Merge pull request kubernetes#93614 from liggitt/csr-fuzz

Update CSR fuzzing to match defaulting

Author: k8s-ci-robot

pkg/apis/certificates/fuzzer/BUILD

@@ -11,6 +11,7 @@ go_library(
     importpath = "k8s.io/kubernetes/pkg/apis/certificates/fuzzer",
     deps = [
         "//pkg/apis/certificates:go_default_library",
+        "//pkg/apis/core:go_default_library",
         "//staging/src/k8s.io/apimachinery/pkg/runtime/serializer:go_default_library",
         "//vendor/github.com/google/gofuzz:go_default_library",
     ],

pkg/apis/certificates/fuzzer/fuzzer.go

@@ -21,6 +21,7 @@ import (
 
 	runtimeserializer "k8s.io/apimachinery/pkg/runtime/serializer"
 	"k8s.io/kubernetes/pkg/apis/certificates"
+	api "k8s.io/kubernetes/pkg/apis/core"
 )
 
 // Funcs returns the fuzzer functions for the certificates api group.
@@ -31,5 +32,11 @@ var Funcs = func(codecs runtimeserializer.CodecFactory) []interface{} {
 			obj.Usages = []certificates.KeyUsage{certificates.UsageKeyEncipherment}
 			obj.SignerName = "example.com/custom-sample-signer"
 		},
+		func(obj *certificates.CertificateSigningRequestCondition, c fuzz.Continue) {
+			c.FuzzNoCustom(obj) // fuzz self without calling this function again
+			if len(obj.Status) == 0 {
+				obj.Status = api.ConditionTrue
+			}
+		},
 	}
 }