Log: /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/../logs/tls-clusterissuer-cert-manager.log
+ main
+ '[' -z psmdb-operator ']'
+ create_infra tls-clusterissuer-cert-manager-21958
+ local ns=tls-clusterissuer-cert-manager-21958
+ [[ 1 == 1 ]]
+ delete_crd
+ desc 'get and delete old CRDs and RBAC'
+ set +o xtrace


-----------------------------------------------------------------------------------
get and delete old CRDs and RBAC
-----------------------------------------------------------------------------------

+ kubectl_bin delete -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/deploy/crd.yaml --ignore-not-found --wait=false
++ mktemp
+ local LAST_OUT=/tmp/tmp.mSHFXpdPAO
++ mktemp
+ local LAST_ERR=/tmp/tmp.bm1Lgff5Vp
+ local exit_status=0
+ local timeout=4
+ args=('delete' '-f' '/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/deploy/crd.yaml' '--ignore-not-found' '--wait=false')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl delete -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/deploy/crd.yaml --ignore-not-found --wait=false
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.mSHFXpdPAO
customresourcedefinition.apiextensions.k8s.io "perconaservermongodbbackups.psmdb.percona.com" deleted
customresourcedefinition.apiextensions.k8s.io "perconaservermongodbclustersyncs.psmdb.percona.com" deleted
customresourcedefinition.apiextensions.k8s.io "perconaservermongodbrestores.psmdb.percona.com" deleted
customresourcedefinition.apiextensions.k8s.io "perconaservermongodbs.psmdb.percona.com" deleted
+ cat /tmp/tmp.bm1Lgff5Vp
+ rm /tmp/tmp.mSHFXpdPAO /tmp/tmp.bm1Lgff5Vp
+ return 0
++ yq eval .metadata.name /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/deploy/crd.yaml
++ grep -v '\-\-\-'
grep: warning: stray \ before -
grep: warning: stray \ before -
+ for crd_name in $(yq eval '.metadata.name' "${src_dir}/deploy/crd.yaml" | grep -v '\-\-\-')
+ kubectl get perconaservermongodbbackups.psmdb.percona.com --all-namespaces -o wide
+ grep -v NAMESPACE
+ xargs -L 1 sh -xc 'kubectl patch perconaservermongodbbackups.psmdb.percona.com -n $0 $1 --type=merge -p "{\"metadata\":{\"finalizers\":[]}}"'
error: the server doesn't have a resource type "perconaservermongodbbackups"
+ kubectl patch perconaservermongodbbackups.psmdb.percona.com -n sh --type=merge -p '{"metadata":{"finalizers":[]}}'
error: the server doesn't have a resource type "perconaservermongodbbackups"
+ :
+ kubectl_bin wait --for=delete crd perconaservermongodbbackups.psmdb.percona.com
++ mktemp
+ local LAST_OUT=/tmp/tmp.lfgEz9RgsF
++ mktemp
+ local LAST_ERR=/tmp/tmp.E1dpdLS6lH
+ local exit_status=0
+ local timeout=4
+ args=('wait' '--for=delete' 'crd' 'perconaservermongodbbackups.psmdb.percona.com')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl wait --for=delete crd perconaservermongodbbackups.psmdb.percona.com
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.lfgEz9RgsF
+ cat /tmp/tmp.E1dpdLS6lH
+ rm /tmp/tmp.lfgEz9RgsF /tmp/tmp.E1dpdLS6lH
+ return 0
+ for crd_name in $(yq eval '.metadata.name' "${src_dir}/deploy/crd.yaml" | grep -v '\-\-\-')
+ kubectl get perconaservermongodbclustersyncs.psmdb.percona.com --all-namespaces -o wide
+ xargs -L 1 sh -xc 'kubectl patch perconaservermongodbclustersyncs.psmdb.percona.com -n $0 $1 --type=merge -p "{\"metadata\":{\"finalizers\":[]}}"'
+ grep -v NAMESPACE
error: the server doesn't have a resource type "perconaservermongodbclustersyncs"
+ kubectl patch perconaservermongodbclustersyncs.psmdb.percona.com -n sh --type=merge -p '{"metadata":{"finalizers":[]}}'
error: the server doesn't have a resource type "perconaservermongodbclustersyncs"
+ :
+ kubectl_bin wait --for=delete crd perconaservermongodbclustersyncs.psmdb.percona.com
++ mktemp
+ local LAST_OUT=/tmp/tmp.CXa1plPD13
++ mktemp
+ local LAST_ERR=/tmp/tmp.mX5STDMLpT
+ local exit_status=0
+ local timeout=4
+ args=('wait' '--for=delete' 'crd' 'perconaservermongodbclustersyncs.psmdb.percona.com')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl wait --for=delete crd perconaservermongodbclustersyncs.psmdb.percona.com
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.CXa1plPD13
+ cat /tmp/tmp.mX5STDMLpT
+ rm /tmp/tmp.CXa1plPD13 /tmp/tmp.mX5STDMLpT
+ return 0
+ for crd_name in $(yq eval '.metadata.name' "${src_dir}/deploy/crd.yaml" | grep -v '\-\-\-')
+ kubectl get perconaservermongodbrestores.psmdb.percona.com --all-namespaces -o wide
+ grep -v NAMESPACE
+ xargs -L 1 sh -xc 'kubectl patch perconaservermongodbrestores.psmdb.percona.com -n $0 $1 --type=merge -p "{\"metadata\":{\"finalizers\":[]}}"'
error: the server doesn't have a resource type "perconaservermongodbrestores"
+ kubectl patch perconaservermongodbrestores.psmdb.percona.com -n sh --type=merge -p '{"metadata":{"finalizers":[]}}'
error: the server doesn't have a resource type "perconaservermongodbrestores"
+ :
+ kubectl_bin wait --for=delete crd perconaservermongodbrestores.psmdb.percona.com
++ mktemp
+ local LAST_OUT=/tmp/tmp.fYiRfLImOU
++ mktemp
+ local LAST_ERR=/tmp/tmp.AKIzq2bsRv
+ local exit_status=0
+ local timeout=4
+ args=('wait' '--for=delete' 'crd' 'perconaservermongodbrestores.psmdb.percona.com')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl wait --for=delete crd perconaservermongodbrestores.psmdb.percona.com
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.fYiRfLImOU
+ cat /tmp/tmp.AKIzq2bsRv
+ rm /tmp/tmp.fYiRfLImOU /tmp/tmp.AKIzq2bsRv
+ return 0
+ for crd_name in $(yq eval '.metadata.name' "${src_dir}/deploy/crd.yaml" | grep -v '\-\-\-')
+ kubectl get perconaservermongodbs.psmdb.percona.com --all-namespaces -o wide
+ grep -v NAMESPACE
+ xargs -L 1 sh -xc 'kubectl patch perconaservermongodbs.psmdb.percona.com -n $0 $1 --type=merge -p "{\"metadata\":{\"finalizers\":[]}}"'
error: the server doesn't have a resource type "perconaservermongodbs"
+ kubectl patch perconaservermongodbs.psmdb.percona.com -n sh --type=merge -p '{"metadata":{"finalizers":[]}}'
error: the server doesn't have a resource type "perconaservermongodbs"
+ :
+ kubectl_bin wait --for=delete crd perconaservermongodbs.psmdb.percona.com
++ mktemp
+ local LAST_OUT=/tmp/tmp.eFLEKnE2Eg
++ mktemp
+ local LAST_ERR=/tmp/tmp.3uoHIg6M2a
+ local exit_status=0
+ local timeout=4
+ args=('wait' '--for=delete' 'crd' 'perconaservermongodbs.psmdb.percona.com')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl wait --for=delete crd perconaservermongodbs.psmdb.percona.com
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.eFLEKnE2Eg
+ cat /tmp/tmp.3uoHIg6M2a
+ rm /tmp/tmp.eFLEKnE2Eg /tmp/tmp.3uoHIg6M2a
+ return 0
+ local rbac_yaml=rbac.yaml
+ '[' -n psmdb-operator ']'
+ rbac_yaml=cw-rbac.yaml
+ kubectl_bin delete -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/deploy/cw-rbac.yaml --ignore-not-found
++ mktemp
+ local LAST_OUT=/tmp/tmp.lLyTeY8ZRK
++ mktemp
+ local LAST_ERR=/tmp/tmp.UXzcaOJEcL
+ local exit_status=0
+ local timeout=4
+ args=('delete' '-f' '/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/deploy/cw-rbac.yaml' '--ignore-not-found')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl delete -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/deploy/cw-rbac.yaml --ignore-not-found
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.lLyTeY8ZRK
clusterrole.rbac.authorization.k8s.io "percona-server-mongodb-operator" deleted
clusterrolebinding.rbac.authorization.k8s.io "service-account-percona-server-mongodb-operator" deleted
+ cat /tmp/tmp.UXzcaOJEcL
+ rm /tmp/tmp.lLyTeY8ZRK /tmp/tmp.UXzcaOJEcL
+ return 0
+ check_crd_for_deletion PR-2465-a177d53a8
+ local git_tag=PR-2465-a177d53a8
++ curl -s https://raw.githubusercontent.com/percona/percona-server-mongodb-operator/PR-2465-a177d53a8/deploy/crd.yaml
++ yq eval .metadata.name
++ /usr/sbin/sed s/---//g
++ /usr/sbin/sed ':a;N;$!ba;s/\n/ /g'
+ for crd_name in $(curl -s https://raw.githubusercontent.com/percona/percona-server-mongodb-operator/${git_tag}/deploy/crd.yaml | yq eval '.metadata.name' | $sed 's/---//g' | $sed ':a;N;$!ba;s/\n/ /g')
++ kubectl_bin get crd/null -o 'jsonpath={.status.conditions[-1].type}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.Qy89FaNjFQ
+++ mktemp
++ local LAST_ERR=/tmp/tmp.v5SvqSlqWU
++ local exit_status=0
++ local timeout=4
++ args=('get' 'crd/null' '-o' 'jsonpath={.status.conditions[-1].type}')
++ local args
++ transformed_files=()
++ local transformed_files
++ arch_scheduling_enabled
++ [[ -n '' ]]
++ arch_scheduling_enabled
++ [[ -n '' ]]
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get crd/null -o 'jsonpath={.status.conditions[-1].type}'
++ exit_status=1
++ set -e
++ '[' 1 '!=' 0 -a -n 1 ']'
++ cat /tmp/tmp.Qy89FaNjFQ
++ cat /tmp/tmp.v5SvqSlqWU
Error from server (NotFound): customresourcedefinitions.apiextensions.k8s.io "null" not found
++ sleep 0
++ for i in $(seq 0 2)
++ set +e
++ kubectl get crd/null -o 'jsonpath={.status.conditions[-1].type}'
++ exit_status=1
++ set -e
++ '[' 1 '!=' 0 -a -n 1 ']'
++ cat /tmp/tmp.Qy89FaNjFQ
++ cat /tmp/tmp.v5SvqSlqWU
Error from server (NotFound): customresourcedefinitions.apiextensions.k8s.io "null" not found
++ sleep 4
++ for i in $(seq 0 2)
++ set +e
++ kubectl get crd/null -o 'jsonpath={.status.conditions[-1].type}'
++ exit_status=1
++ set -e
++ '[' 1 '!=' 0 -a -n 1 ']'
++ cat /tmp/tmp.Qy89FaNjFQ
++ cat /tmp/tmp.v5SvqSlqWU
Error from server (NotFound): customresourcedefinitions.apiextensions.k8s.io "null" not found
++ sleep 8
++ cat /tmp/tmp.Qy89FaNjFQ
++ cat /tmp/tmp.v5SvqSlqWU
Error from server (NotFound): customresourcedefinitions.apiextensions.k8s.io "null" not found
++ rm /tmp/tmp.Qy89FaNjFQ /tmp/tmp.v5SvqSlqWU
++ return 1
+ [[ '' == Terminating ]]
+ '[' -n psmdb-operator ']'
+ create_namespace psmdb-operator
+ local namespace=psmdb-operator
+ local skip_clean_namespace=
+ [[ 1 == 1 ]]
+ [[ -z '' ]]
+ destroy_chaos_mesh
++ helm list --all-namespaces --filter chaos-mesh
++ tail -n1
++ awk '-F ' '{print $2}'
++ sed s/NAMESPACE//
+ local chaos_mesh_ns=
+ desc 'destroy chaos-mesh'
+ set +o xtrace


-----------------------------------------------------------------------------------
destroy chaos-mesh
-----------------------------------------------------------------------------------

+ '[' -n '' ']'
++ kubectl get MutatingWebhookConfiguration
++ grep chaos-mesh
++ awk '{print $1}'
+ timeout 30 kubectl delete MutatingWebhookConfiguration
error: resource(s) were provided, but no name was specified
+ :
++ kubectl get ValidatingWebhookConfiguration
++ grep chaos-mesh
++ awk '{print $1}'
+ timeout 30 kubectl delete ValidatingWebhookConfiguration
error: resource(s) were provided, but no name was specified
+ :
++ grep validate-auth
++ kubectl get ValidatingWebhookConfiguration
++ awk '{print $1}'
+ timeout 30 kubectl delete ValidatingWebhookConfiguration
error: resource(s) were provided, but no name was specified
+ :
++ kubectl api-resources
++ grep chaos-mesh
++ awk '{print $1}'
++ kubectl get crd
++ grep chaos-mesh.org
++ awk '{print $1}'
+ timeout 30 kubectl delete crd
error: resource(s) were provided, but no name was specified
+ :
++ kubectl get clusterrolebinding
++ grep chaos-mesh
++ awk '{print $1}'
+ timeout 30 kubectl delete clusterrolebinding
error: resource(s) were provided, but no name was specified
+ :
++ kubectl get clusterrole
++ grep chaos-mesh
++ awk '{print $1}'
+ timeout 30 kubectl delete clusterrole
error: resource(s) were provided, but no name was specified
+ :
+ desc 'cleaned up all old namespaces'
+ set +o xtrace


