Recommend/create service account for geoipupdate

[pshiu]

Firm Name

2U

Urgency

Low (2 weeks)

Requested Change

May I request a recommendation for a GitHub (service) account for one of our bots to use to continue to refresh file GeoLite2-Country.mmdb in openedx/edx-platform?

I would need assistance getting the username, email, and a personal access token for that account, and in ensuring that the account and token has access to push commits and open/merge PRs in edx-platform.

Reasoning

• Bot purpose: We run a Jenkins job called "update-geoip-db" that refreshes the edx-platform file GeoLite2-Country.mmdb [example PR] using a script from openedx/ecommerce-scripts called geoipupdate/pull.py.
• Bot relevance: The path to this file is stored in an LMS setting called GEOIP_PATH, used by country_code_from_ip(), used in a couple places [GitHub search] across LMS.
• Why now? Our job is currently failing because it piggybacked on the edx-transifex-bot user, which was recently deprecated [public-engineering#225]
• How does the script auth? The script uses [transifex/utils.py] to authenticate with GitHub, which requires a GitHub personal access token to use.
• What permissions? The script will write commits, open PRs, and merge PRs in edx-platform.

[openedx-workflow-automation]

Thank you for your report! @openedx/axim-oncall will triage within a business day. Simple requests usually take 2-3 business days to resolve; more complex requests could take longer.

[pshiu]

cc: @robrap

[bmtcril]

Hi @pshiu, we're kicking around the best way to go about keeping this job around. I'm currently leaning toward moving it to a Github action and bringing the code into edx-platform. Are there other repos using it that you know of?

[bmtcril]

@feanil this seems like a bigger issue than on-call, if we wanted to bring this code into edx-platform in a way similar to the tubular migration, then create a github action for it, do you think that's work aximprovements could pick up?

[pshiu]

Hey @bmtcril! The only repo it runs on is edx-platform. No particular rush on this one - thank you.

[bmtcril]

Hi @openedx/axim-aximprovements ! I spoke with @feanil about this task and I think it's too big for us to handle as an on-call ticket. Can you take a look and let me know if you have any questions? I believe the work here is:

• Move the scripts from ecommerce-scripts to edx-platform similar to the tubular work
• Create a bot user with permissions to create PRs against edx-platform
• Get credentials from maxmind to access the GeoIP web service and store them in the github secrets for edx-platform
• Create a github action to run weekly that will download the new file and open a PR if there are any changes

This isn't super urgent, but shouldn't sit longer than a few weeks. Thanks!

[arbrandes]

Removing github-request label since this won't be handled by on-call.

[farhan]

Adding details as per discussed with @feanil
We have to convert the following script into Github Actions workflow rather than calling the script.
https://github.com/openedx/ecommerce-scripts/blob/master/geoipupdate/pull.py

[feanil]

This is now a github workflow running monthly. https://github.com/openedx/edx-platform/blob/master/.github/workflows/update-geolite-database.yml

[farhan]

@feanil Shouldn't we remove these docs from its repo now? Follow up ticket?
https://edx.readthedocs.io/projects/edx-installing-configuring-and-running/en/latest/configuration/user_retire/index.html