@@ -18,6 +18,7 @@ import (

 	"github.com/AaronO/go-git-http/auth"

 	"github.com/prometheus/client_golang/prometheus"

+	"k8s.io/kubernetes/pkg/api/errors"

 	"k8s.io/kubernetes/pkg/client/unversioned/clientcmd"

 	"k8s.io/kubernetes/pkg/healthz"

@@ -107,6 +108,14 @@ type Clone struct {

 	Hooks map[string]string

 }

+type statusError struct {

+	*errors.StatusError

+}

+

+func (e *statusError) StatusCode() int {

+	return e.StatusError.Status().Code

+}

+

 // NewDefaultConfig returns a default server config.

 func NewDefaultConfig() *Config {

 	return &Config{

@@ -214,6 +223,9 @@ func NewEnviromentConfig() (*Config, error) {

 			}

 			res, err := osc.ImpersonateLocalSubjectAccessReviews(namespace, info.Password).Create(req)

 			if err != nil {

+				if se, ok := err.(*errors.StatusError); ok {

+					return false, &statusError{se}

+				}

 				return false, err

 			}

 			//log.Printf("debug: server response allowed=%t message=%s", res.Allowed, res.Reason)