-----------------------------------------------------------------------------------
cleaned up all old namespaces
-----------------------------------------------------------------------------------

+ kubectl_bin get ns
+ grep -E -v '^kube-|^default|Terminating|psmdb-operator|openshift|^gke-|^gmp-|^NAME'
++ mktemp
+ awk '{print$1}'
+ [[ -n '' ]]
+ desc 'cleaned up old namespaces psmdb-operator'
+ xargs kubectl delete ns
+ set +o xtrace


-----------------------------------------------------------------------------------
cleaned up old namespaces psmdb-operator
-----------------------------------------------------------------------------------

+ kubectl_bin delete namespace psmdb-operator --ignore-not-found
++ mktemp
+ local LAST_OUT=/tmp/tmp.Xvvqq2IspD
+ local LAST_OUT=/tmp/tmp.7NwT5ZTXjJ
++ mktemp
++ mktemp
+ local LAST_ERR=/tmp/tmp.8BeqR50udd
+ local exit_status=0
+ local timeout=4
+ args=('get' 'ns')
+ local args
+ transformed_files=()
+ local transformed_files
+ local LAST_ERR=/tmp/tmp.tCmKwJ6dDG
+ arch_scheduling_enabled
+ local exit_status=0
+ local timeout=4
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ args=('delete' 'namespace' 'psmdb-operator' '--ignore-not-found')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl delete namespace psmdb-operator --ignore-not-found
+ for i in $(seq 0 2)
+ set +e
+ kubectl get ns
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.Xvvqq2IspD
+ cat /tmp/tmp.8BeqR50udd
+ rm /tmp/tmp.Xvvqq2IspD /tmp/tmp.8BeqR50udd
+ return 0
namespace "cert-manager" deleted
namespace "tls-clusterissuer-cert-manager-9878" deleted
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.7NwT5ZTXjJ
namespace "psmdb-operator" deleted
+ cat /tmp/tmp.tCmKwJ6dDG
+ rm /tmp/tmp.7NwT5ZTXjJ /tmp/tmp.tCmKwJ6dDG
+ return 0
+ kubectl_bin wait --for=delete namespace psmdb-operator
++ mktemp
+ local LAST_OUT=/tmp/tmp.U53kz20DBd
++ mktemp
+ local LAST_ERR=/tmp/tmp.QcNerA4TV4
+ local exit_status=0
+ local timeout=4
+ args=('wait' '--for=delete' 'namespace' 'psmdb-operator')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl wait --for=delete namespace psmdb-operator
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.U53kz20DBd
+ cat /tmp/tmp.QcNerA4TV4
+ rm /tmp/tmp.U53kz20DBd /tmp/tmp.QcNerA4TV4
+ return 0
+ desc 'create namespace psmdb-operator'
+ set +o xtrace


-----------------------------------------------------------------------------------
create namespace psmdb-operator
-----------------------------------------------------------------------------------

+ kubectl_bin create namespace psmdb-operator
++ mktemp
+ local LAST_OUT=/tmp/tmp.mhcaDWRePt
++ mktemp
+ local LAST_ERR=/tmp/tmp.Bjs1R2S8mW
+ local exit_status=0
+ local timeout=4
+ args=('create' 'namespace' 'psmdb-operator')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl create namespace psmdb-operator
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.mhcaDWRePt
namespace/psmdb-operator created
+ cat /tmp/tmp.Bjs1R2S8mW
+ rm /tmp/tmp.mhcaDWRePt /tmp/tmp.Bjs1R2S8mW
+ return 0
+ set_kube_ctx psmdb-operator
+ local namespace=psmdb-operator
++ kubectl_bin config current-context
+++ mktemp
++ local LAST_OUT=/tmp/tmp.qU9323AW6P
+++ mktemp
++ local LAST_ERR=/tmp/tmp.tC99iNaSTn
++ local exit_status=0
++ local timeout=4
++ args=('config' 'current-context')
++ local args
++ transformed_files=()
++ local transformed_files
++ arch_scheduling_enabled
++ [[ -n '' ]]
++ arch_scheduling_enabled
++ [[ -n '' ]]
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl config current-context
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.qU9323AW6P
++ cat /tmp/tmp.tC99iNaSTn
++ rm /tmp/tmp.qU9323AW6P /tmp/tmp.tC99iNaSTn
++ return 0
+ kubectl_bin config set-context gke_cloud-dev-112233_us-central1-a_jen-psmdb-2465-a177d53a8-9-cluster6 --namespace=psmdb-operator
++ mktemp
+ local LAST_OUT=/tmp/tmp.gowLX1X7aW
++ mktemp
+ local LAST_ERR=/tmp/tmp.DzRdTLW1s2
+ local exit_status=0
+ local timeout=4
+ args=('config' 'set-context' 'gke_cloud-dev-112233_us-central1-a_jen-psmdb-2465-a177d53a8-9-cluster6' '--namespace=psmdb-operator')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl config set-context gke_cloud-dev-112233_us-central1-a_jen-psmdb-2465-a177d53a8-9-cluster6 --namespace=psmdb-operator
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.gowLX1X7aW
Context "gke_cloud-dev-112233_us-central1-a_jen-psmdb-2465-a177d53a8-9-cluster6" modified.
+ cat /tmp/tmp.DzRdTLW1s2
+ rm /tmp/tmp.gowLX1X7aW /tmp/tmp.DzRdTLW1s2
+ return 0
+ deploy_operator
+ desc 'start PSMDB operator: docker.io/perconalab/percona-server-mongodb-operator:PR-2465-a177d53a8'
+ set +o xtrace


-----------------------------------------------------------------------------------
start PSMDB operator: docker.io/perconalab/percona-server-mongodb-operator:PR-2465-a177d53a8
-----------------------------------------------------------------------------------

+ local cr_file
+ '[' -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/crd.yaml ']'
+ cr_file=/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/deploy/crd.yaml
+ kubectl_bin apply --server-side --force-conflicts -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/deploy/crd.yaml
++ mktemp
+ local LAST_OUT=/tmp/tmp.klgyCB86Bv
++ mktemp
+ local LAST_ERR=/tmp/tmp.DsKzAyOZxb
+ local exit_status=0
+ local timeout=4
+ args=('apply' '--server-side' '--force-conflicts' '-f' '/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/deploy/crd.yaml')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply --server-side --force-conflicts -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/deploy/crd.yaml
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.klgyCB86Bv
customresourcedefinition.apiextensions.k8s.io/perconaservermongodbbackups.psmdb.percona.com serverside-applied
customresourcedefinition.apiextensions.k8s.io/perconaservermongodbclustersyncs.psmdb.percona.com serverside-applied
customresourcedefinition.apiextensions.k8s.io/perconaservermongodbrestores.psmdb.percona.com serverside-applied
customresourcedefinition.apiextensions.k8s.io/perconaservermongodbs.psmdb.percona.com serverside-applied
+ cat /tmp/tmp.DsKzAyOZxb
+ rm /tmp/tmp.klgyCB86Bv /tmp/tmp.DsKzAyOZxb
+ return 0
+ '[' -n psmdb-operator ']'
+ apply_rbac cw-rbac
+ local operator_namespace=psmdb-operator
+ local rbac=cw-rbac
+ cat /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/deploy/cw-rbac.yaml
+ sed -e 's^namespace: .*^namespace: psmdb-operator^'
+ kubectl_bin apply -n psmdb-operator -f -
++ mktemp
+ local LAST_OUT=/tmp/tmp.9CWgZSYQ0Q
++ mktemp
+ local LAST_ERR=/tmp/tmp.7TYEdCEcWg
+ local exit_status=0
+ local timeout=4
+ args=('apply' '-n' 'psmdb-operator' '-f' '-')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -n psmdb-operator -f -
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.9CWgZSYQ0Q
clusterrole.rbac.authorization.k8s.io/percona-server-mongodb-operator created
serviceaccount/percona-server-mongodb-operator created
clusterrolebinding.rbac.authorization.k8s.io/service-account-percona-server-mongodb-operator created
+ cat /tmp/tmp.7TYEdCEcWg
+ rm /tmp/tmp.9CWgZSYQ0Q /tmp/tmp.7TYEdCEcWg
+ return 0
+ yq eval $'\n\t\t\t(.spec.template.spec.containers[].image = "docker.io/perconalab/percona-server-mongodb-operator:PR-2465-a177d53a8") |\n\t\t\t((.. | select(.[] == "DISABLE_TELEMETRY")) |= .value="true") |\n\t\t\t((.. | select(.[] == "LOG_LEVEL")) |= .value="DEBUG")' /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/deploy/cw-operator.yaml
+ add_arch_to_podspecs -
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ cat -
+ kubectl_bin apply -n psmdb-operator -f -
++ mktemp
+ local LAST_OUT=/tmp/tmp.1utPgUwRAb
++ mktemp
+ local LAST_ERR=/tmp/tmp.iTqiVz2frY
+ local exit_status=0
+ local timeout=4
+ args=('apply' '-n' 'psmdb-operator' '-f' '-')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -n psmdb-operator -f -
+ return
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.1utPgUwRAb
deployment.apps/percona-server-mongodb-operator created
+ cat /tmp/tmp.iTqiVz2frY
+ rm /tmp/tmp.1utPgUwRAb /tmp/tmp.iTqiVz2frY
+ return 0
+ sleep 20
++ get_operator_pod
++ kubectl_bin get pods --selector=name=percona-server-mongodb-operator -o 'jsonpath={.items[].metadata.name}' -n psmdb-operator
+++ mktemp
++ local LAST_OUT=/tmp/tmp.CGz5gWmSEE
+++ mktemp
++ local LAST_ERR=/tmp/tmp.MxTIGI8ts5
++ local exit_status=0
++ local timeout=4
++ args=('get' 'pods' '--selector=name=percona-server-mongodb-operator' '-o' 'jsonpath={.items[].metadata.name}' '-n' 'psmdb-operator')
++ local args
++ transformed_files=()
++ local transformed_files
++ arch_scheduling_enabled
++ [[ -n '' ]]
++ arch_scheduling_enabled
++ [[ -n '' ]]
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get pods --selector=name=percona-server-mongodb-operator -o 'jsonpath={.items[].metadata.name}' -n psmdb-operator
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.CGz5gWmSEE
++ cat /tmp/tmp.MxTIGI8ts5
++ rm /tmp/tmp.CGz5gWmSEE /tmp/tmp.MxTIGI8ts5
++ return 0
+ wait_operator_pod percona-server-mongodb-operator-6cb789f874-lm47g
+ local pod=percona-server-mongodb-operator-6cb789f874-lm47g
+ set +o xtrace
waiting for pod/percona-server-mongodb-operator-6cb789f874-lm47g to be ready.OK
+ echo 'Print operator info from log'
Print operator info from log
+ grep 'Manager starting up'
++ get_operator_pod
++ kubectl_bin get pods --selector=name=percona-server-mongodb-operator -o 'jsonpath={.items[].metadata.name}' -n psmdb-operator
+++ mktemp
++ local LAST_OUT=/tmp/tmp.TyR6bL7hM4
+++ mktemp
++ local LAST_ERR=/tmp/tmp.U0SyWvj38d
++ local exit_status=0
++ local timeout=4
++ args=('get' 'pods' '--selector=name=percona-server-mongodb-operator' '-o' 'jsonpath={.items[].metadata.name}' '-n' 'psmdb-operator')
++ local args
++ transformed_files=()
++ local transformed_files
++ arch_scheduling_enabled
++ [[ -n '' ]]
++ arch_scheduling_enabled
++ [[ -n '' ]]
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get pods --selector=name=percona-server-mongodb-operator -o 'jsonpath={.items[].metadata.name}' -n psmdb-operator
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.TyR6bL7hM4
++ cat /tmp/tmp.U0SyWvj38d
++ rm /tmp/tmp.TyR6bL7hM4 /tmp/tmp.U0SyWvj38d
++ return 0
+ kubectl_bin logs -n psmdb-operator percona-server-mongodb-operator-6cb789f874-lm47g
++ mktemp
+ local LAST_OUT=/tmp/tmp.ISN15qB4lV
++ mktemp
+ local LAST_ERR=/tmp/tmp.8INjpXPUub
+ local exit_status=0
+ local timeout=4
+ args=('logs' '-n' 'psmdb-operator' 'percona-server-mongodb-operator-6cb789f874-lm47g')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl logs -n psmdb-operator percona-server-mongodb-operator-6cb789f874-lm47g
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.ISN15qB4lV
+ cat /tmp/tmp.8INjpXPUub
+ rm /tmp/tmp.ISN15qB4lV /tmp/tmp.8INjpXPUub
+ return 0
2026-07-22T20:10:44.465Z	INFO	setup	Manager starting up	{"gitCommit": "a177d53a8f1a53d235b5094c0cbe20626ddb0066", "gitBranch": "PR-2465-a177d53a8", "buildTime": "", "goVersion": "go1.26.5", "os": "linux", "arch": "amd64"}
+ create_namespace tls-clusterissuer-cert-manager-21958
+ local namespace=tls-clusterissuer-cert-manager-21958
+ local skip_clean_namespace=
+ [[ 1 == 1 ]]
+ [[ -z '' ]]
+ destroy_chaos_mesh
++ tail -n1
++ helm list --all-namespaces --filter chaos-mesh
++ awk '-F ' '{print $2}'
++ sed s/NAMESPACE//
+ local chaos_mesh_ns=
+ desc 'destroy chaos-mesh'
+ set +o xtrace


-----------------------------------------------------------------------------------
destroy chaos-mesh
-----------------------------------------------------------------------------------

