openssl

• Create a new Private key:

  openssl genrsa -out some.key 2048

• Create a Certificate Signing Request (CSR):

  openssl new -req -key some.key -subj "/CN=Kubernetes-CA" -out some.csr`

• Sign a key:

  openssl x509 -in some.csr -signkey some.key -out some.crt