<p dir="auto">We need an e2e test that sets up a cluster using "standard" means and ensures that some users can do an action and other users cannot.</p>
<p dir="auto">Once authentication and authorization are firmly in place, we'll need to make sure that some later change does not inadvertently disable it.   Ideally, that would be an e2e test for GCE and maybe some other cloud providers that uses the actual binaries and network settings and defaults and salt config and all that jazz.  Exhaustive testing should go in unit tests and test/integration/auth_test.go  But a basic "alice can GET/PUT a pod and Bob can't" e2e test is needed.</p>