+ '[' -n '' ']'
++ kubectl get MutatingWebhookConfiguration
++ grep chaos-mesh
++ awk '{print $1}'
+ timeout 30 kubectl delete MutatingWebhookConfiguration
error: resource(s) were provided, but no name was specified
+ :
++ kubectl get ValidatingWebhookConfiguration
++ awk '{print $1}'
++ grep chaos-mesh
+ timeout 30 kubectl delete ValidatingWebhookConfiguration
error: resource(s) were provided, but no name was specified
+ :
++ kubectl get ValidatingWebhookConfiguration
++ awk '{print $1}'
++ grep validate-auth
+ timeout 30 kubectl delete ValidatingWebhookConfiguration
error: resource(s) were provided, but no name was specified
+ :
++ kubectl api-resources
++ grep chaos-mesh
++ awk '{print $1}'
++ kubectl get crd
++ grep chaos-mesh.org
++ awk '{print $1}'
+ timeout 30 kubectl delete crd
error: resource(s) were provided, but no name was specified
+ :
++ kubectl get clusterrolebinding
++ awk '{print $1}'
++ grep chaos-mesh
+ timeout 30 kubectl delete clusterrolebinding
error: resource(s) were provided, but no name was specified
+ :
++ kubectl get clusterrole
++ grep chaos-mesh
++ awk '{print $1}'
+ timeout 30 kubectl delete clusterrole
error: resource(s) were provided, but no name was specified
+ :
+ desc 'cleaned up all old namespaces'
+ set +o xtrace


-----------------------------------------------------------------------------------
cleaned up all old namespaces
-----------------------------------------------------------------------------------

+ kubectl_bin get ns
+ grep -E -v '^kube-|^default|Terminating|psmdb-operator|openshift|^gke-|^gmp-|^NAME'
+ [[ -n '' ]]
+ desc 'cleaned up old namespaces tls-clusterissuer-cert-manager-21958'
+ set +o xtrace


-----------------------------------------------------------------------------------
cleaned up old namespaces tls-clusterissuer-cert-manager-21958
-----------------------------------------------------------------------------------

+ kubectl_bin delete namespace tls-clusterissuer-cert-manager-21958 --ignore-not-found
+ awk '{print$1}'
+ xargs kubectl delete ns
++ mktemp
++ mktemp
+ local LAST_OUT=/tmp/tmp.lyzioGBuRX
+ local LAST_OUT=/tmp/tmp.Npg9Y8C9g0
++ mktemp
++ mktemp
+ local LAST_ERR=/tmp/tmp.gABzau2bEq
+ local exit_status=0
+ local timeout=4
+ args=('get' 'ns')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ local LAST_ERR=/tmp/tmp.tvhWMiQ9o6
+ local exit_status=0
+ local timeout=4
+ args=('delete' 'namespace' 'tls-clusterissuer-cert-manager-21958' '--ignore-not-found')
+ local args
+ transformed_files=()
++ seq 0 2
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl get ns
+ for i in $(seq 0 2)
+ set +e
+ kubectl delete namespace tls-clusterissuer-cert-manager-21958 --ignore-not-found
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.lyzioGBuRX
+ cat /tmp/tmp.gABzau2bEq
+ rm /tmp/tmp.lyzioGBuRX /tmp/tmp.gABzau2bEq
+ return 0
error: resource(s) were provided, but no name was specified
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.Npg9Y8C9g0
+ cat /tmp/tmp.tvhWMiQ9o6
+ rm /tmp/tmp.Npg9Y8C9g0 /tmp/tmp.tvhWMiQ9o6
+ return 0
+ kubectl_bin wait --for=delete namespace tls-clusterissuer-cert-manager-21958
++ mktemp
+ local LAST_OUT=/tmp/tmp.bANM7SiQGI
++ mktemp
+ local LAST_ERR=/tmp/tmp.ecuxCCVFsy
+ local exit_status=0
+ local timeout=4
+ args=('wait' '--for=delete' 'namespace' 'tls-clusterissuer-cert-manager-21958')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl wait --for=delete namespace tls-clusterissuer-cert-manager-21958
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.bANM7SiQGI
+ cat /tmp/tmp.ecuxCCVFsy
+ rm /tmp/tmp.bANM7SiQGI /tmp/tmp.ecuxCCVFsy
+ return 0
+ desc 'create namespace tls-clusterissuer-cert-manager-21958'
+ set +o xtrace


-----------------------------------------------------------------------------------
create namespace tls-clusterissuer-cert-manager-21958
-----------------------------------------------------------------------------------

+ kubectl_bin create namespace tls-clusterissuer-cert-manager-21958
++ mktemp
+ local LAST_OUT=/tmp/tmp.uzEIS5fOqx
++ mktemp
+ local LAST_ERR=/tmp/tmp.ffpm8l7Mme
+ local exit_status=0
+ local timeout=4
+ args=('create' 'namespace' 'tls-clusterissuer-cert-manager-21958')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl create namespace tls-clusterissuer-cert-manager-21958
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.uzEIS5fOqx
namespace/tls-clusterissuer-cert-manager-21958 created
+ cat /tmp/tmp.ffpm8l7Mme
+ rm /tmp/tmp.uzEIS5fOqx /tmp/tmp.ffpm8l7Mme
+ return 0
+ set_kube_ctx tls-clusterissuer-cert-manager-21958
+ local namespace=tls-clusterissuer-cert-manager-21958
++ kubectl_bin config current-context
+++ mktemp
++ local LAST_OUT=/tmp/tmp.jIbtto0IYV
+++ mktemp
++ local LAST_ERR=/tmp/tmp.O7HMFmJKC1
++ local exit_status=0
++ local timeout=4
++ args=('config' 'current-context')
++ local args
++ transformed_files=()
++ local transformed_files
++ arch_scheduling_enabled
++ [[ -n '' ]]
++ arch_scheduling_enabled
++ [[ -n '' ]]
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl config current-context
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.jIbtto0IYV
++ cat /tmp/tmp.O7HMFmJKC1
++ rm /tmp/tmp.jIbtto0IYV /tmp/tmp.O7HMFmJKC1
++ return 0
+ kubectl_bin config set-context gke_cloud-dev-112233_us-central1-a_jen-psmdb-2465-a177d53a8-9-cluster6 --namespace=tls-clusterissuer-cert-manager-21958
++ mktemp
+ local LAST_OUT=/tmp/tmp.T3yVnx46S1
++ mktemp
+ local LAST_ERR=/tmp/tmp.eZibFyX3og
+ local exit_status=0
+ local timeout=4
+ args=('config' 'set-context' 'gke_cloud-dev-112233_us-central1-a_jen-psmdb-2465-a177d53a8-9-cluster6' '--namespace=tls-clusterissuer-cert-manager-21958')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl config set-context gke_cloud-dev-112233_us-central1-a_jen-psmdb-2465-a177d53a8-9-cluster6 --namespace=tls-clusterissuer-cert-manager-21958
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.T3yVnx46S1
Context "gke_cloud-dev-112233_us-central1-a_jen-psmdb-2465-a177d53a8-9-cluster6" modified.
+ cat /tmp/tmp.eZibFyX3og
+ rm /tmp/tmp.T3yVnx46S1 /tmp/tmp.eZibFyX3og
+ return 0
+ deploy_cert_manager
+ [[ gke == rancher ]]
+ desc 'deploy cert manager'
+ set +o xtrace


-----------------------------------------------------------------------------------
deploy cert manager
-----------------------------------------------------------------------------------

+ kubectl_bin -n cert-manager delete clusterissuer --all
++ mktemp
+ local LAST_OUT=/tmp/tmp.ums038gWhl
++ mktemp
+ local LAST_ERR=/tmp/tmp.WFDbxEBCwD
+ local exit_status=0
+ local timeout=4
+ args=('-n' 'cert-manager' 'delete' 'clusterissuer' '--all')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl -n cert-manager delete clusterissuer --all
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.ums038gWhl
clusterissuer.cert-manager.io "some-name-psmdb-ca-issuer" deleted
clusterissuer.cert-manager.io "some-name-psmdb-issuer" deleted
+ cat /tmp/tmp.WFDbxEBCwD
Warning: deleting cluster-scoped resources, not scoped to the provided namespace
+ rm /tmp/tmp.ums038gWhl /tmp/tmp.WFDbxEBCwD
+ return 0
+ kubectl_bin -n cert-manager delete certificate --all
++ mktemp
+ local LAST_OUT=/tmp/tmp.P0blP7Y9kL
++ mktemp
+ local LAST_ERR=/tmp/tmp.7lfM4C92v1
+ local exit_status=0
+ local timeout=4
+ args=('-n' 'cert-manager' 'delete' 'certificate' '--all')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl -n cert-manager delete certificate --all
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.P0blP7Y9kL
No resources found
+ cat /tmp/tmp.7lfM4C92v1
+ rm /tmp/tmp.P0blP7Y9kL /tmp/tmp.7lfM4C92v1
+ return 0
+ kubectl_bin create namespace cert-manager
++ mktemp
+ local LAST_OUT=/tmp/tmp.B5Mj232MLL
++ mktemp
+ local LAST_ERR=/tmp/tmp.6GUtpITH51
+ local exit_status=0
+ local timeout=4
+ args=('create' 'namespace' 'cert-manager')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl create namespace cert-manager
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.B5Mj232MLL
namespace/cert-manager created
+ cat /tmp/tmp.6GUtpITH51
+ rm /tmp/tmp.B5Mj232MLL /tmp/tmp.6GUtpITH51
+ return 0
+ kubectl_bin label namespace cert-manager certmanager.k8s.io/disable-validation=true
++ mktemp
+ local LAST_OUT=/tmp/tmp.yAtLWEWkW9
++ mktemp
+ local LAST_ERR=/tmp/tmp.z9FaWT6Qfu
+ local exit_status=0
+ local timeout=4
+ args=('label' 'namespace' 'cert-manager' 'certmanager.k8s.io/disable-validation=true')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl label namespace cert-manager certmanager.k8s.io/disable-validation=true
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.yAtLWEWkW9
namespace/cert-manager labeled
+ cat /tmp/tmp.z9FaWT6Qfu
+ rm /tmp/tmp.yAtLWEWkW9 /tmp/tmp.z9FaWT6Qfu
+ return 0
+ curl -sL https://github.com/cert-manager/cert-manager/releases/download/v1.19.3/cert-manager.yaml
+ add_arch_to_podspecs -
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ cat -
+ kubectl_bin apply -f - --validate=false
+ return
namespace/cert-manager configured
customresourcedefinition.apiextensions.k8s.io/challenges.acme.cert-manager.io unchanged
customresourcedefinition.apiextensions.k8s.io/orders.acme.cert-manager.io unchanged
customresourcedefinition.apiextensions.k8s.io/certificaterequests.cert-manager.io unchanged
customresourcedefinition.apiextensions.k8s.io/certificates.cert-manager.io unchanged
customresourcedefinition.apiextensions.k8s.io/clusterissuers.cert-manager.io unchanged
customresourcedefinition.apiextensions.k8s.io/issuers.cert-manager.io unchanged
serviceaccount/cert-manager-cainjector created
serviceaccount/cert-manager created
serviceaccount/cert-manager-webhook created
clusterrole.rbac.authorization.k8s.io/cert-manager-cainjector unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-issuers unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-certificates unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-orders unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-challenges unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-cluster-view unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-view unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-edit unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests unchanged
clusterrole.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-cainjector unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-issuers unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-clusterissuers unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-certificates unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-orders unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-challenges unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-ingress-shim unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-approve:cert-manager-io unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-controller-certificatesigningrequests unchanged
clusterrolebinding.rbac.authorization.k8s.io/cert-manager-webhook:subjectaccessreviews unchanged
role.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection unchanged
role.rbac.authorization.k8s.io/cert-manager:leaderelection unchanged
role.rbac.authorization.k8s.io/cert-manager-tokenrequest created
role.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving created
rolebinding.rbac.authorization.k8s.io/cert-manager-cainjector:leaderelection unchanged
rolebinding.rbac.authorization.k8s.io/cert-manager:leaderelection unchanged
rolebinding.rbac.authorization.k8s.io/cert-manager-tokenrequest created
rolebinding.rbac.authorization.k8s.io/cert-manager-webhook:dynamic-serving created
service/cert-manager-cainjector created
service/cert-manager created
service/cert-manager-webhook created
deployment.apps/cert-manager-cainjector created
deployment.apps/cert-manager created
deployment.apps/cert-manager-webhook created
mutatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured
validatingwebhookconfiguration.admissionregistration.k8s.io/cert-manager-webhook configured
+ kubectl_bin -n cert-manager wait pod -l app.kubernetes.io/instance=cert-manager --for=condition=ready
++ mktemp
+ local LAST_OUT=/tmp/tmp.v2bzGoZS5x
++ mktemp
+ local LAST_ERR=/tmp/tmp.dKZ623DImi
+ local exit_status=0
+ local timeout=4
+ args=('-n' 'cert-manager' 'wait' 'pod' '-l' 'app.kubernetes.io/instance=cert-manager' '--for=condition=ready')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl -n cert-manager wait pod -l app.kubernetes.io/instance=cert-manager --for=condition=ready
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.v2bzGoZS5x
pod/cert-manager-559d798845-w9lzx condition met
pod/cert-manager-cainjector-64958d9c7c-67xg6 condition met
pod/cert-manager-webhook-7fb6f99b56-22smx condition met
+ cat /tmp/tmp.dKZ623DImi
E0722 20:11:42.246884 1205633 reflector.go:227] "Failed to watch" err="Get \"https://104.198.36.129/api/v1/namespaces/cert-manager/pods?allowWatchBookmarks=true&fieldSelector=metadata.name%3Dcert-manager-cainjector-64958d9c7c-67xg6&resourceVersion=1784751101864063007&timeoutSeconds=549&watch=true\": context canceled" reflector="k8s.io/client-go/tools/watch/informerwatcher.go:162" type="*unstructured.Unstructured"
+ rm /tmp/tmp.v2bzGoZS5x /tmp/tmp.dKZ623DImi
+ return 0
+ sleep 120
+ cluster=some-name
+ desc 'step 1: operator preserves user-created certificates when it has RBAC to read ClusterIssuers'
+ set +o xtrace


