---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  # creationTimestamp: 2018-04-21T15:38:28Z
  name: kubelet-bootstrap
  resourceVersion: "865"
  selfLink: /apis/rbac.authorization.k8s.io/v1/clusterrolebindings/kubelet-bootstrap
  uid: 09c4dce4-457a-11e8-a23f-02f30e50fd6c
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: system:node-bootstrapper
subjects:
- apiGroup: rbac.authorization.k8s.io
  kind: User
  name: kubelet-bootstrap
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  # creationTimestamp: 2018-04-21T15:39:03Z
  name: node-client-auto-approve-csr
  resourceVersion: "894"
  selfLink: /apis/rbac.authorization.k8s.io/v1/clusterrolebindings/node-client-auto-approve-csr
  uid: 1e4f33e2-457a-11e8-bd37-025df1ab160e
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: system:certificates.k8s.io:certificatesigningrequests:nodeclient
subjects:
- apiGroup: rbac.authorization.k8s.io
  kind: Group
  name: system:node-bootstrapper
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  # creationTimestamp: 2018-04-21T15:39:24Z
  name: node-client-auto-renew-crt
  resourceVersion: "920"
  selfLink: /apis/rbac.authorization.k8s.io/v1/clusterrolebindings/node-client-auto-renew-crt
  uid: 2b181b87-457a-11e8-a23f-02f30e50fd6c
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: ClusterRole
  name: system:certificates.k8s.io:certificatesigningrequests:selfnodeclient
subjects:
- apiGroup: rbac.authorization.k8s.io
  kind: Group
  name: system:nodes

Add TLS bootstrapping rbac rules
Add TLS bootstrapping rbac rules
