From 18a54f0a409b0a32e8fa03b7ff7db170507f62dd Mon Sep 17 00:00:00 2001
From: Jens-Uwe Walther <waltju@amazon.com>
Date: Mon, 9 Feb 2026 21:12:39 +0100
Subject: [PATCH] Add CertificateSigningRequest create log entry for default
 kubelet debug level V2

Kubernetes-commit: b7bd70192397c5d52c18a5f85e87cec66ccc9a9f
---
 util/certificate/csr/csr.go | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/util/certificate/csr/csr.go b/util/certificate/csr/csr.go
index 6f99dcd24..6b0efff06 100644
--- a/util/certificate/csr/csr.go
+++ b/util/certificate/csr/csr.go
@@ -78,13 +78,15 @@ func RequestCertificateWithContext(ctx context.Context, client clientset.Interfa
 		csr.Spec.ExpirationSeconds = DurationToExpirationSeconds(*requestedDuration)
 	}
 
+	logger := klog.FromContext(ctx)
+
 	reqName, reqUID, err = create(ctx, client, csr)
 	switch {
 	case err == nil:
+		logger.V(2).Info("Certificate signing request created", "csr", reqName)
 		return reqName, reqUID, err
 
 	case apierrors.IsAlreadyExists(err) && len(name) > 0:
-		logger := klog.FromContext(ctx)
 		logger.Info("csr for this node already exists, reusing")
 		req, err := get(ctx, client, name)
 		if err != nil {