-----------------------------------------------------------------------------------
step 1: operator preserves user-created certificates when it has RBAC to read ClusterIssuers
-----------------------------------------------------------------------------------

+ create_clusterissuer_rbac some-name-psmdb-ca-issuer
+ local cluster_issuer_name=some-name-psmdb-ca-issuer
+ local operator_sa=percona-server-mongodb-operator
+ kubectl_bin create clusterrole some-name-psmdb-ca-issuer-reader --verb=get,list,watch,create,update,patch --resource=clusterissuers.cert-manager.io --dry-run=client -o yaml
+ kubectl_bin apply -f -
++ mktemp
++ mktemp
+ local LAST_OUT=/tmp/tmp.DEGYkNPnmn
++ mktemp
+ local LAST_OUT=/tmp/tmp.DCoXiiTvTg
++ mktemp
+ local LAST_ERR=/tmp/tmp.3AHyyQG07A
+ local exit_status=0
+ local timeout=4
+ local LAST_ERR=/tmp/tmp.iQWMlpgG4t
+ local exit_status=0
+ args=('create' 'clusterrole' 'some-name-psmdb-ca-issuer-reader' '--verb=get,list,watch,create,update,patch' '--resource=clusterissuers.cert-manager.io' '--dry-run=client' '-o' 'yaml')
+ local timeout=4
+ args=('apply' '-f' '-')
+ local args
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ transformed_files=()
+ local transformed_files
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f -
+ for i in $(seq 0 2)
+ set +e
+ kubectl create clusterrole some-name-psmdb-ca-issuer-reader --verb=get,list,watch,create,update,patch --resource=clusterissuers.cert-manager.io --dry-run=client -o yaml
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.DCoXiiTvTg
+ cat /tmp/tmp.3AHyyQG07A
+ rm /tmp/tmp.DCoXiiTvTg /tmp/tmp.3AHyyQG07A
+ return 0
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.DEGYkNPnmn
clusterrole.rbac.authorization.k8s.io/some-name-psmdb-ca-issuer-reader created
+ cat /tmp/tmp.iQWMlpgG4t
+ rm /tmp/tmp.DEGYkNPnmn /tmp/tmp.iQWMlpgG4t
+ return 0
+ kubectl_bin apply -f -
+ kubectl_bin create clusterrolebinding some-name-psmdb-ca-issuer-reader-tls-clusterissuer-cert-manager-21958 --clusterrole=some-name-psmdb-ca-issuer-reader --serviceaccount=psmdb-operator:percona-server-mongodb-operator --dry-run=client -o yaml
++ mktemp
++ mktemp
+ local LAST_OUT=/tmp/tmp.XbprovKMch
++ mktemp
+ local LAST_OUT=/tmp/tmp.VXPFjBAHoN
++ mktemp
+ local LAST_ERR=/tmp/tmp.MHJMovUJiJ
+ local exit_status=0
+ local timeout=4
+ args=('create' 'clusterrolebinding' 'some-name-psmdb-ca-issuer-reader-tls-clusterissuer-cert-manager-21958' '--clusterrole=some-name-psmdb-ca-issuer-reader' '--serviceaccount=psmdb-operator:percona-server-mongodb-operator' '--dry-run=client' '-o' 'yaml')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ local LAST_ERR=/tmp/tmp.rv7HR4ctVN
+ local exit_status=0
+ local timeout=4
+ args=('apply' '-f' '-')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl create clusterrolebinding some-name-psmdb-ca-issuer-reader-tls-clusterissuer-cert-manager-21958 --clusterrole=some-name-psmdb-ca-issuer-reader --serviceaccount=psmdb-operator:percona-server-mongodb-operator --dry-run=client -o yaml
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f -
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.XbprovKMch
+ cat /tmp/tmp.MHJMovUJiJ
+ rm /tmp/tmp.XbprovKMch /tmp/tmp.MHJMovUJiJ
+ return 0
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.VXPFjBAHoN
clusterrolebinding.rbac.authorization.k8s.io/some-name-psmdb-ca-issuer-reader-tls-clusterissuer-cert-manager-21958 created
+ cat /tmp/tmp.rv7HR4ctVN
+ rm /tmp/tmp.VXPFjBAHoN /tmp/tmp.rv7HR4ctVN
+ return 0
+ create_clusterissuer_rbac some-name-psmdb-issuer
+ local cluster_issuer_name=some-name-psmdb-issuer
+ local operator_sa=percona-server-mongodb-operator
+ kubectl_bin create clusterrole some-name-psmdb-issuer-reader --verb=get,list,watch,create,update,patch --resource=clusterissuers.cert-manager.io --dry-run=client -o yaml
+ kubectl_bin apply -f -
++ mktemp
++ mktemp
+ local LAST_OUT=/tmp/tmp.j4nv176R6h
+ local LAST_OUT=/tmp/tmp.qWuGs0PkS0
++ mktemp
++ mktemp
+ local LAST_ERR=/tmp/tmp.OeYpEXYQ1O
+ local exit_status=0
+ local timeout=4
+ args=('apply' '-f' '-')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ local LAST_ERR=/tmp/tmp.fdfartQUl3
+ local exit_status=0
+ local timeout=4
+ args=('create' 'clusterrole' 'some-name-psmdb-issuer-reader' '--verb=get,list,watch,create,update,patch' '--resource=clusterissuers.cert-manager.io' '--dry-run=client' '-o' 'yaml')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f -
+ for i in $(seq 0 2)
+ set +e
+ kubectl create clusterrole some-name-psmdb-issuer-reader --verb=get,list,watch,create,update,patch --resource=clusterissuers.cert-manager.io --dry-run=client -o yaml
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.qWuGs0PkS0
+ cat /tmp/tmp.fdfartQUl3
+ rm /tmp/tmp.qWuGs0PkS0 /tmp/tmp.fdfartQUl3
+ return 0
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.j4nv176R6h
clusterrole.rbac.authorization.k8s.io/some-name-psmdb-issuer-reader created
+ cat /tmp/tmp.OeYpEXYQ1O
+ rm /tmp/tmp.j4nv176R6h /tmp/tmp.OeYpEXYQ1O
+ return 0
+ kubectl_bin create clusterrolebinding some-name-psmdb-issuer-reader-tls-clusterissuer-cert-manager-21958 --clusterrole=some-name-psmdb-issuer-reader --serviceaccount=psmdb-operator:percona-server-mongodb-operator --dry-run=client -o yaml
+ kubectl_bin apply -f -
++ mktemp
++ mktemp
+ local LAST_OUT=/tmp/tmp.dSZQr3dcBc
+ local LAST_OUT=/tmp/tmp.aDtCxLH6J9
++ mktemp
++ mktemp
+ local LAST_ERR=/tmp/tmp.MEYHzbg8ML
+ local exit_status=0
+ local timeout=4
+ args=('create' 'clusterrolebinding' 'some-name-psmdb-issuer-reader-tls-clusterissuer-cert-manager-21958' '--clusterrole=some-name-psmdb-issuer-reader' '--serviceaccount=psmdb-operator:percona-server-mongodb-operator' '--dry-run=client' '-o' 'yaml')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ local LAST_ERR=/tmp/tmp.GWnZUO3tmf
+ local exit_status=0
+ local timeout=4
+ args=('apply' '-f' '-')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl create clusterrolebinding some-name-psmdb-issuer-reader-tls-clusterissuer-cert-manager-21958 --clusterrole=some-name-psmdb-issuer-reader --serviceaccount=psmdb-operator:percona-server-mongodb-operator --dry-run=client -o yaml
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f -
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.aDtCxLH6J9
+ cat /tmp/tmp.MEYHzbg8ML
+ rm /tmp/tmp.aDtCxLH6J9 /tmp/tmp.MEYHzbg8ML
+ return 0
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.dSZQr3dcBc
clusterrolebinding.rbac.authorization.k8s.io/some-name-psmdb-issuer-reader-tls-clusterissuer-cert-manager-21958 created
+ cat /tmp/tmp.GWnZUO3tmf
+ rm /tmp/tmp.dSZQr3dcBc /tmp/tmp.GWnZUO3tmf
+ return 0
+ desc 'create secrets and start client'
+ set +o xtrace


-----------------------------------------------------------------------------------
create secrets and start client
-----------------------------------------------------------------------------------

+ kubectl_bin apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/conf/secrets.yml
++ mktemp
+ local LAST_OUT=/tmp/tmp.ZFGawtyr0b
++ mktemp
+ local LAST_ERR=/tmp/tmp.ZeewN9QU09
+ local exit_status=0
+ local timeout=4
+ args=('apply' '-f' '/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/conf/secrets.yml')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/conf/secrets.yml
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.ZFGawtyr0b
secret/some-users created
+ cat /tmp/tmp.ZeewN9QU09
+ rm /tmp/tmp.ZFGawtyr0b /tmp/tmp.ZeewN9QU09
+ return 0
+ kubectl_bin apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/conf/client_with_tls.yml
++ mktemp
+ local LAST_OUT=/tmp/tmp.9PoL5TGAGK
++ mktemp
+ local LAST_ERR=/tmp/tmp.moz08KTnrN
+ local exit_status=0
+ local timeout=4
+ args=('apply' '-f' '/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/conf/client_with_tls.yml')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/conf/client_with_tls.yml
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.9PoL5TGAGK
deployment.apps/psmdb-client created
+ cat /tmp/tmp.moz08KTnrN
+ rm /tmp/tmp.9PoL5TGAGK /tmp/tmp.moz08KTnrN
+ return 0
+ desc 'create custom cert-manager issuers and certificates'
+ set +o xtrace


-----------------------------------------------------------------------------------
create custom cert-manager issuers and certificates
-----------------------------------------------------------------------------------

+ kubectl_bin apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-ca-cert.yml
++ mktemp
+ local LAST_OUT=/tmp/tmp.CJQkdOjlUj
++ mktemp
+ local LAST_ERR=/tmp/tmp.G8ehzulS2f
+ local exit_status=0
+ local timeout=4
+ args=('apply' '-f' '/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-ca-cert.yml')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-ca-cert.yml
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.CJQkdOjlUj
certificate.cert-manager.io/some-name-ca-cert created
+ cat /tmp/tmp.G8ehzulS2f
Warning: spec.privateKey.rotationPolicy: In cert-manager >= v1.18.0, the default value changed from `Never` to `Always`.
+ rm /tmp/tmp.CJQkdOjlUj /tmp/tmp.G8ehzulS2f
+ return 0
+ kubectl_bin apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-ssl-internal.yml
++ mktemp
+ local LAST_OUT=/tmp/tmp.IuB9A6NGU6
++ mktemp
+ local LAST_ERR=/tmp/tmp.zPfMvk8rXm
+ local exit_status=0
+ local timeout=4
+ args=('apply' '-f' '/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-ssl-internal.yml')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-ssl-internal.yml
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.IuB9A6NGU6
certificate.cert-manager.io/some-name-ssl-internal created
+ cat /tmp/tmp.zPfMvk8rXm
Warning: spec.privateKey.rotationPolicy: In cert-manager >= v1.18.0, the default value changed from `Never` to `Always`.
+ rm /tmp/tmp.IuB9A6NGU6 /tmp/tmp.zPfMvk8rXm
+ return 0
+ kubectl_bin apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-ssl.yml
++ mktemp
+ local LAST_OUT=/tmp/tmp.tcyJnWoIn8
++ mktemp
+ local LAST_ERR=/tmp/tmp.aErTqNdbuS
+ local exit_status=0
+ local timeout=4
+ args=('apply' '-f' '/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-ssl.yml')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-ssl.yml
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.tcyJnWoIn8
certificate.cert-manager.io/some-name-ssl created
+ cat /tmp/tmp.aErTqNdbuS
Warning: spec.privateKey.rotationPolicy: In cert-manager >= v1.18.0, the default value changed from `Never` to `Always`.
+ rm /tmp/tmp.tcyJnWoIn8 /tmp/tmp.aErTqNdbuS
+ return 0
+ kubectl_bin apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-psmdb-ca-issuer.yml
++ mktemp
+ local LAST_OUT=/tmp/tmp.6eNZXT2843
++ mktemp
+ local LAST_ERR=/tmp/tmp.4Up7bGbjeI
+ local exit_status=0
+ local timeout=4
+ args=('apply' '-f' '/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-psmdb-ca-issuer.yml')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-psmdb-ca-issuer.yml
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.6eNZXT2843
clusterissuer.cert-manager.io/some-name-psmdb-ca-issuer created
+ cat /tmp/tmp.4Up7bGbjeI
+ rm /tmp/tmp.6eNZXT2843 /tmp/tmp.4Up7bGbjeI
+ return 0
+ kubectl_bin apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-psmdb-issuer.yml
++ mktemp
+ local LAST_OUT=/tmp/tmp.7so3YuAFiU
++ mktemp
+ local LAST_ERR=/tmp/tmp.yilikMrTHi
+ local exit_status=0
+ local timeout=4
+ args=('apply' '-f' '/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-psmdb-issuer.yml')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-psmdb-issuer.yml
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.7so3YuAFiU
clusterissuer.cert-manager.io/some-name-psmdb-issuer created
+ cat /tmp/tmp.yilikMrTHi
+ rm /tmp/tmp.7so3YuAFiU /tmp/tmp.yilikMrTHi
+ return 0
+ deploy_cmctl
+ local service_account=cmctl
+ /usr/sbin/sed -e s/percona-server-mongodb-operator/cmctl/g /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/deploy/rbac.yaml
+ yq '(select(.rules).rules[] | select(contains({"apiGroups": ["cert-manager.io"]}))).resources += "certificates/status"'
+ kubectl_bin apply -f -
++ mktemp
+ local LAST_OUT=/tmp/tmp.XBQowDt5wV
++ mktemp
+ local LAST_ERR=/tmp/tmp.mBYWAA8kEm
+ local exit_status=0
+ local timeout=4
+ args=('apply' '-f' '-')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f -
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.XBQowDt5wV
role.rbac.authorization.k8s.io/cmctl created
serviceaccount/cmctl created
rolebinding.rbac.authorization.k8s.io/service-account-cmctl created
+ cat /tmp/tmp.mBYWAA8kEm
+ rm /tmp/tmp.XBQowDt5wV /tmp/tmp.mBYWAA8kEm
+ return 0
+ kubectl_bin apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/conf/cmctl.yml
++ mktemp
+ local LAST_OUT=/tmp/tmp.GQJ6RsXbzj
++ mktemp
+ local LAST_ERR=/tmp/tmp.F7jMXIXcC8
+ local exit_status=0
+ local timeout=4
+ args=('apply' '-f' '/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/conf/cmctl.yml')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/conf/cmctl.yml
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.GQJ6RsXbzj
deployment.apps/cmctl created
+ cat /tmp/tmp.F7jMXIXcC8
+ rm /tmp/tmp.GQJ6RsXbzj /tmp/tmp.F7jMXIXcC8
+ return 0
+ sleep 60
+ desc 'create first PSMDB cluster some-name'
+ set +o xtrace


