diff --git a/pkg/kubelet/util/csr/csr.go b/pkg/kubelet/util/csr/csr.go
index 5c2fb8549f7..7ccf581b31f 100644
--- a/pkg/kubelet/util/csr/csr.go
+++ b/pkg/kubelet/util/csr/csr.go
@@ -124,6 +124,8 @@ func requestCertificate(client certificatesclient.CertificateSigningRequestInter
 		func(event watch.Event) (bool, error) {
 			switch event.Type {
 			case watch.Modified, watch.Added:
+			case watch.Deleted:
+				return false, fmt.Errorf("csr %q was deleted", csr.Name)
 			default:
 				return false, nil
 			}