf '\''db.createUser({user:"myApp",pwd:"myPass",roles:[{db:"myApp",role:"readWrite"}]})\n'\'' | mongo mongodb+srv://userAdmin:userAdmin123456@some-name-rs0.demand-backup-logical-minio-native-tls-23030.svc.cluster.local:27017/admin?replicaSet=rs0 --tls --tlsCAFile /etc/mongodb-ssl/ca.crt  --tlsCertificateKeyFile /tmp/tls.pem --tlsAllowInvalidHostnames '
++ mktemp
+ local LAST_OUT=/tmp/tmp.HSZm6UJXNt
++ mktemp
+ local LAST_ERR=/tmp/tmp.UiBhLzN7Mj
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl exec psmdb-client-5649fbb65f-rgssj -- bash -c 'printf '\''db.createUser({user:"myApp",pwd:"myPass",roles:[{db:"myApp",role:"readWrite"}]})\n'\'' | mongo mongodb+srv://userAdmin:userAdmin123456@some-name-rs0.demand-backup-logical-minio-native-tls-23030.svc.cluster.local:27017/admin?replicaSet=rs0 --tls --tlsCAFile /etc/mongodb-ssl/ca.crt  --tlsCertificateKeyFile /tmp/tls.pem --tlsAllowInvalidHostnames '
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.HSZm6UJXNt
Percona Server for MongoDB shell version v4.4.29-28
connecting to: mongodb://some-name-rs0-1.some-name-rs0.demand-backup-logical-minio-native-tls-23030.svc.cluster.local:27017,some-name-rs0-2.some-name-rs0.demand-backup-logical-minio-native-tls-23030.svc.cluster.local:27017,some-name-rs0-0.some-name-rs0.demand-backup-logical-minio-native-tls-23030.svc.cluster.local:27017/admin?compressors=disabled&gssapiServiceName=mongodb&replicaSet=rs0&ssl=true
{"t":{"$date":"2026-06-09T07:52:21.395Z"},"s":"I",  "c":"NETWORK",  "id":5490002, "ctx":"thread1","msg":"Started a new thread for the timer service"}
Implicit session: session { "id" : UUID("8c4a5da1-71d3-4edc-85cb-ce85714e1263") }
Percona Server for MongoDB server version: v8.0.23-10
WARNING: shell and server versions do not match
Successfully added user: {
	"user" : "myApp",
	"roles" : [
		{
			"db" : "myApp",
			"role" : "readWrite"
		}
	]
}
bye
+ cat /tmp/tmp.UiBhLzN7Mj
+ rm /tmp/tmp.HSZm6UJXNt /tmp/tmp.UiBhLzN7Mj
+ return 0
+ run_mongo_tls 'db.getSiblingDB("myApp").test.insert({ x: 100500 })' myApp:myPass@some-name-rs0.demand-backup-logical-minio-native-tls-23030
+ local 'command=db.getSiblingDB("myApp").test.insert({ x: 100500 })'
+ local uri=myApp:myPass@some-name-rs0.demand-backup-logical-minio-native-tls-23030
+ local driver=mongodb+srv
+ local suffix=.svc.cluster.local
++ kubectl_bin get pods --selector=name=psmdb-client -o 'jsonpath={.items[].metadata.name}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.Hiy6Zt7s39
+++ mktemp
++ local LAST_ERR=/tmp/tmp.qBKkyQUWVH
++ local exit_status=0
++ local timeout=4
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get pods --selector=name=psmdb-client -o 'jsonpath={.items[].metadata.name}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.Hiy6Zt7s39
++ cat /tmp/tmp.qBKkyQUWVH
++ rm /tmp/tmp.Hiy6Zt7s39 /tmp/tmp.qBKkyQUWVH
++ return 0
+ local client_container=psmdb-client-5649fbb65f-rgssj
+ local mongo_flag=
+ local port=27017
++ echo .svc.cluster.local
++ awk -F: '{print $2}'
+ suffix_port=
+ [[ -z '' ]]
+ suffix=.svc.cluster.local:27017
+ [[ myApp:myPass@some-name-rs0.demand-backup-logical-minio-native-tls-23030 == *cfg* ]]
+ replica_set=rs0
+ kubectl_bin exec psmdb-client-5649fbb65f-rgssj -- bash -c 'printf '\''db.getSiblingDB("myApp").test.insert({ x: 100500 })\n'\'' | mongo mongodb+srv://myApp:myPass@some-name-rs0.demand-backup-logical-minio-native-tls-23030.svc.cluster.local:27017/admin?replicaSet=rs0 --tls --tlsCAFile /etc/mongodb-ssl/ca.crt  --tlsCertificateKeyFile /tmp/tls.pem --tlsAllowInvalidHostnames '
