diff --git a/k8s/csr.yaml b/k8s/csr.yaml
new file mode 100644
index 0000000..f992cdc
--- /dev/null
+++ b/k8s/csr.yaml
@@ -0,0 +1,13 @@
+apiVersion: certificates.k8s.io/v1
+kind: CertificateSigningRequest
+metadata:
+  name: NAME
+spec:
+  signerName: kubernetes.io/kube-apiserver-client
+  groups:
+    - system:authenticated
+  request: BASE64_CSR
+  usages:
+    - digital signature
+    - key encipherment
+    - client auth
\ No newline at end of file