New user/Unregistered user accessing TACC HPC system for first time causes error

[kks32]

A new user or an unregistered user (defined as someone who has not had their SSH keys copied to the TACC execution systems) running their first job through TAPIS causes an error.

JobSubmissionError: Tapis job submission failed: message: SYSTEMS_MISSING_CREDENTIALS There are no credentials associated with system stampede3 (stampede3.tacc.utexas.edu) for tenant designsafe. Set a default credential to access data on this system.
Request URL: https://designsafe.tapis.io/v3/jobs/submit
Request Method: POST

Adding context based on Slack message between Krishna and Steve Black (TACC/TAPIS)

Krishna: for a new user who has not logged in to stampede3 to be able to submit a job. What's the recommendation? Do I ask them to create a SSH key pair on stampede3 and then use tapis to register the ssh keys? or should I create the keys locally and use tapis to move it to ~/.ssh/authorized_keys? Our DS users don't necessarily have the skills to go on command line, they want to just use DesginSafe jupyter directly...

Steve: Good news is we have something called Trust Manager Service (TMS) that has recently
gone into production and been integrated into Tapis. Using TMS users will not need to provide any credentials directly.
Once a user has a Tapis JWT they can make a call to register ssh keys for a Tapis system. I'll keep you posted.

Steve: Using Tapis systems that are set up for TMS will be the simplest way to manage user credentials.
Users will not need to provide their own credentials, a single Tapis call will set them up.
I see that Tapis system stampede3 in the designsafe tenant is currently set up for ssh keys. It is owned by user wma_prtl,
though, and I believe next Tuesday the TACC portals group is planning to switch it to use TMS keys.
If necessary we can create new Tapis systems that are configured to use TMS.

Waiting on DesignSafe to have TMS.