expectedOK: false,
		},
		{
			fieldPath:  "metadata.labels['key']foo",
			expectedOK: false,
		},
		{
			fieldPath:  "['key']",
			expectedOK: false,
		},
		{
			fieldPath:  "metadata.labels",
			expectedOK: false,
		},
	}
	for _, tc := range cases {
		path, subscript, ok := SplitMaybeSubscriptedPath(tc.fieldPath)
		if !ok {
			if tc.expectedOK {

			resp, ok, _ := auth.AuthenticateRequest(req)
			if testcase.expectedOk != ok {
				t.Errorf("%v: expected %v, got %v", k, testcase.expectedOk, ok)
			}
			if !ok {
				return
			}
			if e, a := testcase.expectedUser, resp.User; !reflect.DeepEqual(e, a) {
				t.Errorf("%v: expected %#v, got %#v", k, e, a)
			}

			want := testcase.finalHeaders

Tom Tresansky <******@****.***> 1697219015 -0400

Tom Tresansky <******@****.***> 1697219015 -0400

Tom Tresansky <******@****.***> 1697219015 -0400

			expectedKey:       "/cluster-signing-key",
		},
		{
			name:              "specifiedOnly-KubeletServingSignerFilesSpecified",
			config:            specifiedOnly,
			specifiedFn:       areKubeletServingSignerFilesSpecified,
			expectedSpecified: true,
			filesFn:           getKubeletServingSignerFiles,
			expectedCert:      "/cluster-signing-kubelet-serving/cert-file",

        return Joiner.on(SystemProperties.getInstance().getLineSeparator()).join(lines);
    }

    private void checkEquals(String label, String expected, String actual, List<String> errors) {
        if (!expected.equals(actual)) {
            errors.add("bad " + label + ": expected='" + expected + "' found='" + actual + "'");
        }
    }

Tom Tresansky <******@****.***> 1697219015 -0400

Tom Tresansky <******@****.***> 1697219015 -0400

Tom Tresansky <******@****.***> 1697219015 -0400