Revert "Revert "[asadiqbal08/ENT-322] Add 'enterprise_worker' user to LMS user provisioning""

Author: Douglas Hall

CHANGELOG.md

@@ -1,3 +1,6 @@
+- Role: edxapp
+  - Added creation of enterprise_worker user to provisioning. This user is used by the edx-enterprise package when making API requests to Open edX IDAs.
+
 - Role: neo4j
   - Increase heap and page caches sizes for neo4j
 

playbooks/roles/common_vars/defaults/main.yml

@@ -221,3 +221,5 @@ COMMON_JWT_AUDIENCE: 'SET-ME-PLEASE'
 COMMON_JWT_ISSUER: '{{ COMMON_OIDC_ISSUER }}'
 COMMON_JWT_SECRET_KEY: 'SET-ME-PLEASE'
 
+# Set worker user default
+CREATE_SERVICE_WORKER_USERS: True

playbooks/roles/edxapp/defaults/main.yml

@@ -693,6 +693,7 @@ EDXAPP_BLOCK_STRUCTURES_SETTINGS:
 # Configuration settings needed for the LMS to communicate with the Enterprise service.
 EDXAPP_ENTERPRISE_API_URL: "{{ EDXAPP_LMS_ROOT_URL }}/enterprise/api/v1"
 
+EDXAPP_ENTERPRISE_SERVICE_WORKER_EMAIL: "[email protected]"
 EDXAPP_ENTERPRISE_SERVICE_WORKER_USERNAME: "enterprise_worker"
 
 EDXAPP_ENTERPRISE_COURSE_ENROLLMENT_AUDIT_MODES:
@@ -1304,3 +1305,10 @@ edxapp_cms_variant: cms
 
 # Worker Settings
 worker_django_settings_module: '{{ EDXAPP_SETTINGS }}'
+
+# Add default service worker users
+SERVICE_WORKER_USERS:
+  - email: "{{ EDXAPP_ENTERPRISE_SERVICE_WORKER_EMAIL }}"
+    username: "{{ EDXAPP_ENTERPRISE_SERVICE_WORKER_USERNAME }}"
+    is_staff: true
+    is_superuser: false

playbooks/roles/edxapp/tasks/deploy.yml

@@ -417,3 +417,22 @@
   become_user: "{{ common_web_user }}"
   tags:
     - manage
+
+- name: build service worker users list
+  set_fact:
+    service_worker_users: "{{ [SERVICE_WORKER_USERS] }}"
+  when: CREATE_SERVICE_WORKER_USERS
+  tags:
+    - manage
+    - manage:db
+
+- name: create service worker users
+  shell: "{{ edxapp_venv_bin }}/python ./manage.py lms --settings={{ edxapp_settings }} --service-variant lms manage_user {{ item.username}} {{ item.email }} --unusable-password {% if item.is_staff %} --staff{% endif %}"
+  args:
+    chdir: "{{ edxapp_code_dir }}"
+  become_user: "{{ common_web_user }}"
+  with_items: "{{ service_worker_users }}"
+  when: CREATE_SERVICE_WORKER_USERS
+  tags:
+    - manage
+    - manage:db