Kubernetes Certificates

apiVersion: certificates.k8s.io/v1beta1
kind: CertificateSigningRequest
metadata:
  name: john
spec:
  groups:
    - system:authenticated
  request: { { file john.csr | b64enc } }
  usages:
    - client auth