a: &testAttributes{
				resource: certificatesapi.Resource("certificatesigningrequests"),
				obj: &certificatesapi.CertificateSigningRequest{Spec: certificatesapi.CertificateSigningRequestSpec{
					Request:    pemWithGroup("system:masters"),
					SignerName: certificatesv1beta1.KubeAPIServerClientKubeletSignerName,
				}},
			},
			wantErr: "",
		},
		{
			name: "invalid request",
			a: &testAttributes{