What's the recommended pattern for getting the certificate out of

certificates.NewCertificateSigningRequest(

?

DependsOn

doesn't wait for the CSR to be approved or denied. I can think of two patterns to use: 1. Poll the status of the CSR until it has been manually approved or denied. Then return the certificate if approved. 2. Use kubernetes SDK to automatically approve CSR and then return the certificate.