feat(auth): Add the workflow's creator as a label. Closes #2437

api/openapi-spec/swagger.json

@@ -2705,6 +2705,14 @@
         }
       }
     },
+    "io.argoproj.workflow.v1alpha1.User": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string"
+        }
+      }
+    },
     "io.argoproj.workflow.v1alpha1.UserContainer": {
       "description": "UserContainer is a container specified by a user.",
       "type": "object",
@@ -3133,6 +3141,9 @@
         },
         "managedNamespace": {
           "type": "string"
+        },
+        "user": {
+          "$ref": "#/definitions/io.argoproj.workflow.v1alpha1.User"
         }
       }
     },

cmd/argo/commands/client/conn.go

@@ -2,13 +2,17 @@ package client
 
 import (
 	"context"
+	"fmt"
 	"os"
+	"os/user"
 
+	"github.com/argoproj/pkg/errors"
 	log "github.com/sirupsen/logrus"
 	"github.com/spf13/cobra"
 	"k8s.io/client-go/tools/clientcmd"
 
 	"github.com/argoproj/argo/pkg/apiclient"
+	wfv1 "github.com/argoproj/argo/pkg/apis/workflow/v1alpha1"
 	"github.com/argoproj/argo/util/kubeconfig"
 )
 
@@ -52,6 +56,12 @@ func Namespace() string {
 	return namespace
 }
 
+func GetUser() wfv1.User {
+	current, err := user.Current()
+	errors.CheckError(err)
+	return wfv1.User{Name: current.Username}
+}
+
 func GetAuthString() string {
 	restConfig, err := Config.ClientConfig()
 	if err != nil {
@@ -61,5 +71,5 @@ func GetAuthString() string {
 	if err != nil {
 		log.Fatal(err)
 	}
-	return authString
+	return fmt.Sprintf("v2/%s/%s", authString, GetUser().Name)
 }

cmd/argo/commands/server.go

@@ -14,6 +14,7 @@ import (
 	_ "k8s.io/client-go/plugin/pkg/client/auth"
 
 	"github.com/argoproj/argo/cmd/argo/commands/client"
+	wfv1 "github.com/argoproj/argo/pkg/apis/workflow/v1alpha1"
 	wfclientset "github.com/argoproj/argo/pkg/client/clientset/versioned"
 	"github.com/argoproj/argo/server/apiserver"
 	"github.com/argoproj/argo/util/help"
@@ -68,13 +69,13 @@ See %s`, help.ArgoSever),
 				"managedNamespace": managedNamespace,
 				"baseHRef":         baseHRef}).
 				Info()
-
 			opts := apiserver.ArgoServerOpts{
 				BaseHRef:         baseHRef,
 				Namespace:        namespace,
 				WfClientSet:      wflientset,
 				KubeClientset:    kubeConfig,
 				RestConfig:       config,
+				User:             wfv1.NullUser,
 				AuthMode:         authMode,
 				ManagedNamespace: managedNamespace,
 				ConfigName:       configMap,

pkg/apiclient/apiclient.go

@@ -19,6 +19,7 @@ type Client interface {
 }
 
 func NewClient(argoServer string, authSupplier func() string, clientConfig clientcmd.ClientConfig) (context.Context, Client, error) {
+
 	if argoServer != "" {
 		return newArgoServerClient(argoServer, authSupplier())
 	} else {

pkg/apiclient/argo-kube-client.go

@@ -3,6 +3,7 @@ package apiclient
 import (
 	"context"
 	"fmt"
+	"os/user"
 
 	"k8s.io/client-go/kubernetes"
 	"k8s.io/client-go/tools/clientcmd"
@@ -12,6 +13,7 @@ import (
 	workflowpkg "github.com/argoproj/argo/pkg/apiclient/workflow"
 	workflowarchivepkg "github.com/argoproj/argo/pkg/apiclient/workflowarchive"
 	"github.com/argoproj/argo/pkg/apiclient/workflowtemplate"
+	wfv1 "github.com/argoproj/argo/pkg/apis/workflow/v1alpha1"
 	"github.com/argoproj/argo/pkg/client/clientset/versioned"
 	"github.com/argoproj/argo/server/auth"
 	cronworkflowserver "github.com/argoproj/argo/server/cronworkflow"
@@ -38,7 +40,11 @@ func newArgoKubeClient(clientConfig clientcmd.ClientConfig) (context.Context, Cl
 	if err != nil {
 		return nil, nil, err
 	}
-	gatekeeper := auth.NewGatekeeper(auth.Server, wfClient, kubeClient, restConfig)
+	current, err := user.Current()
+	if err != nil {
+		return nil, nil, err
+	}
+	gatekeeper := auth.NewGatekeeper(auth.Server, wfClient, kubeClient, restConfig, wfv1.User{Name: current.Name})
 	ctx, err := gatekeeper.Context(context.Background())
 	if err != nil {
 		return nil, nil, err

pkg/apiclient/info/info.proto

@@ -15,6 +15,7 @@ message GetInfoRequest {
 message InfoResponse {
     string managedNamespace = 1;
     repeated github.com.argoproj.argo.pkg.apis.workflow.v1alpha1.Link links = 2;
+    github.com.argoproj.argo.pkg.apis.workflow.v1alpha1.User user = 3;
 }
 
 service InfoService {

pkg/apiclient/info/info.swagger.json

@@ -47,6 +47,14 @@
       },
       "title": "A link to another app.\n+patchStrategy=merge\n+patchMergeKey=name"
     },
+    "github.com.argoproj.argo.pkg.apis.workflow.v1alpha1.User": {
+      "type": "object",
+      "properties": {
+        "name": {
+          "type": "string"
+        }
+      }
+    },
     "info.InfoResponse": {
       "type": "object",
       "properties": {
@@ -58,6 +66,9 @@
           "items": {
             "$ref": "#/definitions/github.com.argoproj.argo.pkg.apis.workflow.v1alpha1.Link"
           }
+        },
+        "user": {
+          "$ref": "#/definitions/github.com.argoproj.argo.pkg.apis.workflow.v1alpha1.User"
         }
       }
     }