got := ChecksumForConfigMap(test.configMap)
			if got != test.checksum {
				t.Errorf("checksum mismatch - got %q, expected %q", got, test.checksum)
			}
		})
	}
}

func TestSignConfigMap(t *testing.T) {
	for _, test := range checksumTestCases {
		t.Run(test.desc, func(t *testing.T) {
			target := test.configMap.DeepCopy()
			SignConfigMap(target)

			// Verify that we have a correct annotation