Create User Key and Cert #kubectl

csr.yml

apiVersion: certificates.k8s.io/v1
kind: CertificateSigningRequest
metadata:
  name: usercrt
spec:
  request: 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
  signerName: kubernetes.io/kube-apiserver-client
  expirationSeconds: 864000  # one day
  usages:
  - client auth

openssh-commands.sh

# Create key
openssl genrsa -out user.key 2048

#Create CSR
openssl req -new -key user.key -out user.csr -subj "/CN=user/O=group"

#Create base64 of
cat user.csr | base64 -w0