-----------------------------------------------------------------------------------
create first PSMDB cluster some-name
-----------------------------------------------------------------------------------

+ apply_cluster /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name.yml
+ '[' -z '' ']'
+ cat_config /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name.yml
+ kubectl_bin apply -f -
+ cat /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name.yml
+ yq eval '(.spec | select(.image == null)).image = "docker.io/perconalab/percona-server-mongodb-operator:main-mongod8.0"'
++ mktemp
+ yq eval '(.spec | select(has("pmm"))).pmm.image = "docker.io/percona/pmm-client:2.44.1-1"'
+ yq eval '(.spec | select(has("initImage"))).initImage = "docker.io/perconalab/percona-server-mongodb-operator:PR-2465-a177d53a8"'
+ yq eval '(.spec | select(has("backup"))).backup.image = "docker.io/perconalab/percona-server-mongodb-operator:main-backup"'
+ local LAST_OUT=/tmp/tmp.aMwjpUPulv
+ [[ -n docker.io/perconalab/fluentbit:main-logcollector ]]
+ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
+ yq eval '(.spec | select(has("logcollector"))).logcollector.image = strenv(IMAGE_LOGCOLLECTOR)'
+ yq eval '(.spec | select(has("search"))).search.image = "perconalab/percona-server-mongodb-operator:main-mongot"'
++ mktemp
+ /usr/sbin/sed -e s/NAME_SPACE/tls-clusterissuer-cert-manager-21958/g
+ add_arch_to_psmdb -
+ yq eval '.spec.upgradeOptions.apply="Never"'
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ cat -
+ local LAST_ERR=/tmp/tmp.OOdh0S83sM
+ local exit_status=0
+ local timeout=4
+ args=('apply' '-f' '-')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f -
+ return
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.aMwjpUPulv
perconaservermongodb.psmdb.percona.com/some-name created
+ cat /tmp/tmp.OOdh0S83sM
+ rm /tmp/tmp.aMwjpUPulv /tmp/tmp.OOdh0S83sM
+ return 0
+ desc 'check if all Pods started'
+ set +o xtrace


-----------------------------------------------------------------------------------
check if all Pods started
-----------------------------------------------------------------------------------

+ wait_for_running some-name-rs0 3
+ local name=some-name-rs0
+ let last_pod=2
+ local check_cluster_readiness=true
+ set_debug
+ [[ 1 == 1 ]]
+ set -o xtrace
+ local rs_name=rs0
+ local cluster_name=some-name
++ seq 0 2
+ for i in $(seq 0 $last_pod)
+ [[ 0 -eq 2 ]]
+ wait_pod some-name-rs0-0
+ local pod=some-name-rs0-0
+ set +o xtrace
waiting for pod/some-name-rs0-0 to be ready.................OK
+ for i in $(seq 0 $last_pod)
+ [[ 1 -eq 2 ]]
+ wait_pod some-name-rs0-1
+ local pod=some-name-rs0-1
+ set +o xtrace
waiting for pod/some-name-rs0-1 to be ready........................OK
+ for i in $(seq 0 $last_pod)
+ [[ 2 -eq 2 ]]
++ kubectl_bin get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="rs0")].arbiter.enabled}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.U1VB7prsEZ
+++ mktemp
++ local LAST_ERR=/tmp/tmp.LfKZxSI0HC
++ local exit_status=0
++ local timeout=4
++ args=('get' 'psmdb' 'some-name' '-o' 'jsonpath={.spec.replsets[?(@.name=="rs0")].arbiter.enabled}')
++ local args
++ transformed_files=()
++ local transformed_files
++ arch_scheduling_enabled
++ [[ -n '' ]]
++ arch_scheduling_enabled
++ [[ -n '' ]]
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="rs0")].arbiter.enabled}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.U1VB7prsEZ
++ cat /tmp/tmp.LfKZxSI0HC
++ rm /tmp/tmp.U1VB7prsEZ /tmp/tmp.LfKZxSI0HC
++ return 0
+ [[ '' == true ]]
+ wait_pod some-name-rs0-2
+ local pod=some-name-rs0-2
+ set +o xtrace
waiting for pod/some-name-rs0-2 to be ready................OK
++ kubectl_bin get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="rs0")].nonvoting.enabled}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.RjE5h0PNSk
+++ mktemp
++ local LAST_ERR=/tmp/tmp.X1Fufqs4oR
++ local exit_status=0
++ local timeout=4
++ args=('get' 'psmdb' 'some-name' '-o' 'jsonpath={.spec.replsets[?(@.name=="rs0")].nonvoting.enabled}')
++ local args
++ transformed_files=()
++ local transformed_files
++ arch_scheduling_enabled
++ [[ -n '' ]]
++ arch_scheduling_enabled
++ [[ -n '' ]]
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="rs0")].nonvoting.enabled}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.RjE5h0PNSk
++ cat /tmp/tmp.X1Fufqs4oR
++ rm /tmp/tmp.RjE5h0PNSk /tmp/tmp.X1Fufqs4oR
++ return 0
+ [[ '' == true ]]
++ kubectl_bin get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="rs0")].hidden.enabled}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.ThWNH6d39H
+++ mktemp
++ local LAST_ERR=/tmp/tmp.1TjlO2n4pv
++ local exit_status=0
++ local timeout=4
++ args=('get' 'psmdb' 'some-name' '-o' 'jsonpath={.spec.replsets[?(@.name=="rs0")].hidden.enabled}')
++ local args
++ transformed_files=()
++ local transformed_files
++ arch_scheduling_enabled
++ [[ -n '' ]]
++ arch_scheduling_enabled
++ [[ -n '' ]]
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="rs0")].hidden.enabled}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.ThWNH6d39H
++ cat /tmp/tmp.1TjlO2n4pv
++ rm /tmp/tmp.ThWNH6d39H /tmp/tmp.1TjlO2n4pv
++ return 0
+ [[ '' == true ]]
+ sleep 10
+ [[ true == true ]]
+ set +x
Waiting for cluster some-name to be ready...
+ wait_for_running some-name-cfg 3 false
+ local name=some-name-cfg
+ let last_pod=2
+ local check_cluster_readiness=false
+ set_debug
+ [[ 1 == 1 ]]
+ set -o xtrace
+ local rs_name=cfg
+ local cluster_name=some-name
++ seq 0 2
+ for i in $(seq 0 $last_pod)
+ [[ 0 -eq 2 ]]
+ wait_pod some-name-cfg-0
+ local pod=some-name-cfg-0
+ set +o xtrace
waiting for pod/some-name-cfg-0 to be ready.OK
+ for i in $(seq 0 $last_pod)
+ [[ 1 -eq 2 ]]
+ wait_pod some-name-cfg-1
+ local pod=some-name-cfg-1
+ set +o xtrace
waiting for pod/some-name-cfg-1 to be ready.OK
+ for i in $(seq 0 $last_pod)
+ [[ 2 -eq 2 ]]
++ kubectl_bin get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="cfg")].arbiter.enabled}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.LeZJLMxDiZ
+++ mktemp
++ local LAST_ERR=/tmp/tmp.Zv2QlhbRrN
++ local exit_status=0
++ local timeout=4
++ args=('get' 'psmdb' 'some-name' '-o' 'jsonpath={.spec.replsets[?(@.name=="cfg")].arbiter.enabled}')
++ local args
++ transformed_files=()
++ local transformed_files
++ arch_scheduling_enabled
++ [[ -n '' ]]
++ arch_scheduling_enabled
++ [[ -n '' ]]
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="cfg")].arbiter.enabled}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.LeZJLMxDiZ
++ cat /tmp/tmp.Zv2QlhbRrN
++ rm /tmp/tmp.LeZJLMxDiZ /tmp/tmp.Zv2QlhbRrN
++ return 0
+ [[ '' == true ]]
+ wait_pod some-name-cfg-2
+ local pod=some-name-cfg-2
+ set +o xtrace
waiting for pod/some-name-cfg-2 to be ready.OK
++ kubectl_bin get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="cfg")].nonvoting.enabled}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.m3tISU9q91
+++ mktemp
++ local LAST_ERR=/tmp/tmp.v6RBP5Fl6p
++ local exit_status=0
++ local timeout=4
++ args=('get' 'psmdb' 'some-name' '-o' 'jsonpath={.spec.replsets[?(@.name=="cfg")].nonvoting.enabled}')
++ local args
++ transformed_files=()
++ local transformed_files
++ arch_scheduling_enabled
++ [[ -n '' ]]
++ arch_scheduling_enabled
++ [[ -n '' ]]
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="cfg")].nonvoting.enabled}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.m3tISU9q91
++ cat /tmp/tmp.v6RBP5Fl6p
++ rm /tmp/tmp.m3tISU9q91 /tmp/tmp.v6RBP5Fl6p
++ return 0
+ [[ '' == true ]]
++ kubectl_bin get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="cfg")].hidden.enabled}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.RrJ43NfxBG
+++ mktemp
++ local LAST_ERR=/tmp/tmp.eAGUMGx7nN
++ local exit_status=0
++ local timeout=4
++ args=('get' 'psmdb' 'some-name' '-o' 'jsonpath={.spec.replsets[?(@.name=="cfg")].hidden.enabled}')
++ local args
++ transformed_files=()
++ local transformed_files
++ arch_scheduling_enabled
++ [[ -n '' ]]
++ arch_scheduling_enabled
++ [[ -n '' ]]
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="cfg")].hidden.enabled}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.RrJ43NfxBG
++ cat /tmp/tmp.eAGUMGx7nN
++ rm /tmp/tmp.RrJ43NfxBG /tmp/tmp.eAGUMGx7nN
++ return 0
+ [[ '' == true ]]
+ sleep 10
+ [[ false == true ]]
+ wait_for_running some-name-mongos 3
+ local name=some-name-mongos
+ let last_pod=2
+ local check_cluster_readiness=true
+ set_debug
+ [[ 1 == 1 ]]
+ set -o xtrace
+ local rs_name=mongos
+ local cluster_name=some-name
++ seq 0 2
+ for i in $(seq 0 $last_pod)
+ [[ 0 -eq 2 ]]
+ wait_pod some-name-mongos-0
+ local pod=some-name-mongos-0
+ set +o xtrace
waiting for pod/some-name-mongos-0 to be ready.OK
+ for i in $(seq 0 $last_pod)
+ [[ 1 -eq 2 ]]
+ wait_pod some-name-mongos-1
+ local pod=some-name-mongos-1
+ set +o xtrace
waiting for pod/some-name-mongos-1 to be ready.OK
+ for i in $(seq 0 $last_pod)
+ [[ 2 -eq 2 ]]
++ kubectl_bin get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="mongos")].arbiter.enabled}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.qO1PWJMoz1
+++ mktemp
++ local LAST_ERR=/tmp/tmp.ntd9SqprRy
++ local exit_status=0
++ local timeout=4
++ args=('get' 'psmdb' 'some-name' '-o' 'jsonpath={.spec.replsets[?(@.name=="mongos")].arbiter.enabled}')
++ local args
++ transformed_files=()
++ local transformed_files
++ arch_scheduling_enabled
++ [[ -n '' ]]
++ arch_scheduling_enabled
++ [[ -n '' ]]
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="mongos")].arbiter.enabled}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.qO1PWJMoz1
++ cat /tmp/tmp.ntd9SqprRy
++ rm /tmp/tmp.qO1PWJMoz1 /tmp/tmp.ntd9SqprRy
++ return 0
+ [[ '' == true ]]
+ wait_pod some-name-mongos-2
+ local pod=some-name-mongos-2
+ set +o xtrace
waiting for pod/some-name-mongos-2 to be ready.OK
++ kubectl_bin get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="mongos")].nonvoting.enabled}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.E7XJCk4m5I
+++ mktemp
++ local LAST_ERR=/tmp/tmp.Q99yV3lY0O
++ local exit_status=0
++ local timeout=4
++ args=('get' 'psmdb' 'some-name' '-o' 'jsonpath={.spec.replsets[?(@.name=="mongos")].nonvoting.enabled}')
++ local args
++ transformed_files=()
++ local transformed_files
++ arch_scheduling_enabled
++ [[ -n '' ]]
++ arch_scheduling_enabled
++ [[ -n '' ]]
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="mongos")].nonvoting.enabled}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.E7XJCk4m5I
++ cat /tmp/tmp.Q99yV3lY0O
++ rm /tmp/tmp.E7XJCk4m5I /tmp/tmp.Q99yV3lY0O
++ return 0
+ [[ '' == true ]]
++ kubectl_bin get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="mongos")].hidden.enabled}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.ui4caLFifl
+++ mktemp
++ local LAST_ERR=/tmp/tmp.xK29yGbq1j
++ local exit_status=0
++ local timeout=4
++ args=('get' 'psmdb' 'some-name' '-o' 'jsonpath={.spec.replsets[?(@.name=="mongos")].hidden.enabled}')
++ local args
++ transformed_files=()
++ local transformed_files
++ arch_scheduling_enabled
++ [[ -n '' ]]
++ arch_scheduling_enabled
++ [[ -n '' ]]
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="mongos")].hidden.enabled}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.ui4caLFifl
++ cat /tmp/tmp.xK29yGbq1j
++ rm /tmp/tmp.ui4caLFifl /tmp/tmp.xK29yGbq1j
++ return 0
+ [[ '' == true ]]
+ sleep 10
+ [[ true == true ]]
+ set +x
Waiting for cluster some-name to be ready
+ desc 'compare user certificates are preserved and clusterissuers are not overwritten'
+ set +o xtrace


