code: func (idr *InitDryRunGetter) handleGetBootstrapToken(action core.GetAction) (bool, runtime.Object, error) {
  	if !strings.HasPrefix(action.GetName(), "bootstrap-token-") || action.GetNamespace() != metav1.NamespaceSystem || action.GetResource().Resource != "secrets" {
  		// We can't handle this event
  		return false, nil, nil
  	}
  	// We can safely return a NotFound error here as the code will just proceed normally and create the Bootstrap Token
  	return true, nil, apierrors.NewNotFound(action.GetResource().GroupResource(), "secret not found")
  }
docs: // handleGetBootstrapToken handles the case where kubeadm init creates the default token; and the token code GETs the
  // bootstrap token secret first in order to check if it already exists