migration-actions: User

[ppanero]

• [x] Register user
  • [x] local
  • [ ] GH Considered as OAuth client connect action
  • [ ] ORCID Considered as OAuth client connect action
  • AAI (Not implemented in Zenodo legacy)
• [x] Confirm user email: Treated as user update
• [x] Update user email
• [ ] Update user profile tackled in https://github.com/inveniosoftware/invenio-rdm-migrator/issues/126
• [x] Update password
• [x] New user login: Treated as user update
• [x] Misc - Automatic spam flagging (REST API)
• [x] Enable kcat (if not there yet). @slint was working on this, check status.

Note: user deletion will be frozen during migration. Therefore, is not a use case to take into account.

[slint]

For running kcat on the current infrastructure:

# TDLR: there's an alias for the QA environment named `kcat_qa`
# consume the first 10 messages from the "zenodo-migration.public" topic
kcat_qa -C -t "zenodo-migration.public" -c 10  

# Which does the following
KAFKA_BROKERS="kafka-broker-host1:9093,kafka-broker-host2:9093"
KRB_PRINCIPAL="<service-account-user>@CERN.CH"
KRB_KEYTAB="/path/to/<username>.keytab"

kcat \
    -b ${KAFKA_BROKERS} \
    -X security.protocol=SASL_SSL -X sasl.mechanism=GSSAPI -X sasl.kerberos.principal=${KRB_PRINCIPAL} -X sasl.kerberos.keytab=${KRB_KEYTAB} \

Note that this sometimes fails, so you'll have to retry the command until it works. I suspect that I'm missing some retry parameter because the Python client never had any problems.

[ppanero]

From @slint (thanks!):

kcat_qa -C -t "zenodo-migration.public" -o end

[ppanero]

Both PRs are ready to review. Note that zenodo-rdm tests are passing in local (requires the invenio-rdm-migration PR to be released).

• invenio-rdm-migrator: ⚠️ the latest commit is not in working state, it is required for the user profile partial update
• zenodo-rdm-migrator: tried to speed up tests playing with fixture scopes but still not fast enough