code: func ForNode(cfg Config) Config {
  	cfg.Watches = []services.WatchKind{
  		{Kind: services.KindCertAuthority, LoadSecrets: false},
  		{Kind: services.KindClusterName},
  		{Kind: services.KindClusterConfig},
  		{Kind: services.KindUser},
  		{Kind: services.KindRole},
  		// Node only needs to "know" about default
  		// namespace events to avoid matching too much
  		// data about other namespaces or node events
  		{Kind: services.KindNamespace, Name: defaults.Namespace},
  	}
  	cfg.QueueSize = defaults.NodeQueueSize
  	return cfg
  }
docs: // ForNode sets up watch configuration for node