code: func AllowBootstrapTokensToPostCSRs(client clientset.Interface) error {
  	fmt.Println("[bootstrap-token] configured RBAC rules to allow Node Bootstrap tokens to post CSRs in order for nodes to get long term certificate credentials")
  
  	return apiclient.CreateOrUpdateClusterRoleBinding(client, &rbac.ClusterRoleBinding{
  		ObjectMeta: metav1.ObjectMeta{
  			Name: NodeKubeletBootstrap,
  		},
  		RoleRef: rbac.RoleRef{
  			APIGroup: rbac.GroupName,
  			Kind:     "ClusterRole",
  			Name:     NodeBootstrapperClusterRoleName,
  		},
  		Subjects: []rbac.Subject{
  			{
  				Kind: rbac.GroupKind,
  				Name: constants.NodeBootstrapTokenAuthGroup,
  			},
  		},
  	})
  }
docs: // AllowBootstrapTokensToPostCSRs creates RBAC rules in a way the makes Node Bootstrap Tokens able to post CSRs