code: func (r *NodeAuthorizer) authorizeStatusUpdate(nodeName string, startingType vertexType, attrs authorizer.Attributes) (authorizer.Decision, string, error) {
  	switch attrs.GetVerb() {
  	case "update", "patch":
  		// ok
  	default:
  		klog.V(2).Infof("NODE DENY: %s %#v", nodeName, attrs)
  		return authorizer.DecisionNoOpinion, "can only get/update/patch this type", nil
  	}
  
  	if attrs.GetSubresource() != "status" {
  		klog.V(2).Infof("NODE DENY: %s %#v", nodeName, attrs)
  		return authorizer.DecisionNoOpinion, "can only update status subresource", nil
  	}
  
  	return r.authorize(nodeName, startingType, attrs)
  }
docs: // authorizeStatusUpdate authorizes get/update/patch requests to status subresources of the specified type if they are related to the specified node