var (
		secret0 = makeSecret(secretNamespace, "s0",
			clusterCredential{"c0", []byte("kubeconfig0-0")})
		secret0UpdateKubeconfigChanged = makeSecret(secretNamespace, "s0",
			clusterCredential{"c0", []byte("kubeconfig0-1")})
		secret0UpdateKubeconfigSame = makeSecret(secretNamespace, "s0",
			clusterCredential{"c0", []byte("kubeconfig0-1")})
		secret0AddCluster = makeSecret(secretNamespace, "s0",

		secretName      string
		secretNameSpace string
		expectFail      bool
	}{
		"submitting a CSR without duplicate should succeed": {
			gracePeriodRatio: 0.6,
			k8sCaCertFile:    "./test-data/example-ca-cert.pem",
			dnsNames:         []string{"foo"},
			secretNames:      []string{"istio.webhook.foo"},
			secretName:       "mock-secret",
			secretNameSpace:  "mock-secret-namespace",
			expectFail:       false,

	revision          string

	// secretNamespace where we get cluster-access secrets
	secretNamespace string
	component       *multicluster.Component[*kubeController]
}

// NewMulticluster initializes data structure to store multicluster information
func NewMulticluster(
	serverID string,
	kc kubernetes.Interface,
	secretNamespace string,
	opts Options,

// Signer is a controller that signs a ConfigMap with a set of tokens.
type Signer struct {
	client             clientset.Interface
	configMapKey       string
	configMapName      string
	configMapNamespace string
	secretNamespace    string

	// syncQueue handles synchronizing updates to the ConfigMap.  We'll only ever
	// have one item (Named <ConfigMapName>) in this queue. We are using it

          }
        },
        "azureFile": {
          "secretName": "secretNameValue",
          "shareName": "shareNameValue",
          "readOnly": true,
          "secretNamespace": "secretNamespaceValue"
        },
        "vsphereVolume": {
          "volumePath": "volumePathValue",
          "fsType": "fsTypeValue",
          "storagePolicyName": "storagePolicyNameValue",

        diskURI: diskURIValue
        fsType: fsTypeValue
        kind: kindValue
        readOnly: true
      azureFile:
        readOnly: true
        secretName: secretNameValue
        secretNamespace: secretNamespaceValue
        shareName: shareNameValue
      capacity:
        capacityKey: "0"
      cephfs:
        monitors:
        - monitorsValue
        path: pathValue
        readOnly: true

      "options": {
        "optionsKey": "optionsValue"
      }
    },
    "azureFile": {
      "secretName": "secretNameValue",
      "shareName": "shareNameValue",
      "readOnly": true,
      "secretNamespace": "secretNamespaceValue"
    },
    "vsphereVolume": {
      "volumePath": "volumePathValue",
      "fsType": "fsTypeValue",
      "storagePolicyName": "storagePolicyNameValue",

          }
        },
        "azureFile": {
          "secretName": "secretNameValue",
          "shareName": "shareNameValue",
          "readOnly": true,
          "secretNamespace": "secretNamespaceValue"
        },
        "vsphereVolume": {
          "volumePath": "volumePathValue",
          "fsType": "fsTypeValue",
          "storagePolicyName": "storagePolicyNameValue",

          }
        },
        "azureFile": {
          "secretName": "secretNameValue",
          "shareName": "shareNameValue",
          "readOnly": true,
          "secretNamespace": "secretNamespaceValue"
        },
        "vsphereVolume": {
          "volumePath": "volumePathValue",
          "fsType": "fsTypeValue",
          "storagePolicyName": "storagePolicyNameValue",

	if err != nil {
		return nil, err
	}
	if chapDiscover || chapSession {
		secretName, secretNamespace, err := getISCSISecretNameAndNamespace(spec, namespace)
		if err != nil {
			return nil, err
		}

		if len(secretName) > 0 && len(secretNamespace) > 0 {
			// if secret is provideded, retrieve it
			kubeClient := plugin.host.GetKubeClient()
			if kubeClient == nil {