want:       "cal-want",
		},
		{
			testName:        "fail when non-existing secret name provided",
			objs:            []runtime.Object{kubeSystemNamespace, sa2, saSecret, saSecret2},
			secretName:      "nonexistingSecret",
			name:            "cluster-foo",
			want:            "cal-want",
			wantErrStr:      "provided secret does not exist",
			k8sMinorVersion: "23",
		},
	}

	for i := range cases {