Support for root certificate rotation via CLI

Makefile

@@ -42,6 +42,7 @@ endif
 LDFLAGS ?= "-X $(BUILD_DATE_VAR)=$(BUILD_DATE) -X $(BUILD_VERSION_VAR)=$(VERSION) -X $(BUILD_GITCOMMIT_VAR)=$(GIT_SHA) -s -w"
 
 # These two values are combined and passed to go test
+GO_TEST_FLAGS ?= 
 E2E_FLAGS ?= -installType=KindCluster
 E2E_FLAGS_DEFAULT := -test.v -ginkgo.v -ginkgo.progress -ctrRegistry $(CTR_REGISTRY) -osmImageTag $(CTR_TAG)
 
@@ -152,7 +153,7 @@ kind-reset:
 .PHONY: test-e2e
 test-e2e: DOCKER_BUILDX_OUTPUT=type=docker
 test-e2e: docker-build-osm build-osm docker-build-tcp-echo-server
-	go test ./tests/e2e $(E2E_FLAGS_DEFAULT) $(E2E_FLAGS)
+	go test $(GO_TEST_FLAGS) ./tests/e2e $(E2E_FLAGS_DEFAULT) $(E2E_FLAGS)
 
 .env:
 	cp .env.example .env

cmd/cli/alpha.go

@@ -0,0 +1,26 @@
+package main
+
+import (
+	"fmt"
+	"io"
+
+	"github.com/spf13/cobra"
+)
+
+const alphaDescription = `
+This command consists of multiple subcommands related that are in alpha.
+`
+
+func newAlphaCmd(out io.Writer) *cobra.Command {
+	cmd := &cobra.Command{
+		Use:   "alpha",
+		Short: "commands that are in alpha",
+		Long:  alphaDescription,
+		Args:  cobra.NoArgs,
+		PersistentPreRun: func(cmd *cobra.Command, args []string) {
+			fmt.Fprintf(out, "*** This command is in Preview.  Only run in dev/test environments ***\n")
+		},
+	}
+	cmd.AddCommand(newCertificateCmd(out))
+	return cmd
+}

cmd/cli/certificate.go

@@ -0,0 +1,24 @@
+package main
+
+import (
+	"io"
+
+	"github.com/spf13/cobra"
+)
+
+const certificateDescription = `
+This command consists of multiple subcommands related to managing certificates
+associated with osm installations.
+`
+
+func newCertificateCmd(out io.Writer) *cobra.Command {
+	cmd := &cobra.Command{
+		Use:     "certificate",
+		Short:   "commands for managing MeshRootCertificates",
+		Aliases: []string{"mrc"},
+		Long:    certificateDescription,
+		Args:    cobra.NoArgs,
+	}
+	cmd.AddCommand(newCertificateRotateCmd(out))
+	return cmd
+}