apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
name: {{ csr_name }}
spec:
request: {{ encoded_csr }}
signerName: kubernetes.io/kube-apiserver-client
expirationSeconds: 315360000 # ten years
usages:
- client auth