To generate a key file
openssl genrsa -out adam.key 2048
To generate a csr file
openssl req -new -key adam.key -out adam.csr -subj "/CN=adam"
To approve a csr
kubectl certificate approve <certificate-signing-request-name>
To deny a csr
kubectl certificate deny <certificate-signing-request-name>
Below document can also be referred