EVG-7427: add user manager for service users #3219
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
JIRA: https://jira.mongodb.org/browse/EVG-7427
This is the first part of making evergreen support both service users who can use the API and regular users who use Okta. The second part will allow you to combine user managers. I'm assuming the set of service accounts we need is so small that it doesn't really matter if we manually populate the service account username, API key, and roles.
Another thing we could try for the rollout is enabling Okta, OpenDJ LDAP, and the service user manager so that the migration doesn't go as painfully.
GetUserByToken
andCreateUserToken
won't work, so they can't use the UI. However, getting the user by ID and verifying their API key will work, so they can access the API.