@@ -55,5 +55,16 @@ var Funcs = func(codecs runtimeserializer.CodecFactory) []interface{} {
 				s.Spec.Duration = &metav1.Duration{Duration: v1.DefaultCertificateDuration}
 			}
 		},
+		func(s *certmanager.VenafiCloud, c fuzz.Continue) {
+			c.FuzzNoCustom(s) // fuzz self without calling this function again
+			// Match defaulting
+			if s.URL == "" {
+				s.URL = v1.DefaultVenafiCloudURL
+			}
+			// Match defaulting
+			if s.APITokenSecretRef.Key == "" {
+				s.APITokenSecretRef.Key = v1.DefaultVenafiCloudAPITokenSecretRefKey
+			}
+		},
 	}...)
 }
/*
Copyright 2019 The Jetstack cert-manager contributors.

Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at

    http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software
distributed under the License is distributed on an "AS IS" BASIS,
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and
limitations under the License.
*/

package fuzzer

import (
	fuzz "github.com/google/gofuzz"
	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
	runtimeserializer "k8s.io/apimachinery/pkg/runtime/serializer"

	"github.com/jetstack/cert-manager/pkg/apis/certmanager/v1"
	acmefuzzer "github.com/jetstack/cert-manager/pkg/internal/apis/acme/fuzzer"
	"github.com/jetstack/cert-manager/pkg/internal/apis/certmanager"
)

// Funcs returns the fuzzer functions for the apps api group.
var Funcs = func(codecs runtimeserializer.CodecFactory) []interface{} {
	return append(acmefuzzer.Funcs(codecs), []interface{}{
		func(s *certmanager.Certificate, c fuzz.Continue) {
			c.FuzzNoCustom(s) // fuzz self without calling this function again

			if len(s.Spec.DNSNames) == 0 {
				s.Spec.DNSNames = []string{s.Spec.CommonName}
			}
			if s.Spec.IssuerRef.Kind == "" {
				s.Spec.IssuerRef.Kind = v1.IssuerKind
			}
			if s.Spec.Duration == nil {
				s.Spec.Duration = &metav1.Duration{Duration: v1.DefaultCertificateDuration}
			}
			if s.Spec.RenewBefore == nil {
				s.Spec.RenewBefore = &metav1.Duration{Duration: v1.DefaultRenewBefore}
			}
		},
		func(s *certmanager.CertificateRequest, c fuzz.Continue) {
			c.FuzzNoCustom(s) // fuzz self without calling this function again

			if s.Spec.IssuerRef.Kind == "" {
				s.Spec.IssuerRef.Kind = v1.IssuerKind
			}
			if s.Spec.Duration == nil {
				s.Spec.Duration = &metav1.Duration{Duration: v1.DefaultCertificateDuration}
			}
		},
	}...)
}

The defaults have to be also applied here otherwise the rountrip tests that use fuzzer will occasionally fail when they produce a fuzzed resource where the defaulted fields are empty. I considered simply calling the defaulting functions in here, but instead followed the Kubernetes convention of duplicating the defaulting logic in the fuzzer overrides....I'm not sure why they do it this way.