code: func AutoApproveNodeBootstrapTokens(client clientset.Interface) error {
  	fmt.Println("[bootstrap-token] configured RBAC rules to allow the csrapprover controller automatically approve CSRs from a Node Bootstrap Token")
  
  	// Always create this kubeadm-specific binding though
  	return apiclient.CreateOrUpdateClusterRoleBinding(client, &rbac.ClusterRoleBinding{
  		ObjectMeta: metav1.ObjectMeta{
  			Name: NodeAutoApproveBootstrapClusterRoleBinding,
  		},
  		RoleRef: rbac.RoleRef{
  			APIGroup: rbac.GroupName,
  			Kind:     "ClusterRole",
  			Name:     CSRAutoApprovalClusterRoleName,
  		},
  		Subjects: []rbac.Subject{
  			{
  				Kind: "Group",
  				Name: constants.NodeBootstrapTokenAuthGroup,
  			},
  		},
  	})
  }
docs: // AutoApproveNodeBootstrapTokens creates RBAC rules in a way that makes Node Bootstrap Tokens' CSR auto-approved by the csrapprover controller