++ mktemp
+ local LAST_OUT=/tmp/tmp.WCsNFVeLSj
++ mktemp
+ local LAST_ERR=/tmp/tmp.dzLEixCP01
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl exec psmdb-client-5649fbb65f-rgssj -- bash -c 'printf '\''db.getSiblingDB("myApp").test.insert({ x: 100500 })\n'\'' | mongo mongodb+srv://myApp:myPass@some-name-rs0.demand-backup-logical-minio-native-tls-23030.svc.cluster.local:27017/admin?replicaSet=rs0 --tls --tlsCAFile /etc/mongodb-ssl/ca.crt  --tlsCertificateKeyFile /tmp/tls.pem --tlsAllowInvalidHostnames '
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.WCsNFVeLSj
Percona Server for MongoDB shell version v4.4.29-28
connecting to: mongodb://some-name-rs0-0.some-name-rs0.demand-backup-logical-minio-native-tls-23030.svc.cluster.local:27017,some-name-rs0-1.some-name-rs0.demand-backup-logical-minio-native-tls-23030.svc.cluster.local:27017,some-name-rs0-2.some-name-rs0.demand-backup-logical-minio-native-tls-23030.svc.cluster.local:27017/admin?compressors=disabled&gssapiServiceName=mongodb&replicaSet=rs0&ssl=true
{"t":{"$date":"2026-06-09T07:52:24.213Z"},"s":"I",  "c":"NETWORK",  "id":5490002, "ctx":"thread1","msg":"Started a new thread for the timer service"}
Implicit session: session { "id" : UUID("1cc5b697-6b05-4813-9aa1-8e3f3c297b7e") }
Percona Server for MongoDB server version: v8.0.23-10
WARNING: shell and server versions do not match
WriteResult({ "nInserted" : 1 })
bye
+ cat /tmp/tmp.dzLEixCP01
+ rm /tmp/tmp.WCsNFVeLSj /tmp/tmp.dzLEixCP01
+ return 0
+ backup_name_single=backup-minio
+ run_backup minio backup-minio logical
+ local storage=minio
+ local backup_name=backup-minio
+ local type=logical
+ log 'running backup backup-minio'
+ set +o xtrace
[2026-06-09T07:52:24+0000] running backup backup-minio
+ yq eval $'.metadata.name = "backup-minio"\n\t\t\t| .spec.storageName = "minio"\n\t\t\t| .spec.type = "logical"' /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/demand-backup-logical-minio-native-tls/conf/backup-minio.yml
+ kubectl_bin apply -f -
++ mktemp
+ local LAST_OUT=/tmp/tmp.PFA2M9lYpG
++ mktemp
+ local LAST_ERR=/tmp/tmp.bdCqorTdH4
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f -
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.PFA2M9lYpG
perconaservermongodbbackup.psmdb.percona.com/backup-minio created
+ cat /tmp/tmp.bdCqorTdH4
+ rm /tmp/tmp.PFA2M9lYpG /tmp/tmp.bdCqorTdH4
+ return 0
+ wait_backup backup-minio
+ local backup_name=backup-minio
+ local target_state=ready
+ set +o xtrace
waiting for backup-minio to reach ready state.......OK
+ check_backup_in_storage backup-minio minio rs0 myApp.test.gz https
+ local backup=backup-minio
+ local storage_type=minio
+ local replset=rs0
+ local file=myApp.test.gz
+ local protocol=https
+ local endpoint
++ get_backup_dest backup-minio
++ /usr/sbin/sed 's|https://engk8soperators.blob.core.windows.net/||'
++ local backup_name=backup-minio
++ kubectl_bin get psmdb-backup backup-minio -o 'jsonpath={.status.destination}'
++ sed -e 's/.json$//'
+++ mktemp
++ sed 's|s3://||'
++ sed 's|azure://||'
++ sed 's|gs://||'
++ local LAST_OUT=/tmp/tmp.qO1fuHj2l0
+++ mktemp
++ local LAST_ERR=/tmp/tmp.h8acrINbpW
++ local exit_status=0
++ local timeout=4
