Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

EVG-7427: add user manager for service users #3219

Merged

Conversation

Kimchelly
Copy link
Contributor

@Kimchelly Kimchelly commented Feb 26, 2020

JIRA: https://jira.mongodb.org/browse/EVG-7427

This is the first part of making evergreen support both service users who can use the API and regular users who use Okta. The second part will allow you to combine user managers. I'm assuming the set of service accounts we need is so small that it doesn't really matter if we manually populate the service account username, API key, and roles.

Another thing we could try for the rollout is enabling Okta, OpenDJ LDAP, and the service user manager so that the migration doesn't go as painfully.

  • Add settings for API-only auth users (similar to naive user manager but can only access the API and can't log into the UI).
  • Connect with BasicUserManager. They can't use login cookies, so things like GetUserByToken and CreateUserToken won't work, so they can't use the UI. However, getting the user by ID and verifying their API key will work, so they can access the API.

config_auth.go Outdated Show resolved Hide resolved
config_auth.go Outdated Show resolved Hide resolved
@Kimchelly Kimchelly merged commit a720092 into evergreen-ci:master Feb 28, 2020
@Kimchelly Kimchelly deleted the EVG-7427_service_user_manager branch February 28, 2020 12:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants