Use system users, that are provided via env variable

Description

Purpose/Overview:

Tenant and module users (aka system users) should be created on adding of new tenant and should hidden from the users app to reduce the risk of being accidentally changed/removed/etc.

Requirements/Scope:

  1. The user shouldn't be created on postTenant, but the existing user should be used

  2. Name of the user should be the same as the module name

  3. Password should be taken from store variable (the same as it is implemented in edge-common). The name of the variable should be $environment_$tenantId_$moduleName. The envPrefix is the same, that is used for Kafka.

  4. The credentials for AWS Param store will be provided via environment variables (namely client_idclient_secretregion)

  5. If the parameters are not provided the module start should fail

  6. The required permissions must be updated for the system user during application deployment

Acceptance criteria:

  • System user, that created by script is used

Environment

None

Potential Workaround

None

CSP Request Details

None

CSP Rejection Details

None

CSP Approved

None

Checklist

hide

TestRail: Results

Activity

Show:

Pavlo SmahinMarch 10, 2025 at 1:06 PM

On the Eureka platform, there is no need to pass system-user via env variable, as it is defined in module descriptor and covered by sidecar. The issue is outdated.

Pavlo SmahinOctober 17, 2023 at 4:25 PM

I think this is on the SA side. 
, is there still a plan to implement this functionality?

Khalilah GambrellOctober 17, 2023 at 4:07 PM

Hey   and   - what should we do with this ticket?

Natalia ZaitsevaJanuary 10, 2022 at 4:40 PM

This ticket is depending on the complex solution that needs to be applied for the whole FOLIO project. For this purpose following tickets need to be completed first (the list of the tickets might be updated)

For the current moment, till we have an agreement for the system user approach for the whole FOLIO, there is nothing that the Falcon team can help with. The PR for mod-search is created and can be used anytime.
We will move this ticket into the backlog and revise it one more time once the solution is defined and all related stories are resolved.

Mikhail FokanovJanuary 10, 2022 at 10:03 AM

 have concerns regarding the implementation approach, so this Jira should be removed from Sprint, because the new approach is under active discussion.

Won't Do

Details

Assignee

Reporter

Priority

Sprint

Development Team

Spitfire

TestRail: Cases

Open TestRail: Cases

TestRail: Runs

Open TestRail: Runs

Created August 10, 2021 at 11:51 AM
Updated March 10, 2025 at 1:06 PM
Resolved March 10, 2025 at 1:06 PM
TestRail: Cases
TestRail: Runs