code: func (c *Client) ProcessKubeCSR(req KubeCSR) (*KubeCSRResponse, error) {
  	if err := req.CheckAndSetDefaults(); err != nil {
  		return nil, trace.Wrap(err)
  	}
  	out, err := c.PostJSON(c.Endpoint("kube", "csr"), req)
  	if err != nil {
  		return nil, trace.Wrap(err)
  	}
  	var re KubeCSRResponse
  	if err := json.Unmarshal(out.Bytes(), &re); err != nil {
  		return nil, trace.Wrap(err)
  	}
  	return &re, nil
  }
docs: // ProcessKubeCSR processes CSR request against Kubernetes CA, returns
  // signed certificate if sucessful.