kubernetes/cmd/kubelet/app/server_bootstrap_test.go

// Test_buildClientCertificateManager validates that we can build a local client cert
// manager that will use the bootstrap client until we get a valid cert, then use our
// provided identity on subsequent requests.
func Test_buildClientCertificateManager(t *testing.T) { … }

func Test_buildClientCertificateManager_populateCertDir(t *testing.T) { … }

func getFileInfo(dir string) map[string]os.FileInfo { … }

type rotater …

func getCSR(req *http.Request) (*certapi.CertificateSigningRequest, error) { … }

func mustMarshal(obj interface{ … }

type csrSimulator …

func (s *csrSimulator) SetExpectUserAgent(a string) { … }

func (s *csrSimulator) ExpectUserAgent() string { … }

func (s *csrSimulator) ServeHTTP(w http.ResponseWriter, req *http.Request) { … }

// genClientCert generates an x509 certificate for testing. Certificate and key
// are returned in PEM encoding.
func genClientCert(t *testing.T, from, to time.Time) ([]byte, []byte) { … }