diff --git a/pki/.gitignore b/pki/.gitignore
index 6d26d494..e24607da 100644
--- a/pki/.gitignore
+++ b/pki/.gitignore
@@ -1,3 +1,2 @@
 *csr
 *pem
-*json
diff --git a/pki/ca_config.json b/pki/ca_config.json
new file mode 100644
index 00000000..113a08f6
--- /dev/null
+++ b/pki/ca_config.json
@@ -0,0 +1,13 @@
+{
+  "signing": {
+    "default": {
+      "expiry": "8760h"
+    },
+    "profiles": {
+      "test": {
+        "usages": ["signing", "key encipherment", "server auth", "client auth"],
+        "expiry": "8760h"
+      }
+    }
+  }
+}
diff --git a/pki/ca_csr.json b/pki/ca_csr.json
new file mode 100644
index 00000000..b24c6380
--- /dev/null
+++ b/pki/ca_csr.json
@@ -0,0 +1,11 @@
+{
+    "names": [
+        {
+            "C":  "US",
+            "L":  "San Francisco",
+            "O":  "Internet Widgets, Inc.",
+            "OU": "WWW",
+            "ST": "California"
+        }
+    ]
+}
diff --git a/pki/client_csr.json b/pki/client_csr.json
new file mode 100644
index 00000000..26fc0415
--- /dev/null
+++ b/pki/client_csr.json
@@ -0,0 +1,12 @@
+{
+    "CN": "developer.humans.svc.cluster.local",
+    "names": [
+        {
+            "C":  "US",
+            "L":  "San Francisco",
+            "O":  "Internet Widgets, Inc.",
+            "OU": "WWW",
+            "ST": "California"
+        }
+    ]
+}
diff --git a/pki/service_csr.json b/pki/service_csr.json
new file mode 100644
index 00000000..72c910eb
--- /dev/null
+++ b/pki/service_csr.json
@@ -0,0 +1,12 @@
+{
+    "CN": "test.arista-proxy.svc.cluster.local",
+    "names": [
+        {
+            "C":  "US",
+            "L":  "San Francisco",
+            "O":  "Internet Widgets, Inc.",
+            "OU": "WWW",
+            "ST": "California"
+        }
+    ]
+}