Loading...

XML

Word

Printable

JSON

Type: Epic
Resolution: Done
Priority: Unknown
Fix Version/s: None
Affects Version/s: None
Component/s: Evergreen
Labels:
None

Epic Name:
Use AWS Secrets Manager for AWS-Related Test Secrets
Assigned Teams:

Node Drivers
Documentation Changes:
Not Needed
Epic Status:
Done

Quarter:
- FY25Q4
- FY26Q1
Scope Cost Estimate:
1
Cost to Date:
2
Final Cost Estimate:
2.5
Cost Threshold %:
100
Confidence Status:
None
Detailed Project Statuses:
Hide

Engineer(s): Bailey Pearson, Durran Jordan
2025-02-14: Target date set to 2025-02-21

Known risks or blockers:

There are flaky AWS auth tests that fail to fetch credentials. Debugging has proved tricky.

Completed over the last 2 weeks:

Node's CI now entirely uses secrets manager.

Durran is debugging the flaky credential fetching. That is the only remaining work.

Focus over the next 2 weeks:

Debug the flaky auth tests and close out the epic.
Show
Engineer(s): Bailey Pearson, Durran Jordan 2025-02-14: Target date set to 2025-02-21 Known risks or blockers: There are flaky AWS auth tests that fail to fetch credentials. Debugging has proved tricky. Completed over the last 2 weeks: Node's CI now entirely uses secrets manager. Durran is debugging the flaky credential fetching. That is the only remaining work. Focus over the next 2 weeks: Debug the flaky auth tests and close out the epic.

Upstream Changes Summary:
Hide

DRIVERS-2585:
Summary of necessary driver changes

See instructions in Drivers Evergreen Tools for usage of the vaults, and the READMEs in each of the sub-folders that use secrets. Drivers are expected to migrate ALL of the secrets listed in the Secrets Handling README.

See https://github.com/mongodb/mongo-go-driver/commit/9755f4aa7c303ba3b79d16e28ddefe533b043f23 for an example using the scripts to handle secrets instead of EVG project variables.

See https://github.com/mongodb/mongo-go-driver/commit/e77ab7041f86e65ecc665ffe5c7b3f350eb0a741 for an example of migrating CSFLE to use the new scripts.

See https://github.com/mongodb/mongo-go-driver/commit/70b1fa64ef2999635ab843ae7d3a6b2dde07e118 for an example of migrating AWS tests to use the new scripts.
Show
DRIVERS-2585 : Summary of necessary driver changes See instructions in Drivers Evergreen Tools for usage of the vaults, and the READMEs in each of the sub-folders that use secrets. Drivers are expected to migrate ALL of the secrets listed in the Secrets Handling README. See https://github.com/mongodb/mongo-go-driver/commit/9755f4aa7c303ba3b79d16e28ddefe533b043f23 for an example using the scripts to handle secrets instead of EVG project variables. See https://github.com/mongodb/mongo-go-driver/commit/e77ab7041f86e65ecc665ffe5c7b3f350eb0a741 for an example of migrating CSFLE to use the new scripts. See https://github.com/mongodb/mongo-go-driver/commit/70b1fa64ef2999635ab843ae7d3a6b2dde07e118 for an example of migrating AWS tests to use the new scripts.

Aha! Reference:
None
Tracking Level:
None
Risk Status:
None
Exec Notes:
None
Goal Name:
None
Goal Link:
None

This ticket was split from DRIVERS-2585, please see that ticket for a detailed description.

is duplicated by

NODE-6385 Use Cloud-Dev for Lambda Automated Testing

Closed

is related to

NODE-6203 Rotate credentials in Atlas testing URIs

Closed

NODE-4761 Improve FLE environment set up in Driver CI

Backlog

split from

DRIVERS-2585 Use AWS Secrets Manager for Evergreen Test Secrets

In Progress

Assignee:: Bailey Pearson

Reporter:: TPM Jira Automations Bot

Votes:: 0 Vote for this issue

Watchers:: 3 Start watching this issue

Created:: Aug 01 2023 09:32:09 PM UTC

Updated:: Feb 25 2025 01:33:56 PM UTC

Resolved:: Feb 25 2025 01:33:55 PM UTC

Calendar Time:: 2 weeks, 1 day

Target start:: None

Start date:: 06/Feb/25

End date:: 21/Feb/25

Confidence Status Last Update:: 07/Feb/25 1:27 AM

GA Target Date:: None

Public Preview Target Date:: None

Private Preview Target Date:: None

Experiment Target Date:: None

Details

Description

Attachments

Issue Links

Activity

People

Dates