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get psmdb-backup backup-minio -o 'jsonpath={.status.destination}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.qO1fuHj2l0
++ cat /tmp/tmp.h8acrINbpW
++ rm /tmp/tmp.qO1fuHj2l0 /tmp/tmp.h8acrINbpW
++ return 0
+ backup_dest=operator-testing/2026-06-09T07:52:26Z
+ case ${storage_type} in
+ endpoint=minio-service
+ kubectl_bin run -i --rm aws-cli --image=docker.io/perconalab/awscli --restart=Never -- /usr/bin/env AWS_ACCESS_KEY_ID=some-access-key AWS_SECRET_ACCESS_KEY=some-secret-key AWS_DEFAULT_REGION=us-east-1 /usr/bin/aws --no-verify-ssl --endpoint-url https://minio-service:9000 s3 ls s3://operator-testing/2026-06-09T07:52:26Z/rs0/myApp.test.gz
+ grep myApp.test.gz
++ mktemp
+ local LAST_OUT=/tmp/tmp.9iCDN16Bt3
++ mktemp
+ local LAST_ERR=/tmp/tmp.4aqSgDCav0
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl run -i --rm aws-cli --image=docker.io/perconalab/awscli --restart=Never -- /usr/bin/env AWS_ACCESS_KEY_ID=some-access-key AWS_SECRET_ACCESS_KEY=some-secret-key AWS_DEFAULT_REGION=us-east-1 /usr/bin/aws --no-verify-ssl --endpoint-url https://minio-service:9000 s3 ls s3://operator-testing/2026-06-09T07:52:26Z/rs0/myApp.test.gz
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.9iCDN16Bt3
+ cat /tmp/tmp.4aqSgDCav0
+ rm /tmp/tmp.9iCDN16Bt3 /tmp/tmp.4aqSgDCav0
+ return 0
2026-06-09 07:52:30         55 myApp.test.gz
+ run_mongo_tls 'db.getSiblingDB("myApp").test.drop()' myApp:myPass@some-name-rs0.demand-backup-logical-minio-native-tls-23030
+ local 'command=db.getSiblingDB("myApp").test.drop()'
+ local uri=myApp:myPass@some-name-rs0.demand-backup-logical-minio-native-tls-23030
+ local driver=mongodb+srv
+ local suffix=.svc.cluster.local
++ kubectl_bin get pods --selector=name=psmdb-client -o 'jsonpath={.items[].metadata.name}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.M9uYB6dux1
+++ mktemp
++ local LAST_ERR=/tmp/tmp.w1ixjAH4Xz
++ local exit_status=0
++ local timeout=4
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get pods --selector=name=psmdb-client -o 'jsonpath={.items[].metadata.name}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.M9uYB6dux1
++ cat /tmp/tmp.w1ixjAH4Xz
++ rm /tmp/tmp.M9uYB6dux1 /tmp/tmp.w1ixjAH4Xz
++ return 0
+ local client_container=psmdb-client-5649fbb65f-rgssj
+ local mongo_flag=
+ local port=27017
++ echo .svc.cluster.local
++ awk -F: '{print $2}'
+ suffix_port=
+ [[ -z '' ]]
+ suffix=.svc.cluster.local:27017
+ [[ myApp:myPass@some-name-rs0.demand-backup-logical-minio-native-tls-23030 == *cfg* ]]
+ replica_set=rs0
+ kubectl_bin exec psmdb-client-5649fbb65f-rgssj -- bash -c 'printf '\''db.getSiblingDB("myApp").test.drop()\n'\'' | mongo mongodb+srv://myApp:myPass@some-name-rs0.demand-backup-logical-minio-native-tls-23030.svc.cluster.local:27017/admin?replicaSet=rs0 --tls --tlsCAFile /etc/mongodb-ssl/ca.crt  --tlsCertificateKeyFile /tmp/tls.pem --tlsAllowInvalidHostnames '
++ mktemp
+ local LAST_OUT=/tmp/tmp.FKmVKF82Nx
++ mktemp
+ local LAST_ERR=/tmp/tmp.dcSk6jygq8
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl exec psmdb-client-5649fbb65f-rgssj -- bash -c 'printf '\''db.getSiblingDB("myApp").test.drop()\n'\'' | mongo mongodb+srv://myApp:myPass@some-name-rs0.demand-backup-logical-minio-native-tls-23030.svc.cluster.local:27017/admin?replicaSet=rs0 --tls --tlsCAFile /etc/mongodb-ssl/ca.crt  --tlsCertificateKeyFile /tmp/tls.pem --tlsAllowInvalidHostnames '
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.FKmVKF82Nx