-----------------------------------------------------------------------------------
compare user certificates are preserved and clusterissuers are not overwritten
-----------------------------------------------------------------------------------

+ compare_kubectl certificate/some-name-ssl -user
+ local resource=certificate/some-name-ssl
+ local postfix=-user
+ local skip_generation_check=
+ local expected_result=/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/compare/certificate_some-name-ssl-user.yml
+ local new_result=/tmp/tmp.CsJXQPmVbm/certificate_some-name-ssl.yml
+ [[ -n '' ]]
+ kubectl_bin get -o yaml certificate/some-name-ssl
+ yq eval $'\n\t\t\tdel(.metadata.ownerReferences[].apiVersion) |\n\t\t\tdel(.metadata.managedFields) |\n\t\t\tdel(.. | select(has("creationTimestamp")).creationTimestamp) |\n\t\t\tdel(.. | select(has("namespace")).namespace) |\n\t\t\tdel(.. | select(has("uid")).uid) |\n\t\t\tdel(.metadata.resourceVersion) |\n\t\t\tdel(.spec.template.spec.containers[].env[] | select(.name == "NAMESPACE")) |\n\t\t\tdel(.metadata.selfLink) |\n\t\t\tdel(.metadata.annotations."cloud.google.com/neg") |\n\t\t\tdel(.metadata.annotations."field.cattle.io/publicEndpoints") |\n\t\t\tdel(.metadata.annotations."metallb.io/ip-allocated-from-pool") |\n\t\t\tdel(.metadata.annotations."networking.gke.io/target-pool") |\n\t\t\tdel(.metadata.annotations."kubectl.kubernetes.io/last-applied-configuration") |\n\t\t\tdel(.. | select(has("image")).image) |\n\t\t\tdel(.. | select(has("clusterIP")).clusterIP) |\n\t\t\tdel(.. | select(has("clusterIPs")).clusterIPs) |\n\t\t\tdel(.. | select(has("dataSource")).dataSource) |\n\t\t\tdel(.. | select(has("procMount")).procMount) |\n\t\t\tdel(.. | select(has("storageClassName")).storageClassName) |\n\t\t\tdel(.. | select(has("finalizers")).finalizers) |\n\t\t\tdel(.. | select(has("kubernetes.io/pvc-protection"))."kubernetes.io/pvc-protection") |\n\t\t\tdel(.. | select(has("volumeName")).volumeName) |\n\t\t\tdel(.. | select(has("volume.beta.kubernetes.io/storage-provisioner"))."volume.beta.kubernetes.io/storage-provisioner") |\n\t\t\tdel(.. | select(has("volume.kubernetes.io/storage-provisioner"))."volume.kubernetes.io/storage-provisioner") |\n\t\t\tdel(.spec.volumeMode) |\n\t\t\tdel(.. | select(has("volume.kubernetes.io/selected-node"))."volume.kubernetes.io/selected-node") |\n\t\t\tdel(.. | select(has("percona.com/last-config-hash"))."percona.com/last-config-hash") |\n\t\t\tdel(.. | select(has("percona.com/configuration-hash"))."percona.com/configuration-hash") |\n\t\t\tdel(.. | select(has("percona.com/ssl-hash"))."percona.com/ssl-hash") |\n\t\t\tdel(.. | select(has("percona.com/ssl-internal-hash"))."percona.com/ssl-internal-hash") |\n\t\t\tdel(.spec.volumeClaimTemplates[].spec.volumeMode | select(. == "Filesystem")) |\n\t\t\tdel(.. | select(has("healthCheckNodePort")).healthCheckNodePort) |\n\t\t\tdel(.. | select(has("nodePort")).nodePort) |\n\t\t\tdel(.status) |\n\t\t\t(.. | select(tag == "!!str")) |= sub("tls-clusterissuer-cert-manager-21958", "NAME_SPACE") |\n\t\t\tdel(.spec.volumeClaimTemplates[].apiVersion) |\n\t\t\tdel(.spec.volumeClaimTemplates[].kind) |\n\t\t\tdel(.spec.ipFamilies) |\n\t\t\tdel(.spec.ipFamilyPolicy) |\n\t\t\t(.. | select(. == "extensions/v1beta1")) = "apps/v1" |\n\t\t\t(.. | select(. == "batch/v1beta1")) = "batch/v1" ' -
++ mktemp
+ local LAST_OUT=/tmp/tmp.RJ568vC7o7
++ mktemp
+ local LAST_ERR=/tmp/tmp.rVYXRELXro
+ local exit_status=0
+ local timeout=4
+ args=('get' '-o' 'yaml' 'certificate/some-name-ssl')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl get -o yaml certificate/some-name-ssl
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.RJ568vC7o7
+ cat /tmp/tmp.rVYXRELXro
+ rm /tmp/tmp.RJ568vC7o7 /tmp/tmp.rVYXRELXro
+ return 0
+ yq -i eval 'del(.spec.persistentVolumeClaimRetentionPolicy)' /tmp/tmp.CsJXQPmVbm/certificate_some-name-ssl.yml
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ version_gt 1.22
++ echo '1.33 >= 1.22'
++ bc -l
+ '[' 1 -eq 1 ']'
+ return 0
+ yq -i eval 'del(.spec.internalTrafficPolicy)' /tmp/tmp.CsJXQPmVbm/certificate_some-name-ssl.yml
+ yq -i eval 'del(.spec.allocateLoadBalancerNodePorts)' /tmp/tmp.CsJXQPmVbm/certificate_some-name-ssl.yml
+ [[ /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/compare/certificate_some-name-ssl-user.yml == */cronjob* ]]
+ '[' -n '' ']'
+ [[ 0 -eq 0 ]]
+ diff -u /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/compare/certificate_some-name-ssl-user.yml /tmp/tmp.CsJXQPmVbm/certificate_some-name-ssl.yml
+ log 'compare_kubectl: certificate/some-name-ssl OK'
+ set +o xtrace
[2026-07-22T20:17:39+0000] compare_kubectl: certificate/some-name-ssl OK
+ compare_kubectl certificate/some-name-ssl-internal -user
+ local resource=certificate/some-name-ssl-internal
+ local postfix=-user
+ local skip_generation_check=
+ local expected_result=/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/compare/certificate_some-name-ssl-internal-user.yml
+ local new_result=/tmp/tmp.CsJXQPmVbm/certificate_some-name-ssl-internal.yml
+ [[ -n '' ]]
+ kubectl_bin get -o yaml certificate/some-name-ssl-internal
+ yq eval $'\n\t\t\tdel(.metadata.ownerReferences[].apiVersion) |\n\t\t\tdel(.metadata.managedFields) |\n\t\t\tdel(.. | select(has("creationTimestamp")).creationTimestamp) |\n\t\t\tdel(.. | select(has("namespace")).namespace) |\n\t\t\tdel(.. | select(has("uid")).uid) |\n\t\t\tdel(.metadata.resourceVersion) |\n\t\t\tdel(.spec.template.spec.containers[].env[] | select(.name == "NAMESPACE")) |\n\t\t\tdel(.metadata.selfLink) |\n\t\t\tdel(.metadata.annotations."cloud.google.com/neg") |\n\t\t\tdel(.metadata.annotations."field.cattle.io/publicEndpoints") |\n\t\t\tdel(.metadata.annotations."metallb.io/ip-allocated-from-pool") |\n\t\t\tdel(.metadata.annotations."networking.gke.io/target-pool") |\n\t\t\tdel(.metadata.annotations."kubectl.kubernetes.io/last-applied-configuration") |\n\t\t\tdel(.. | select(has("image")).image) |\n\t\t\tdel(.. | select(has("clusterIP")).clusterIP) |\n\t\t\tdel(.. | select(has("clusterIPs")).clusterIPs) |\n\t\t\tdel(.. | select(has("dataSource")).dataSource) |\n\t\t\tdel(.. | select(has("procMount")).procMount) |\n\t\t\tdel(.. | select(has("storageClassName")).storageClassName) |\n\t\t\tdel(.. | select(has("finalizers")).finalizers) |\n\t\t\tdel(.. | select(has("kubernetes.io/pvc-protection"))."kubernetes.io/pvc-protection") |\n\t\t\tdel(.. | select(has("volumeName")).volumeName) |\n\t\t\tdel(.. | select(has("volume.beta.kubernetes.io/storage-provisioner"))."volume.beta.kubernetes.io/storage-provisioner") |\n\t\t\tdel(.. | select(has("volume.kubernetes.io/storage-provisioner"))."volume.kubernetes.io/storage-provisioner") |\n\t\t\tdel(.spec.volumeMode) |\n\t\t\tdel(.. | select(has("volume.kubernetes.io/selected-node"))."volume.kubernetes.io/selected-node") |\n\t\t\tdel(.. | select(has("percona.com/last-config-hash"))."percona.com/last-config-hash") |\n\t\t\tdel(.. | select(has("percona.com/configuration-hash"))."percona.com/configuration-hash") |\n\t\t\tdel(.. | select(has("percona.com/ssl-hash"))."percona.com/ssl-hash") |\n\t\t\tdel(.. | select(has("percona.com/ssl-internal-hash"))."percona.com/ssl-internal-hash") |\n\t\t\tdel(.spec.volumeClaimTemplates[].spec.volumeMode | select(. == "Filesystem")) |\n\t\t\tdel(.. | select(has("healthCheckNodePort")).healthCheckNodePort) |\n\t\t\tdel(.. | select(has("nodePort")).nodePort) |\n\t\t\tdel(.status) |\n\t\t\t(.. | select(tag == "!!str")) |= sub("tls-clusterissuer-cert-manager-21958", "NAME_SPACE") |\n\t\t\tdel(.spec.volumeClaimTemplates[].apiVersion) |\n\t\t\tdel(.spec.volumeClaimTemplates[].kind) |\n\t\t\tdel(.spec.ipFamilies) |\n\t\t\tdel(.spec.ipFamilyPolicy) |\n\t\t\t(.. | select(. == "extensions/v1beta1")) = "apps/v1" |\n\t\t\t(.. | select(. == "batch/v1beta1")) = "batch/v1" ' -
++ mktemp
+ local LAST_OUT=/tmp/tmp.JLNY1V5nU5
++ mktemp
+ local LAST_ERR=/tmp/tmp.j3YM1hs3o5
+ local exit_status=0
+ local timeout=4
+ args=('get' '-o' 'yaml' 'certificate/some-name-ssl-internal')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl get -o yaml certificate/some-name-ssl-internal
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.JLNY1V5nU5
+ cat /tmp/tmp.j3YM1hs3o5
+ rm /tmp/tmp.JLNY1V5nU5 /tmp/tmp.j3YM1hs3o5
+ return 0
+ yq -i eval 'del(.spec.persistentVolumeClaimRetentionPolicy)' /tmp/tmp.CsJXQPmVbm/certificate_some-name-ssl-internal.yml
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ version_gt 1.22
++ echo '1.33 >= 1.22'
++ bc -l
+ '[' 1 -eq 1 ']'
+ return 0
+ yq -i eval 'del(.spec.internalTrafficPolicy)' /tmp/tmp.CsJXQPmVbm/certificate_some-name-ssl-internal.yml
+ yq -i eval 'del(.spec.allocateLoadBalancerNodePorts)' /tmp/tmp.CsJXQPmVbm/certificate_some-name-ssl-internal.yml
+ [[ /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/compare/certificate_some-name-ssl-internal-user.yml == */cronjob* ]]
+ '[' -n '' ']'
+ [[ 0 -eq 0 ]]
+ diff -u /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/compare/certificate_some-name-ssl-internal-user.yml /tmp/tmp.CsJXQPmVbm/certificate_some-name-ssl-internal.yml
+ log 'compare_kubectl: certificate/some-name-ssl-internal OK'
+ set +o xtrace
[2026-07-22T20:17:39+0000] compare_kubectl: certificate/some-name-ssl-internal OK
+ compare_kubectl clusterissuer/some-name-psmdb-ca-issuer -custom
