code: func CreateOrUpdateRole(client clientset.Interface, role *rbac.Role) error {
  	if _, err := client.RbacV1().Roles(role.ObjectMeta.Namespace).Create(role); err != nil {
  		if !apierrors.IsAlreadyExists(err) {
  			return errors.Wrap(err, "unable to create RBAC role")
  		}
  
  		if _, err := client.RbacV1().Roles(role.ObjectMeta.Namespace).Update(role); err != nil {
  			return errors.Wrap(err, "unable to update RBAC role")
  		}
  	}
  	return nil
  }
docs: // CreateOrUpdateRole creates a Role if the target resource doesn't exist. If the resource exists already, this function will update the resource instead.