Inventory 2.8 rollout

[mogul]

User Story

In order to reduce the operational overhead of hosting inventory.data.gov and keeping it secure, the team wants to redeploy the service using a modern, supported version of CKAN on a supported OS.

Acceptance Criteria

• WHEN I curl https://inventory.data.gov/api/action/status_show
  THEN I see "ckan_version: 2.8.x" in the result

Background

Python 2 is EOL and CKAN 2.3/2/5 are really hard to work with.

Security Considerations (required)

The new deployment is pushed out in the same way, no service interactions are added or removed, all related services are accessed locally on the hosts, etc. We expect this change to not impact the security of the deployment itself. We do expect this change to result in addressing various bugs and potential security problems, and to make it easier to address any new security findings without the friction of an ancient codebase.

Sketch

• Announce scheduled downtime to inventory users
• Rollout plan: Test and validate the inventory-next switchover plan #2248
• Previous DB migrations were completed in one afternoon

[FuhuXia]

Blocked by Inventory user table house cleaning and Inventory authentication extension.