We now have means in worker manager for all workers to be registered and have their credentials provided by Worker Manager. Doing this enables central control of the configs for all workers, not just workers running in clouds. This would make it easier to audit and administer configs of workers that are manually provisioned (“bring your own worker”) sitting on people’s desks, or manually configured in an environment without a worker manager provider (e.g. macstadium) or in a data center (Release Operations hardware, for example).

Once we have all workers registered with Worker Manager, we can make it a requirement, so that the Queue will not allow workers to claim tasks that are not registered via Worker Manager.

This bug represents goal G10 from the Worker Roadmap 2020.

I think this is a dupe of bug 1602946 -- that bug focuses on using worker-runner as that's the tricky bit, but in the comments describes using the "static" provider which means interacting with worker-manager.

Agreed!