refactor: 按职责拆分 controller 启动流程

internal/bootstrap/manager_integration_test.go

@@ -0,0 +1,75 @@
+//go:build integration
+
+package bootstrap
+
+import (
+	"context"
+	"os"
+	"path/filepath"
+	"testing"
+	"time"
+
+	"sigs.k8s.io/controller-runtime/pkg/envtest"
+)
+
+func TestBootstrapWithRealAPIServer(t *testing.T) {
+	environment := &envtest.Environment{
+		CRDDirectoryPaths:     []string{"../../config/crd/bases"},
+		ErrorIfCRDPathMissing: true,
+	}
+	config, err := environment.Start()
+	if err != nil {
+		t.Fatal(err)
+	}
+	t.Cleanup(func() {
+		if err := environment.Stop(); err != nil {
+			t.Error(err)
+		}
+	})
+	user, err := environment.AddUser(envtest.User{Name: "bootstrap-fixture", Groups: []string{"system:masters"}}, config)
+	if err != nil {
+		t.Fatal(err)
+	}
+	data, err := user.KubeConfig()
+	if err != nil {
+		t.Fatal("cannot generate isolated fixture kubeconfig")
+	}
+	// 仅写临时 envtest 身份，不读取现场 kubeconfig；t.TempDir 会自动清理。
+	path := filepath.Join(t.TempDir(), "kubeconfig")
+	if err := os.WriteFile(path, data, 0600); err != nil {
+		t.Fatal(err)
+	}
+	t.Setenv("KUBECONFIG", path)
+	t.Setenv("POD_NAMESPACE", "")
+	options := parseTestOptions(t, "--metrics-bind-address=0", "--health-probe-bind-address=0", "--webhook-port=-1")
+	manager, err := newManager(options)
+	if err != nil {
+		t.Fatal(err)
+	}
+	if err := setupOpenBaoAuthentication(manager, options.openBao); err != nil {
+		t.Fatal(err)
+	}
+	ctx, cancel := context.WithTimeout(t.Context(), 30*time.Second)
+	defer cancel()
+	cleanup, err := setupDatabase(ctx, manager, options.database)
+	if err != nil {
+		t.Fatal(err)
+	}
+	defer cleanup()
+	done := make(chan error, 1)
+	go func() { done <- manager.Start(ctx) }()
+	defer func() {
+		cancel()
+		select {
+		case err := <-done:
+			if err != nil {
+				t.Error(err)
+			}
+		case <-time.After(20 * time.Second):
+			t.Error("manager did not stop before component cleanup")
+		}
+	}()
+	if !manager.GetCache().WaitForCacheSync(ctx) {
+		t.Fatal("assembled controller cache did not synchronize")
+	}
+}