add test case for expired certificate

inteon · cert-manager-bot · commit 87f4e1a964f6 · 2024-08-14T08:53:03.000Z
Signed-off-by: Tim Ramlot &lt;42113979+inteon@users.noreply.github.com&gt;
diff --git a/pkg/server/tls/authority/authority_test.go b/pkg/server/tls/authority/authority_test.go
@@ -147,6 +147,18 @@ func Test__caRequiresRegeneration(t *testing.T) {
 			},
 			expect: false,
 		},
+		{
+			name: "Root CA certificate is expired",
+			secret: &corev1.Secret{
+				Data: generateSecretData(
+					func(cert *x509.Certificate) {
+						cert.NotBefore = time.Now().Add(-1 * time.Hour)
+						cert.NotAfter = time.Now().Add(-1 * time.Minute)
+					},
+				),
+			},
+			expect: true,
+		},
 		{
 			name: "Ok",
 			secret: &corev1.Secret{
