Add test variant for the Secure Frontend Processor (monguard)

XMLWordPrintableJSON

    • Type: Task
    • Resolution: Done
    • Priority: Major - P3
    • None
    • Affects Version/s: None
    • Component/s: Authentication, Testing
    • None
    • Hide

      DRIVERS-3395:
      Summary of necessary driver changes

      •  Add new integration tests against secure frontend processor (monguard)

      Commits for syncing spec/prose tests
      (and/or refer to an existing language POC if needed)

      The SFP test credentials are stored in the AWS Secrets Manager under drivers/sfp.

      Show
      DRIVERS-3395: Summary of necessary driver changes  Add new integration tests against secure frontend processor (monguard) Commits for syncing spec/prose tests (and/or refer to an existing language POC if needed) Spec change: https://github.com/mongodb/specifications/commit/ac0b0ad6e2c347c72990804b61119e45716545d0 C driver POC: https://github.com/mongodb/mongo-c-driver/pull/2330 The SFP test credentials are stored in the AWS Secrets Manager under drivers/sfp.
    • None
    • Not Needed
    • Hide

      1. What would you like to communicate to the user about this feature?
      2. Would you like the user to see examples of the syntax and/or executable code and its output?
      3. Which versions of the driver/connector does this apply to?

      Show
      1. What would you like to communicate to the user about this feature? 2. Would you like the user to see examples of the syntax and/or executable code and its output? 3. Which versions of the driver/connector does this apply to?
    • None
    • None
    • None
    • None
    • None
    • None

      This ticket was split from DRIVERS-3395, please see that ticket for a detailed description.

      Definition of Done 

      Need to create a new file mirroring internal/cmd/testatlas/atlas_test.go. This should probably live in internal/test/sfptest, using a more modern pattern. We should not gate on a build tag, as atlas_test.go does but rather the environment variables such as oidcauth/oidcauth_test.go

      • Create a taskfile for test-sfp to run the test and write to the test.suite.
      • Organize test to gate on the SFP env variables. We have unauthenticated tests, SCRAM-SHA-256 authenticated, and X.509 authenticated. Each authenticated test runs under 3 variations: baseline, >=1 compressor, Server API v1 
      • In etc/setup-test.sh we need to add a TEST_SFP guard pulling drivers/sfp using setup-secrets.sh drivers/sfp
      • Create a new Evergreen function run-sfp-test mirroring run-atlas-test with TEST_SFP: “1”
      • New sfp-test task that runs the run-sfp-test in evergreen 
      • Add sfp-test to a dedicated buildvariant, rhel8.7

        There are no Sub-Tasks for this issue.

            Assignee:
            Preston Vasquez
            Reporter:
            TPM Jira Automations Bot
            Qingyang Hu
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: