Python3

Status

This code is as ready as I can get it. Here's what still needs to be done:

• Figure out issue with lvalert-overseer.
• Check for possible issues on uploading hardware injections (see here. I haven't been able to test it, but it uses StringIO which is definitely a cause for concern in terms of Python 2/3 compatibility.
• Tag a new version of lvalert-overseer, push it to PyPI, and update the requirements.txt file in this repository to use the new tag.

Suggested strategy for rolling it out

• Test the deployment with the new puppet configuration on gracedb-dev2 or dev1 (more below)
• Deploy on playground and see what happens
• Test this image on gracedb-test
• Tag it
• Deploy on production

To test on UWM VMs

• Delete /home/gracedb/djangoenv
• As root, run puppet and immediately turn it off so it doesn't revert to the default configuration:

  puppet agent -t --environment=gracedb_python3; systemctl stop puppet

• Make sure the repository in /home/gracedb/bin is up-to-date.
• Do some testing
• If everything looks good, proceed

Final deployment on UWM VMs

• Stop/disable puppet on gracedb-playground

  systemctl stop puppet
  systemctl disable puppet

• Someone at UWM should rebase and merge this MR.
• Setup the dev machines to use this branch and the new configuration.
  • As the gracedb user:

    cd /home/gracedb/gracedb_project
    rm -rf ../djangoenv
    git checkout --track origin/python3

  • As root:

    puppet agent -t
    systemctl restart gunicorn
    systemctl restart lvalert_overseer

• If all seems good, do the same for playground
• Iterate on any changes needed to the server code
• Once it seems stable on playground, test it on gracedb-test
• If that seems good, merge the code into master and tag it

NOTE: gracedb-dev2 is currently set up for Python 3 both in terms of its Puppet configuration and its code base. Puppet is currently turned off so that it doesn't revert to the "default" Puppet configuration with Python 2. Once you're ready to "officially" deploy with Python 3, and the Puppet configuration is merged, just do puppet agent -t as root on this server to restart Puppet.

Final deployment in AWS

Should be easy - it's all in a Docker image!

Potential issues

The parts of the code that I expect the most issues to occur are:

• VOEvent building (gracedb/annotations/voevent_utils.py) since it was completely rewritten
• VOEvent ingestion for external events (gracedb/events/translator.py) since it was completely rewritten
• General string parsing and encoding/decoding

gracedb/ligoauth/management/commands/update_user_accounts_from_ligo_ldap.py

+from builtins import str
 import datetime
 import ldap
 
@@ -32,13 +33,15 @@ class LdapPersonResultProcessor(object):
     def extract_user_attributes(self):
         if self.ldap_connection is None:
             raise RuntimeError('LDAP connection not configured')
+        memberships = [group_name.decode('utf-8') for group_name in
+            self.ldap_result.get('isMemberOf', [])]
         self.user_data = {
-            'first_name': unicode(self.ldap_result['givenName'][0], 'utf-8'),
-            'last_name': unicode(self.ldap_result['sn'][0], 'utf-8'),
-            'email': self.ldap_result['mail'][0],
-            'is_active': self.ldap_connection.lvc_group.ldap_name in
-                self.ldap_result.get('isMemberOf', []),
-            'username': self.ldap_result['krbPrincipalName'][0],
+            'first_name': self.ldap_result['givenName'][0].decode('utf-8'),
+            'last_name': self.ldap_result['sn'][0].decode('utf-8'),
+            'email': self.ldap_result['mail'][0].decode('utf-8'),
+            'is_active': (self.ldap_connection.lvc_group.ldap_name in
+                memberships),
+            'username': self.ldap_result['krbPrincipalName'][0].decode('utf-8'),
         }
 
     def check_situation(self, user_exists, l_user_exists):
@@ -142,7 +145,8 @@ class LdapPersonResultProcessor(object):
 
     def update_user_groups(self):
         # Get list of group names that the user belongs to from the LDAP result
-        memberships = self.ldap_result.get('isMemberOf', [])
+        memberships = [group_name.decode('utf-8') for group_name in
+            self.ldap_result.get('isMemberOf', [])]
 
         # Get groups which are listed for the user in the LDAP and whose
         # membership is controlled by the LDAP
@@ -208,7 +212,8 @@ class LdapPersonResultProcessor(object):
         # Get two lists of subjects as sets
         db_x509_subjects = set(list(self.ligoldapuser.x509cert_set.values_list(
             'subject', flat=True)))
-        ldap_x509_subjects = set(self.ldap_result.get('gridX509subject', []))
+        ldap_x509_subjects = set([x.decode('utf-8') for x in
+                                  self.ldap_result.get('gridX509subject', [])])
 
         # Get certs to add and remove
         certs_to_add = ldap_x509_subjects.difference(db_x509_subjects)
@@ -238,14 +243,14 @@ class LdapRobotResultProcessor(LdapPersonResultProcessor):
     def extract_user_attributes(self):
         if self.ldap_connection is None:
             raise RuntimeError('LDAP connection not configured')
+        memberships = [group_name.decode('utf-8') for group_name in
+            self.ldap_result.get('isMemberOf', [])]
         self.user_data = {
-            'last_name': unicode(self.ldap_result['x-LIGO-TWikiName'][0],
-                'utf-8'),
-            'email': self.ldap_result['mail'][0],
-            'is_active': self.ldap_connection.groups.get(
-                name='robot_accounts').name in self.ldap_result.get(
-                'isMemberOf', []),
-            'username': self.ldap_result['cn'][0],
+            'last_name': self.ldap_result['x-LIGO-TWikiName'][0].decode('utf-8'),
+            'email': self.ldap_result['mail'][0].decode('utf-8'),
+            'is_active': (self.ldap_connection.groups.get(
+                name='robot_accounts').name in memberships),
+            'username': self.ldap_result['cn'][0].decode('utf-8'),
         }
 
     def check_situation(self, user_exists, l_user_exists):