Create a certificate signing request (CSR)

You want to create a certificate signing request (CSR) as well as retrieve it while authorizing a kubelet.

Which of these Clusterroles can be used for doing so?

Options

1. system:node-bootstrapper
2. system:node-region
3. system:node-diff
4. system:node-clustergroup