Audit logs should show roles

[klizhentas]

Description

The audit log of the user success full login should show the roles
of the user to simplify troubleshooting

[klizhentas]

Also, K8s proxy should log audit requests with all requests to the API server.

[klizhentas]

Also, see zendesk ticket #411 that asks to include claims/attribute statements to the audit log:

Whenever user is using SAML/OIDC and the RBAC fails to map claims to roles, audit log error looks like this:

{"error":"unable to map claims to role for connector: <connector>","event":"user.login","method":"oidc","success":false,"time":"2019-01-03T16:30:11Z"}

But what would be really useful is to see what claims are being sent
I cant really guide someone here other than saying, its configured wrong with no more info
I know its right, but convincing other teams tend to not believe it with out seeing it

Suggestesd solution is to add claims sent by the SAML/OIDC identity provider to the audit log