1. Create a selfsigned issuer 2. Create a CA certificate using the selfsigned issuer. Make sure the algorithm used in ECDSA 3. Create an issuer from the above generated CA 4. Use CSI driver Using `openssl s_client -connect`, its observed that the key is RSA while the cert is ECDSA [openssl s_client -connect](a:PKEY: **rsaEncryption**, 2048 (bit); sigalg: **ecdsa-with-SHA256**) The CSI driver should create the key as the issuer which is ecdsa in this case