Percona Server for MongoDB shell version v4.4.29-28
connecting to: mongodb://some-name-rs0-1.some-name-rs0.demand-backup-logical-minio-native-tls-23030.svc.cluster.local:27017,some-name-rs0-2.some-name-rs0.demand-backup-logical-minio-native-tls-23030.svc.cluster.local:27017,some-name-rs0-0.some-name-rs0.demand-backup-logical-minio-native-tls-23030.svc.cluster.local:27017/admin?compressors=disabled&gssapiServiceName=mongodb&replicaSet=rs0&ssl=true
{"t":{"$date":"2026-06-09T07:52:46.525Z"},"s":"I",  "c":"NETWORK",  "id":5490002, "ctx":"thread1","msg":"Started a new thread for the timer service"}
Implicit session: session { "id" : UUID("2dc7694f-9830-4f55-96aa-908160651fcc") }
Percona Server for MongoDB server version: v8.0.23-10
WARNING: shell and server versions do not match
true
bye
+ cat /tmp/tmp.dcSk6jygq8
+ rm /tmp/tmp.FKmVKF82Nx /tmp/tmp.dcSk6jygq8
+ return 0
+ run_restore backup-minio
+ local backup_name=backup-minio
+ local restore_file=/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/demand-backup-logical-minio-native-tls/conf/restore.yml
+ log 'running restore restore-backup-minio'
+ set +o xtrace
[2026-06-09T07:52:46+0000] running restore restore-backup-minio
+ cat /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/demand-backup-logical-minio-native-tls/conf/restore.yml
+ /usr/sbin/sed -e 's/name:/name: restore-backup-minio/'
+ /usr/sbin/sed -e 's/backupName:/backupName: backup-minio/'
+ kubectl_bin apply -f -
++ mktemp
+ local LAST_OUT=/tmp/tmp.gjV5epaRwG
++ mktemp
+ local LAST_ERR=/tmp/tmp.UNwBPJpOq4
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f -
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.gjV5epaRwG
perconaservermongodbrestore.psmdb.percona.com/restore-backup-minio created
+ cat /tmp/tmp.UNwBPJpOq4
+ rm /tmp/tmp.gjV5epaRwG /tmp/tmp.UNwBPJpOq4
+ return 0
+ wait_restore backup-minio some-name
+ local backup_name=backup-minio
+ local cluster_name=some-name
+ local target_state=ready
+ local wait_cluster_consistency=1
+ local wait_time=1780
+ local ok_if_ready=0
+ set +o xtrace
Waiting for the psmdb-restore/restore-backup-minio object to be created.OK
Waiting psmdb-restore/restore-backup-minio to reach state "ready" .OK after 0 minutes
+ [[ 1 -eq 1 ]]
+ wait_cluster_consistency some-name
+ local cluster_name=some-name
+ local wait_time=32
+ retry=0
+ sleep 7
+ echo -n 'waiting for cluster readyness'
waiting for cluster readyness++ kubectl_bin get psmdb some-name -o 'jsonpath={.status.state}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.rY4D1fucc8
+++ mktemp
++ local LAST_ERR=/tmp/tmp.UEQDTMfBml
++ local exit_status=0
++ local timeout=4
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get psmdb some-name -o 'jsonpath={.status.state}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.rY4D1fucc8
++ cat /tmp/tmp.UEQDTMfBml
++ rm /tmp/tmp.rY4D1fucc8 /tmp/tmp.UEQDTMfBml
++ return 0
+ [[ ready == ready ]]
+ echo .OK
.OK
+ compare_mongo_cmd find myApp:myPass@some-name-rs0.demand-backup-logical-minio-native-tls-23030 '' '' myApp test '' true
+ local command=find
+ local uri=myApp:myPass@some-name-rs0.demand-backup-logical-minio-native-tls-23030
+ local postfix=
+ local suffix=
+ local database=myApp
+ local collection=test
+ local sort=
+ local tls=true
+ local replicaset=
+ local 'full_command=db.test.find()'
+ [[ -n '' ]]
+ log 'running db.test.find() in myApp'
+ set +o xtrace