+ local resource=clusterissuer/some-name-psmdb-ca-issuer
+ local postfix=-custom
+ local skip_generation_check=
+ local expected_result=/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/compare/clusterissuer_some-name-psmdb-ca-issuer-custom.yml
+ local new_result=/tmp/tmp.CsJXQPmVbm/clusterissuer_some-name-psmdb-ca-issuer.yml
+ [[ -n '' ]]
+ kubectl_bin get -o yaml clusterissuer/some-name-psmdb-ca-issuer
+ yq eval $'\n\t\t\tdel(.metadata.ownerReferences[].apiVersion) |\n\t\t\tdel(.metadata.managedFields) |\n\t\t\tdel(.. | select(has("creationTimestamp")).creationTimestamp) |\n\t\t\tdel(.. | select(has("namespace")).namespace) |\n\t\t\tdel(.. | select(has("uid")).uid) |\n\t\t\tdel(.metadata.resourceVersion) |\n\t\t\tdel(.spec.template.spec.containers[].env[] | select(.name == "NAMESPACE")) |\n\t\t\tdel(.metadata.selfLink) |\n\t\t\tdel(.metadata.annotations."cloud.google.com/neg") |\n\t\t\tdel(.metadata.annotations."field.cattle.io/publicEndpoints") |\n\t\t\tdel(.metadata.annotations."metallb.io/ip-allocated-from-pool") |\n\t\t\tdel(.metadata.annotations."networking.gke.io/target-pool") |\n\t\t\tdel(.metadata.annotations."kubectl.kubernetes.io/last-applied-configuration") |\n\t\t\tdel(.. | select(has("image")).image) |\n\t\t\tdel(.. | select(has("clusterIP")).clusterIP) |\n\t\t\tdel(.. | select(has("clusterIPs")).clusterIPs) |\n\t\t\tdel(.. | select(has("dataSource")).dataSource) |\n\t\t\tdel(.. | select(has("procMount")).procMount) |\n\t\t\tdel(.. | select(has("storageClassName")).storageClassName) |\n\t\t\tdel(.. | select(has("finalizers")).finalizers) |\n\t\t\tdel(.. | select(has("kubernetes.io/pvc-protection"))."kubernetes.io/pvc-protection") |\n\t\t\tdel(.. | select(has("volumeName")).volumeName) |\n\t\t\tdel(.. | select(has("volume.beta.kubernetes.io/storage-provisioner"))."volume.beta.kubernetes.io/storage-provisioner") |\n\t\t\tdel(.. | select(has("volume.kubernetes.io/storage-provisioner"))."volume.kubernetes.io/storage-provisioner") |\n\t\t\tdel(.spec.volumeMode) |\n\t\t\tdel(.. | select(has("volume.kubernetes.io/selected-node"))."volume.kubernetes.io/selected-node") |\n\t\t\tdel(.. | select(has("percona.com/last-config-hash"))."percona.com/last-config-hash") |\n\t\t\tdel(.. | select(has("percona.com/configuration-hash"))."percona.com/configuration-hash") |\n\t\t\tdel(.. | select(has("percona.com/ssl-hash"))."percona.com/ssl-hash") |\n\t\t\tdel(.. | select(has("percona.com/ssl-internal-hash"))."percona.com/ssl-internal-hash") |\n\t\t\tdel(.spec.volumeClaimTemplates[].spec.volumeMode | select(. == "Filesystem")) |\n\t\t\tdel(.. | select(has("healthCheckNodePort")).healthCheckNodePort) |\n\t\t\tdel(.. | select(has("nodePort")).nodePort) |\n\t\t\tdel(.status) |\n\t\t\t(.. | select(tag == "!!str")) |= sub("tls-clusterissuer-cert-manager-21958", "NAME_SPACE") |\n\t\t\tdel(.spec.volumeClaimTemplates[].apiVersion) |\n\t\t\tdel(.spec.volumeClaimTemplates[].kind) |\n\t\t\tdel(.spec.ipFamilies) |\n\t\t\tdel(.spec.ipFamilyPolicy) |\n\t\t\t(.. | select(. == "extensions/v1beta1")) = "apps/v1" |\n\t\t\t(.. | select(. == "batch/v1beta1")) = "batch/v1" ' -
++ mktemp
+ local LAST_OUT=/tmp/tmp.j8KcFF2O9f
++ mktemp
+ local LAST_ERR=/tmp/tmp.UpFYW3Ther
+ local exit_status=0
+ local timeout=4
+ args=('get' '-o' 'yaml' 'clusterissuer/some-name-psmdb-ca-issuer')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl get -o yaml clusterissuer/some-name-psmdb-ca-issuer
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.j8KcFF2O9f
+ cat /tmp/tmp.UpFYW3Ther
+ rm /tmp/tmp.j8KcFF2O9f /tmp/tmp.UpFYW3Ther
+ return 0
+ yq -i eval 'del(.spec.persistentVolumeClaimRetentionPolicy)' /tmp/tmp.CsJXQPmVbm/clusterissuer_some-name-psmdb-ca-issuer.yml
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ version_gt 1.22
++ echo '1.33 >= 1.22'
++ bc -l
+ '[' 1 -eq 1 ']'
+ return 0
+ yq -i eval 'del(.spec.internalTrafficPolicy)' /tmp/tmp.CsJXQPmVbm/clusterissuer_some-name-psmdb-ca-issuer.yml
+ yq -i eval 'del(.spec.allocateLoadBalancerNodePorts)' /tmp/tmp.CsJXQPmVbm/clusterissuer_some-name-psmdb-ca-issuer.yml
+ [[ /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/compare/clusterissuer_some-name-psmdb-ca-issuer-custom.yml == */cronjob* ]]
+ '[' -n '' ']'
+ [[ 0 -eq 0 ]]
+ diff -u /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/compare/clusterissuer_some-name-psmdb-ca-issuer-custom.yml /tmp/tmp.CsJXQPmVbm/clusterissuer_some-name-psmdb-ca-issuer.yml
+ log 'compare_kubectl: clusterissuer/some-name-psmdb-ca-issuer OK'
+ set +o xtrace
[2026-07-22T20:17:40+0000] compare_kubectl: clusterissuer/some-name-psmdb-ca-issuer OK
+ compare_kubectl clusterissuer/some-name-psmdb-issuer -custom
+ local resource=clusterissuer/some-name-psmdb-issuer
+ local postfix=-custom
+ local skip_generation_check=
+ local expected_result=/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/compare/clusterissuer_some-name-psmdb-issuer-custom.yml
+ local new_result=/tmp/tmp.CsJXQPmVbm/clusterissuer_some-name-psmdb-issuer.yml
+ [[ -n '' ]]
+ kubectl_bin get -o yaml clusterissuer/some-name-psmdb-issuer
+ yq eval $'\n\t\t\tdel(.metadata.ownerReferences[].apiVersion) |\n\t\t\tdel(.metadata.managedFields) |\n\t\t\tdel(.. | select(has("creationTimestamp")).creationTimestamp) |\n\t\t\tdel(.. | select(has("namespace")).namespace) |\n\t\t\tdel(.. | select(has("uid")).uid) |\n\t\t\tdel(.metadata.resourceVersion) |\n\t\t\tdel(.spec.template.spec.containers[].env[] | select(.name == "NAMESPACE")) |\n\t\t\tdel(.metadata.selfLink) |\n\t\t\tdel(.metadata.annotations."cloud.google.com/neg") |\n\t\t\tdel(.metadata.annotations."field.cattle.io/publicEndpoints") |\n\t\t\tdel(.metadata.annotations."metallb.io/ip-allocated-from-pool") |\n\t\t\tdel(.metadata.annotations."networking.gke.io/target-pool") |\n\t\t\tdel(.metadata.annotations."kubectl.kubernetes.io/last-applied-configuration") |\n\t\t\tdel(.. | select(has("image")).image) |\n\t\t\tdel(.. | select(has("clusterIP")).clusterIP) |\n\t\t\tdel(.. | select(has("clusterIPs")).clusterIPs) |\n\t\t\tdel(.. | select(has("dataSource")).dataSource) |\n\t\t\tdel(.. | select(has("procMount")).procMount) |\n\t\t\tdel(.. | select(has("storageClassName")).storageClassName) |\n\t\t\tdel(.. | select(has("finalizers")).finalizers) |\n\t\t\tdel(.. | select(has("kubernetes.io/pvc-protection"))."kubernetes.io/pvc-protection") |\n\t\t\tdel(.. | select(has("volumeName")).volumeName) |\n\t\t\tdel(.. | select(has("volume.beta.kubernetes.io/storage-provisioner"))."volume.beta.kubernetes.io/storage-provisioner") |\n\t\t\tdel(.. | select(has("volume.kubernetes.io/storage-provisioner"))."volume.kubernetes.io/storage-provisioner") |\n\t\t\tdel(.spec.volumeMode) |\n\t\t\tdel(.. | select(has("volume.kubernetes.io/selected-node"))."volume.kubernetes.io/selected-node") |\n\t\t\tdel(.. | select(has("percona.com/last-config-hash"))."percona.com/last-config-hash") |\n\t\t\tdel(.. | select(has("percona.com/configuration-hash"))."percona.com/configuration-hash") |\n\t\t\tdel(.. | select(has("percona.com/ssl-hash"))."percona.com/ssl-hash") |\n\t\t\tdel(.. | select(has("percona.com/ssl-internal-hash"))."percona.com/ssl-internal-hash") |\n\t\t\tdel(.spec.volumeClaimTemplates[].spec.volumeMode | select(. == "Filesystem")) |\n\t\t\tdel(.. | select(has("healthCheckNodePort")).healthCheckNodePort) |\n\t\t\tdel(.. | select(has("nodePort")).nodePort) |\n\t\t\tdel(.status) |\n\t\t\t(.. | select(tag == "!!str")) |= sub("tls-clusterissuer-cert-manager-21958", "NAME_SPACE") |\n\t\t\tdel(.spec.volumeClaimTemplates[].apiVersion) |\n\t\t\tdel(.spec.volumeClaimTemplates[].kind) |\n\t\t\tdel(.spec.ipFamilies) |\n\t\t\tdel(.spec.ipFamilyPolicy) |\n\t\t\t(.. | select(. == "extensions/v1beta1")) = "apps/v1" |\n\t\t\t(.. | select(. == "batch/v1beta1")) = "batch/v1" ' -
++ mktemp
+ local LAST_OUT=/tmp/tmp.echwtQuLGG
++ mktemp
+ local LAST_ERR=/tmp/tmp.YyIPYql8ba
+ local exit_status=0
+ local timeout=4
+ args=('get' '-o' 'yaml' 'clusterissuer/some-name-psmdb-issuer')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl get -o yaml clusterissuer/some-name-psmdb-issuer
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.echwtQuLGG
+ cat /tmp/tmp.YyIPYql8ba
+ rm /tmp/tmp.echwtQuLGG /tmp/tmp.YyIPYql8ba
+ return 0
+ yq -i eval 'del(.spec.persistentVolumeClaimRetentionPolicy)' /tmp/tmp.CsJXQPmVbm/clusterissuer_some-name-psmdb-issuer.yml
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ version_gt 1.22
++ echo '1.33 >= 1.22'
++ bc -l
+ '[' 1 -eq 1 ']'
+ return 0
+ yq -i eval 'del(.spec.internalTrafficPolicy)' /tmp/tmp.CsJXQPmVbm/clusterissuer_some-name-psmdb-issuer.yml
+ yq -i eval 'del(.spec.allocateLoadBalancerNodePorts)' /tmp/tmp.CsJXQPmVbm/clusterissuer_some-name-psmdb-issuer.yml
+ [[ /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/compare/clusterissuer_some-name-psmdb-issuer-custom.yml == */cronjob* ]]
+ '[' -n '' ']'
+ [[ 0 -eq 0 ]]
+ diff -u /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/compare/clusterissuer_some-name-psmdb-issuer-custom.yml /tmp/tmp.CsJXQPmVbm/clusterissuer_some-name-psmdb-issuer.yml
+ log 'compare_kubectl: clusterissuer/some-name-psmdb-issuer OK'
+ set +o xtrace
[2026-07-22T20:17:41+0000] compare_kubectl: clusterissuer/some-name-psmdb-issuer OK
+ desc 'step 2: operator creates certificates using the existing user ClusterIssuer when it has no RBAC to read ClusterIssuers'
+ set +o xtrace


