This is a service running in openshift that is reverse proxied through soko01. It was designed to replace the manual process of lab user creation.

1. New users register via theportal
2. A magic link is sent to the user
   1. Users with @ibm.com or @redhat.com are automatically approved upon clicking the link
   2. Users without those domains must specify a sponsor
      1. A sponsor must either be an existing lab user or have an @ibm.com or @redhat.com e-mail address
      2. Sponsors also receive a magic link and must click to approve
      3. A Lab Admin must still approve in the admin portal.
3. Once all approvals are reached,
   1. The service opens a PR in the keys repo which gets automatically merged
   2. The service also opens a PR in the secrets repo which gets automatically merged
   3. The service runs the Wireguard role against soko01 to add their key
   4. The service runs the users role to create their user account on soko04
   5. The service e-mails the user's Wireguard IP address to them

1. Existing users register via this page
2. A magic link is sent to the user
   1. If the user approves, all of the same PRs are opened, merged, and keys are pushed via ansible
   2. If the user denies, information (IP address, timestamps, etc.) about the attempt are e-mailed to infra@ceph.io