[2026-06-09T07:53:13+0000] running db.test.find() in myApp
+ [[ true == true ]]
+ mongo_command=run_mongo_tls
+ run_mongo_tls 'use myApp\n db.test.find()' myApp:myPass@some-name-rs0.demand-backup-logical-minio-native-tls-23030 mongodb '' ''
+ local 'command=use myApp\n db.test.find()'
+ local uri=myApp:myPass@some-name-rs0.demand-backup-logical-minio-native-tls-23030
+ local driver=mongodb
+ local suffix=.svc.cluster.local
+ grep -E -v 'I NETWORK|W NETWORK|F NETWORK|"c":"NETWORK"|Error saving history file|Percona Server for MongoDB|connecting to:|Unable to reach primary for set|Implicit session:|versions do not match|Error saving history file:|Started a new thread for the timer service'
+ /usr/sbin/sed -re 's/ObjectId\("[0-9a-f]+"\)//; s/-[0-9]+.svc/-xxx.svc/'
++ kubectl_bin get pods --selector=name=psmdb-client -o 'jsonpath={.items[].metadata.name}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.EPQ3BZfNlm
+++ mktemp
++ local LAST_ERR=/tmp/tmp.fcsPc2Dx7E
++ local exit_status=0
++ local timeout=4
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get pods --selector=name=psmdb-client -o 'jsonpath={.items[].metadata.name}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.EPQ3BZfNlm
++ cat /tmp/tmp.fcsPc2Dx7E
++ rm /tmp/tmp.EPQ3BZfNlm /tmp/tmp.fcsPc2Dx7E
++ return 0
+ local client_container=psmdb-client-5649fbb65f-rgssj
+ local mongo_flag=
+ local port=27017
++ echo .svc.cluster.local
++ awk -F: '{print $2}'
+ suffix_port=
+ [[ -z '' ]]
+ suffix=.svc.cluster.local:27017
+ [[ myApp:myPass@some-name-rs0.demand-backup-logical-minio-native-tls-23030 == *cfg* ]]
+ replica_set=rs0
+ kubectl_bin exec psmdb-client-5649fbb65f-rgssj -- bash -c 'printf '\''use myApp\n db.test.find()\n'\'' | mongo mongodb://myApp:myPass@some-name-rs0.demand-backup-logical-minio-native-tls-23030.svc.cluster.local:27017/admin?replicaSet=rs0 --tls --tlsCAFile /etc/mongodb-ssl/ca.crt  --tlsCertificateKeyFile /tmp/tls.pem --tlsAllowInvalidHostnames '
++ mktemp
+ local LAST_OUT=/tmp/tmp.vU969T2C1P
++ mktemp
+ local LAST_ERR=/tmp/tmp.6eBhSgQlph
+ local exit_status=0
+ local timeout=4
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl exec psmdb-client-5649fbb65f-rgssj -- bash -c 'printf '\''use myApp\n db.test.find()\n'\'' | mongo mongodb://myApp:myPass@some-name-rs0.demand-backup-logical-minio-native-tls-23030.svc.cluster.local:27017/admin?replicaSet=rs0 --tls --tlsCAFile /etc/mongodb-ssl/ca.crt  --tlsCertificateKeyFile /tmp/tls.pem --tlsAllowInvalidHostnames '
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.vU969T2C1P
+ cat /tmp/tmp.6eBhSgQlph
+ rm /tmp/tmp.vU969T2C1P /tmp/tmp.6eBhSgQlph
+ return 0
+ [[ 0 -eq 0 ]]
+ diff -u /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2058/e2e-tests/demand-backup-logical-minio-native-tls/compare/find.json /tmp/tmp.zLLTEeUa9z/find
+ rm -f /tmp/minio-cert.pem /tmp/minio-key.pem
+ destroy demand-backup-logical-minio-native-tls-23030
+ local namespace=demand-backup-logical-minio-native-tls-23030
+ local ignore_logs=true
+ [[ 1 == 1 ]]
+ echo 'SKIP_DELETE=1, not destroying demand-backup-logical-minio-native-tls-23030'
SKIP_DELETE=1, not destroying demand-backup-logical-minio-native-tls-23030
+ return
+ desc 'test passed'
+ set +o xtrace


-----------------------------------------------------------------------------------
test passed
-----------------------------------------------------------------------------------