-----------------------------------------------------------------------------------
step 2: operator creates certificates using the existing user ClusterIssuer when it has no RBAC to read ClusterIssuers
-----------------------------------------------------------------------------------

+ delete_clusterissuer_rbac some-name-psmdb-ca-issuer
+ local cluster_issuer_name=some-name-psmdb-ca-issuer
+ kubectl_bin delete clusterrolebinding some-name-psmdb-ca-issuer-reader-tls-clusterissuer-cert-manager-21958 --ignore-not-found
++ mktemp
+ local LAST_OUT=/tmp/tmp.jIGTCvzyyd
++ mktemp
+ local LAST_ERR=/tmp/tmp.pY33af25Tr
+ local exit_status=0
+ local timeout=4
+ args=('delete' 'clusterrolebinding' 'some-name-psmdb-ca-issuer-reader-tls-clusterissuer-cert-manager-21958' '--ignore-not-found')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl delete clusterrolebinding some-name-psmdb-ca-issuer-reader-tls-clusterissuer-cert-manager-21958 --ignore-not-found
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.jIGTCvzyyd
clusterrolebinding.rbac.authorization.k8s.io "some-name-psmdb-ca-issuer-reader-tls-clusterissuer-cert-manager-21958" deleted
+ cat /tmp/tmp.pY33af25Tr
+ rm /tmp/tmp.jIGTCvzyyd /tmp/tmp.pY33af25Tr
+ return 0
+ kubectl_bin delete clusterrole some-name-psmdb-ca-issuer-reader --ignore-not-found
++ mktemp
+ local LAST_OUT=/tmp/tmp.bAC82oNDJS
++ mktemp
+ local LAST_ERR=/tmp/tmp.fRYOS01Wfn
+ local exit_status=0
+ local timeout=4
+ args=('delete' 'clusterrole' 'some-name-psmdb-ca-issuer-reader' '--ignore-not-found')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl delete clusterrole some-name-psmdb-ca-issuer-reader --ignore-not-found
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.bAC82oNDJS
clusterrole.rbac.authorization.k8s.io "some-name-psmdb-ca-issuer-reader" deleted
+ cat /tmp/tmp.fRYOS01Wfn
+ rm /tmp/tmp.bAC82oNDJS /tmp/tmp.fRYOS01Wfn
+ return 0
+ delete_clusterissuer_rbac some-name-psmdb-issuer
+ local cluster_issuer_name=some-name-psmdb-issuer
+ kubectl_bin delete clusterrolebinding some-name-psmdb-issuer-reader-tls-clusterissuer-cert-manager-21958 --ignore-not-found
++ mktemp
+ local LAST_OUT=/tmp/tmp.ZJLYAMpsNX
++ mktemp
+ local LAST_ERR=/tmp/tmp.7By7SJOHY2
+ local exit_status=0
+ local timeout=4
+ args=('delete' 'clusterrolebinding' 'some-name-psmdb-issuer-reader-tls-clusterissuer-cert-manager-21958' '--ignore-not-found')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl delete clusterrolebinding some-name-psmdb-issuer-reader-tls-clusterissuer-cert-manager-21958 --ignore-not-found
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.ZJLYAMpsNX
clusterrolebinding.rbac.authorization.k8s.io "some-name-psmdb-issuer-reader-tls-clusterissuer-cert-manager-21958" deleted
+ cat /tmp/tmp.7By7SJOHY2
+ rm /tmp/tmp.ZJLYAMpsNX /tmp/tmp.7By7SJOHY2
+ return 0
+ kubectl_bin delete clusterrole some-name-psmdb-issuer-reader --ignore-not-found
++ mktemp
+ local LAST_OUT=/tmp/tmp.9FsJPRw6xA
++ mktemp
+ local LAST_ERR=/tmp/tmp.Or3X0RICe4
+ local exit_status=0
+ local timeout=4
+ args=('delete' 'clusterrole' 'some-name-psmdb-issuer-reader' '--ignore-not-found')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl delete clusterrole some-name-psmdb-issuer-reader --ignore-not-found
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.9FsJPRw6xA
clusterrole.rbac.authorization.k8s.io "some-name-psmdb-issuer-reader" deleted
+ cat /tmp/tmp.Or3X0RICe4
+ rm /tmp/tmp.9FsJPRw6xA /tmp/tmp.Or3X0RICe4
+ return 0
+ check_operator_cannot_read_clusterissuers
+ local operator_sa=percona-server-mongodb-operator
+ local can_i
+ local exit_status
+ set +e
++ kubectl auth can-i get clusterissuers.cert-manager.io --all-namespaces --as=system:serviceaccount:psmdb-operator:percona-server-mongodb-operator
+ can_i=no
+ exit_status=1
+ set -e
+ '[' 1 -eq 0 ']'
+ [[ no != no* ]]
+ desc 'delete cluster'
+ set +o xtrace


-----------------------------------------------------------------------------------
delete cluster
-----------------------------------------------------------------------------------

+ kubectl delete psmdb --all
perconaservermongodb.psmdb.percona.com "some-name" deleted from tls-clusterissuer-cert-manager-21958 namespace
+ wait_for_delete psmdb/some-name 180
+ local res=psmdb/some-name
+ local wait_time=180
+ set +o xtrace
waiting for psmdb/some-name to be deletedError from server (NotFound): perconaservermongodbs.psmdb.percona.com "some-name" not found
Error from server (NotFound): perconaservermongodbs.psmdb.percona.com "some-name" not found
Error from server (NotFound): perconaservermongodbs.psmdb.percona.com "some-name" not found
Error from server (NotFound): perconaservermongodbs.psmdb.percona.com "some-name" not found
+ kubectl delete pvc --all
persistentvolumeclaim "mongod-data-some-name-cfg-0" deleted from tls-clusterissuer-cert-manager-21958 namespace
persistentvolumeclaim "mongod-data-some-name-cfg-1" deleted from tls-clusterissuer-cert-manager-21958 namespace
persistentvolumeclaim "mongod-data-some-name-cfg-2" deleted from tls-clusterissuer-cert-manager-21958 namespace
persistentvolumeclaim "mongod-data-some-name-rs0-0" deleted from tls-clusterissuer-cert-manager-21958 namespace
persistentvolumeclaim "mongod-data-some-name-rs0-1" deleted from tls-clusterissuer-cert-manager-21958 namespace
persistentvolumeclaim "mongod-data-some-name-rs0-2" deleted from tls-clusterissuer-cert-manager-21958 namespace
+ kubectl_bin delete secret some-name-ssl-old some-name-ssl-internal-old --ignore-not-found
++ mktemp
+ local LAST_OUT=/tmp/tmp.l0JgbvNUUS
++ mktemp
+ local LAST_ERR=/tmp/tmp.cw53L32K2C
+ local exit_status=0
+ local timeout=4
+ args=('delete' 'secret' 'some-name-ssl-old' 'some-name-ssl-internal-old' '--ignore-not-found')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl delete secret some-name-ssl-old some-name-ssl-internal-old --ignore-not-found
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.l0JgbvNUUS
+ cat /tmp/tmp.cw53L32K2C
+ rm /tmp/tmp.l0JgbvNUUS /tmp/tmp.cw53L32K2C
+ return 0
+ desc 'delete user certificates so operator recreates them using the existing clusterissuer'
+ set +o xtrace


-----------------------------------------------------------------------------------
delete user certificates so operator recreates them using the existing clusterissuer
-----------------------------------------------------------------------------------

+ kubectl_bin delete -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-ssl.yml --ignore-not-found
++ mktemp
+ local LAST_OUT=/tmp/tmp.VsPWOVi7rG
++ mktemp
+ local LAST_ERR=/tmp/tmp.w6qza7Soxw
+ local exit_status=0
+ local timeout=4
+ args=('delete' '-f' '/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-ssl.yml' '--ignore-not-found')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl delete -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-ssl.yml --ignore-not-found
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.VsPWOVi7rG
certificate.cert-manager.io "some-name-ssl" deleted from tls-clusterissuer-cert-manager-21958 namespace
+ cat /tmp/tmp.w6qza7Soxw
+ rm /tmp/tmp.VsPWOVi7rG /tmp/tmp.w6qza7Soxw
+ return 0
+ kubectl_bin delete -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-ssl-internal.yml --ignore-not-found
++ mktemp
+ local LAST_OUT=/tmp/tmp.MuP3zoFI2y
++ mktemp
+ local LAST_ERR=/tmp/tmp.CH2mguaMEU
+ local exit_status=0
+ local timeout=4
+ args=('delete' '-f' '/mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-ssl-internal.yml' '--ignore-not-found')
+ local args
+ transformed_files=()
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ for i in $(seq 0 2)
+ set +e
+ kubectl delete -f /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name-ssl-internal.yml --ignore-not-found
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.MuP3zoFI2y
certificate.cert-manager.io "some-name-ssl-internal" deleted from tls-clusterissuer-cert-manager-21958 namespace
+ cat /tmp/tmp.CH2mguaMEU
+ rm /tmp/tmp.MuP3zoFI2y /tmp/tmp.CH2mguaMEU
+ return 0
+ desc 'recreate PSMDB cluster some-name without clusterissuer RBAC'
+ set +o xtrace


-----------------------------------------------------------------------------------
recreate PSMDB cluster some-name without clusterissuer RBAC
-----------------------------------------------------------------------------------

+ apply_cluster /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name.yml
+ '[' -z '' ']'
+ cat_config /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name.yml
+ kubectl_bin apply -f -
+ cat /mnt/jenkins/workspace/cloud-psmdb-operator_PR-2465/e2e-tests/tls-clusterissuer-cert-manager/conf/some-name.yml
+ yq eval '(.spec | select(.image == null)).image = "docker.io/perconalab/percona-server-mongodb-operator:main-mongod8.0"'
++ mktemp
+ yq eval '(.spec | select(has("pmm"))).pmm.image = "docker.io/percona/pmm-client:2.44.1-1"'
+ yq eval '(.spec | select(has("initImage"))).initImage = "docker.io/perconalab/percona-server-mongodb-operator:PR-2465-a177d53a8"'
+ yq eval '(.spec | select(has("backup"))).backup.image = "docker.io/perconalab/percona-server-mongodb-operator:main-backup"'
+ /usr/sbin/sed -e s/NAME_SPACE/tls-clusterissuer-cert-manager-21958/g
+ [[ -n docker.io/perconalab/fluentbit:main-logcollector ]]
+ IMAGE_LOGCOLLECTOR=docker.io/perconalab/fluentbit:main-logcollector
+ yq eval '(.spec | select(has("logcollector"))).logcollector.image = strenv(IMAGE_LOGCOLLECTOR)'
+ local LAST_OUT=/tmp/tmp.unr8F0DJa3
+ yq eval '(.spec | select(has("search"))).search.image = "perconalab/percona-server-mongodb-operator:main-mongot"'
++ mktemp
+ local LAST_ERR=/tmp/tmp.JhlmYQAxDt
+ local exit_status=0
+ add_arch_to_psmdb -
+ local timeout=4
+ args=('apply' '-f' '-')
+ local args
+ transformed_files=()
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ cat -
+ local transformed_files
+ arch_scheduling_enabled
+ [[ -n '' ]]
+ arch_scheduling_enabled
+ [[ -n '' ]]
++ seq 0 2
+ yq eval '.spec.upgradeOptions.apply="Never"'
+ for i in $(seq 0 2)
+ set +e
+ kubectl apply -f -
+ return
+ exit_status=0
+ set -e
+ '[' 0 '!=' 0 -a -n 1 ']'
+ break
+ cat /tmp/tmp.unr8F0DJa3
perconaservermongodb.psmdb.percona.com/some-name created
+ cat /tmp/tmp.JhlmYQAxDt
+ rm /tmp/tmp.unr8F0DJa3 /tmp/tmp.JhlmYQAxDt
+ return 0
+ desc 'check if all Pods started'
+ set +o xtrace


-----------------------------------------------------------------------------------
check if all Pods started
-----------------------------------------------------------------------------------

+ wait_for_running some-name-rs0 3
+ local name=some-name-rs0
+ let last_pod=2
+ local check_cluster_readiness=true
+ set_debug
+ [[ 1 == 1 ]]
+ set -o xtrace
+ local rs_name=rs0
+ local cluster_name=some-name
++ seq 0 2
+ for i in $(seq 0 $last_pod)
+ [[ 0 -eq 2 ]]
+ wait_pod some-name-rs0-0
+ local pod=some-name-rs0-0
+ set +o xtrace
waiting for pod/some-name-rs0-0 to be ready................OK
+ for i in $(seq 0 $last_pod)
+ [[ 1 -eq 2 ]]
+ wait_pod some-name-rs0-1
+ local pod=some-name-rs0-1
+ set +o xtrace
waiting for pod/some-name-rs0-1 to be ready................OK
+ for i in $(seq 0 $last_pod)
+ [[ 2 -eq 2 ]]
++ kubectl_bin get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="rs0")].arbiter.enabled}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.OW4vLg3WKf
+++ mktemp
++ local LAST_ERR=/tmp/tmp.n88ulZTPlv
++ local exit_status=0
++ local timeout=4
++ args=('get' 'psmdb' 'some-name' '-o' 'jsonpath={.spec.replsets[?(@.name=="rs0")].arbiter.enabled}')
++ local args
++ transformed_files=()
++ local transformed_files
++ arch_scheduling_enabled
++ [[ -n '' ]]
++ arch_scheduling_enabled
++ [[ -n '' ]]
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="rs0")].arbiter.enabled}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.OW4vLg3WKf
++ cat /tmp/tmp.n88ulZTPlv
++ rm /tmp/tmp.OW4vLg3WKf /tmp/tmp.n88ulZTPlv
++ return 0
+ [[ '' == true ]]
+ wait_pod some-name-rs0-2
+ local pod=some-name-rs0-2
+ set +o xtrace
waiting for pod/some-name-rs0-2 to be ready................OK
++ kubectl_bin get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="rs0")].nonvoting.enabled}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.8O2sqbQSGn
+++ mktemp
++ local LAST_ERR=/tmp/tmp.2OXBrYJ1Sd
++ local exit_status=0
++ local timeout=4
++ args=('get' 'psmdb' 'some-name' '-o' 'jsonpath={.spec.replsets[?(@.name=="rs0")].nonvoting.enabled}')
++ local args
++ transformed_files=()
++ local transformed_files
++ arch_scheduling_enabled
++ [[ -n '' ]]
++ arch_scheduling_enabled
++ [[ -n '' ]]
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="rs0")].nonvoting.enabled}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.8O2sqbQSGn
++ cat /tmp/tmp.2OXBrYJ1Sd
++ rm /tmp/tmp.8O2sqbQSGn /tmp/tmp.2OXBrYJ1Sd
++ return 0
+ [[ '' == true ]]
++ kubectl_bin get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="rs0")].hidden.enabled}'
+++ mktemp
++ local LAST_OUT=/tmp/tmp.RWsarlZL8R
+++ mktemp
++ local LAST_ERR=/tmp/tmp.WGy4R74zl4
++ local exit_status=0
++ local timeout=4
++ args=('get' 'psmdb' 'some-name' '-o' 'jsonpath={.spec.replsets[?(@.name=="rs0")].hidden.enabled}')
++ local args
++ transformed_files=()
++ local transformed_files
++ arch_scheduling_enabled
++ [[ -n '' ]]
++ arch_scheduling_enabled
++ [[ -n '' ]]
+++ seq 0 2
++ for i in $(seq 0 2)
++ set +e
++ kubectl get psmdb some-name -o 'jsonpath={.spec.replsets[?(@.name=="rs0")].hidden.enabled}'
++ exit_status=0
++ set -e
++ '[' 0 '!=' 0 -a -n 1 ']'
++ break
++ cat /tmp/tmp.RWsarlZL8R
++ cat /tmp/tmp.WGy4R74zl4
++ rm /tmp/tmp.RWsarlZL8R /tmp/tmp.WGy4R74zl4
++ return 0
+ [[ '' == true ]]
+ sleep 10
+ [[ true == true ]]
+ set +x
Waiting for cluster some-name to be ready.Terminated                 sleep 1