Signed-off-by: Margo Crawford <margaretc@vmware.com>
Reflect the upstream group membership into the Supervisor's downstream tokens, so they can be added to the user's identity on the workload clusters. LDAP group search is configurable on the LDAPIdentityProvider resource.
Signed-off-by: Andrew Keesler <akeesler@vmware.com>