code: func AutoApproveNodeCertificateRotation(client clientset.Interface) error {
  	fmt.Println("[bootstrap-token] configured RBAC rules to allow certificate rotation for all node client certificates in the cluster")
  
  	return apiclient.CreateOrUpdateClusterRoleBinding(client, &rbac.ClusterRoleBinding{
  		ObjectMeta: metav1.ObjectMeta{
  			Name: NodeAutoApproveCertificateRotationClusterRoleBinding,
  		},
  		RoleRef: rbac.RoleRef{
  			APIGroup: rbac.GroupName,
  			Kind:     "ClusterRole",
  			Name:     NodeSelfCSRAutoApprovalClusterRoleName,
  		},
  		Subjects: []rbac.Subject{
  			{
  				Kind: "Group",
  				Name: constants.NodesGroup,
  			},
  		},
  	})
  }
docs: // AutoApproveNodeCertificateRotation creates RBAC rules in a way that makes Node certificate rotation CSR auto-approved by the csrapprover controller