code: func NewCSR(certSpec *KubeadmCert, cfg *kubeadmapi.InitConfiguration) (*x509.CertificateRequest, crypto.Signer, error) {
  	certConfig, err := certSpec.GetConfig(cfg)
  	if err != nil {
  		return nil, nil, errors.Wrap(err, "failed to retrieve cert configuration")
  	}
  
  	return pkiutil.NewCSRAndKey(certConfig)
  }
docs: // NewCSR will generate a new CSR and accompanying key