[Backport 2.x] Backport Service Accounts into 2.x

[RyanL1997]

Description

Backport Service Accounts into 2.x

• Category (Enhancement, New feature, Bug fix, Test fix, Refactoring, Maintenance, Documentation)
  New feature

Issues Resolved

• Resolve Backport Service Account into 2.x branch #3557

PRs:

• Relate Limit service account permission #3607
• Relate Add backend filtering for legacy internal user and service accounts #2786
• Relate Implement IdentityPlugin in Security plugin #3538
• Relate OnBehalfOf tokens odds and ends #3593

Check List

• New functionality includes testing
• New functionality has been documented
• Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[codecov]

Codecov Report

Merging #3639 (b5486a4) into 2.x (61bf6f0) will decrease coverage by 0.01%.
Report is 1 commits behind head on 2.x.
The diff coverage is 70.37%.

@@             Coverage Diff              @@
##                2.x    #3639      +/-   ##
============================================
- Coverage     64.78%   64.78%   -0.01%     
- Complexity     3593     3622      +29     
============================================
  Files           282      285       +3     
  Lines         20381    20496     +115     
  Branches       3373     3382       +9     
============================================
+ Hits          13204    13278      +74     
- Misses         5505     5535      +30     
- Partials       1672     1683      +11     

Files	Coverage Δ
...nsearch/security/http/OnBehalfOfAuthenticator.java	91.34% <100.00%> (+0.25%)	⬆️
...ecurityconf/impl/SecurityDynamicConfiguration.java	75.72% <100.00%> (+0.48%)	⬆️
...a/org/opensearch/security/user/UserFilterType.java	100.00% <100.00%> (ø)
...ecurity/configuration/ConfigurationRepository.java	73.91% <0.00%> (-2.18%)	⬇️
...c/main/java/org/opensearch/security/user/User.java	71.42% <50.00%> (-0.53%)	⬇️
.../opensearch/security/OpenSearchSecurityPlugin.java	84.44% <60.00%> (-0.26%)	⬇️
...ecurity/authtoken/jwt/ExpiringBearerAuthToken.java	75.00% <75.00%> (ø)
...search/security/identity/SecurityTokenManager.java	95.74% <95.74%> (ø)
...java/org/opensearch/security/user/UserService.java	56.71% <89.47%> (+5.85%)	⬆️
...security/dlic/rest/api/InternalUsersApiAction.java	81.41% <83.33%> (+3.96%)	⬆️
... and 4 more

... and 3 files with indirect coverage changes

[RyanL1997]

The failure of the CI is due to the stale of core artifact. The updated artifact of 2.x branch with opensearch-project/OpenSearch#11052 should make the CIs green.

[DarshitChanpura]

Error: eckstyle] [ERROR] /home/runner/work/security/security/src/main/java/org/opensearch/security/http/OnBehalfOfAuthenticator.java:51:1: Duplicate import to line 31 - io.jsonwebtoken.JwtParserBuilder. [RedundantImport]

Seems like there were duplicate imports in OnBehalfOfAuthenticator.java