chore: add windows skeleton

Author: cameronmeissner

e2e/test_helpers.go

@@ -348,7 +348,7 @@ func validateVM(ctx context.Context, s *Scenario) {
 		ValidateNodeCanRunAPod(ctx, s)
 		switch s.VHD.OS {
 		case config.OSWindows:
-			// TODO: validate something
+			ValidateCommonWindows(ctx, s)
 		default:
 			ValidateCommonLinux(ctx, s)
 		}

e2e/validation.go

@@ -112,3 +112,8 @@ func ValidateCommonLinux(ctx context.Context, s *Scenario) {
 			"AAD client ID and secret should be present in /etc/kubernetes/azure.json")
 	}
 }
+
+func ValidateCommonWindows(ctx context.Context, s *Scenario) {
+	ValidateTLSBootstrapping(ctx, s)
+	ValidateKubeletServingCertificateRotation(ctx, s)
+}

e2e/validators.go

@@ -83,6 +83,15 @@ func ValidateLeakedSecrets(ctx context.Context, s *Scenario) {
 }
 
 func ValidateKubeletServingCertificateRotation(ctx context.Context, s *Scenario) {
+	switch s.VHD.OS {
+	case config.OSWindows:
+		validateKubeletServingCertificateRotationWindows(ctx, s)
+	default:
+		validateKubeletServingCertificateRotationLinux(ctx, s)
+	}
+}
+
+func validateKubeletServingCertificateRotationLinux(ctx context.Context, s *Scenario) {
 	if _, ok := s.Runtime.VM.VMSS.Tags["aks-disable-kubelet-serving-certificate-rotation"]; ok {
 		s.T.Logf("ValidateKubeletServingCertificateRotation - VMSS has KSCR disablement tag, will validate that KSCR has been disabled")
 		ValidateFileExcludesContent(ctx, s, "/etc/default/kubelet", "--rotate-server-certificates=true")
@@ -107,9 +116,23 @@ func ValidateKubeletServingCertificateRotation(ctx context.Context, s *Scenario)
 		ValidateFileExcludesContent(ctx, s, "/etc/default/kubeletconfig.json", "\"tlsPrivateKeyFile\": \"/etc/kubernetes/certs/kubeletserver.key\"")
 		ValidateFileHasContent(ctx, s, "/etc/default/kubeletconfig.json", "\"serverTLSBootstrap\": true")
 	}
+
+}
+
+func validateKubeletServingCertificateRotationWindows(ctx context.Context, s *Scenario) {
+
 }
 
 func ValidateTLSBootstrapping(ctx context.Context, s *Scenario) {
+	switch s.VHD.OS {
+	case config.OSWindows:
+		validateTLSBootstrappingWindows(ctx, s)
+	default:
+		validateTLSBootstrappingLinux(ctx, s)
+	}
+}
+
+func validateTLSBootstrappingLinux(ctx context.Context, s *Scenario) {
 	ValidateDirectoryContent(ctx, s, "/var/lib/kubelet", []string{"kubeconfig"})
 	ValidateDirectoryContent(ctx, s, "/var/lib/kubelet/pki", []string{"kubelet-server-current.pem"})
 	kubeletLogs := execScriptOnVMForScenarioValidateExitCode(ctx, s, "sudo journalctl -u kubelet", 0, "could not retrieve kubelet logs with journalctl").stdout.String()
@@ -140,6 +163,10 @@ func ValidateTLSBootstrapping(ctx context.Context, s *Scenario) {
 	}
 }
 
+func validateTLSBootstrappingWindows(ctx context.Context, s *Scenario) {
+
+}
+
 func validateKubeletClientCSRCreatedBySecureTLSBootstrapping(ctx context.Context, s *Scenario) {
 	kubeletClientCSRs, err := s.Runtime.Cluster.Kube.Typed.CertificatesV1().CertificateSigningRequests().List(ctx, metav1.ListOptions{
 		FieldSelector: fmt.Sprintf("spec.signerName=%s", certv1.KubeAPIServerClientKubeletSignerName),