-
Type: Epic
-
Resolution: Unresolved
-
Priority: Unknown
-
None
-
Component/s: None
-
None
-
-
To Do
-
Use AWS Secrets Manager for AWS-Related Test Secrets
-
0
-
0
-
0
-
100
-
-
Needed
-
Summary
We currently have around 20 Evergreen Project variables that are used to populate a ${DRIVERS_TOOLS}/.evergreen/auth_aws/aws_e2e_setup.json file that is used in Drivers Evergreen Tools in test scripts. Additionally, there are many other secrets used by Drivers Evergreen Tools such as in .evergreen/atlas to launch Atlas clusters.
As part of DRIVERS-2415, we now have a mechanism to store and retrieve variables using AWS Secrets Manager, rather than continuing to grow this list of manually updated variables across all drivers.
All members of dbx have access to view and update the secrets using the drivers-test-secrets-role login option in the Drivers AWS account.
This project would move the existing affected Project Variables and create a new wiki page for the maintenance and upkeep of these secrets. There would be a new script created in Drivers Evergreen Tools to create an expansion file used by EG to provide these values as environment variables which can then be used by the existing scripts.
Drivers would then replace the portion of their Evergreen Config with a block that acquires the appropriate credentials and expands the variables. They would also be able to remove the affected project variables from EG.
Motivation
Adding and updating credentials currently requires the coordination of all of the driver teams, and manual effort.
- is related to
-
DRIVERS-2415 Implement OIDC SASL mechanism
- In Progress
-
MOTOR-1266 Update path to CSFLE scripts
- Closed
- split to
-
NODE-5507 Use AWS Secrets Manager for Evergreen Test Secrets
- Backlog
-
PHPLIB-1216 Use AWS Secrets Manager for Evergreen Test Secrets
- Backlog
-
RUBY-3311 Use AWS Secrets Manager for Evergreen Test Secrets
- Backlog
-
GODRIVER-2928 Use AWS Secrets Manager for Evergreen Test Secrets
- Released
-
PYTHON-3895 Use AWS Secrets Manager for Evergreen Test Secrets
- Released
-
JAVA-5094 Use AWS Secrets Manager for Evergreen Test Secrets
- Ready for Work
-
MOTOR-1167 Use AWS Secrets Manager for Evergreen Test Secrets
- Development Complete
-
CDRIVER-4701 Use AWS Secrets Manager for Evergreen Test Secrets
- Backlog
-
CXX-2724 Use AWS Secrets Manager for Evergreen Test Secrets
- Backlog
-
RUST-1717 Use AWS Secrets Manager for Evergreen Test Secrets
- Backlog
-
CSHARP-4741 Use AWS Secrets Manager for Evergreen Test Secrets
- In Progress
-
PHPC-2395 Use AWS Secrets Manager for Evergreen Test Secrets
- Closed