From 435c3864fcf2d44a96288f8154d9182bd32aa0e9 Mon Sep 17 00:00:00 2001 From: Andreas Braun Date: Fri, 23 May 2025 10:35:06 +0200 Subject: [PATCH 1/2] PHPLIB-1678: Use assume_role command before accessing secrets (#1696) --- .evergreen/config/test-task-groups.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.evergreen/config/test-task-groups.yml b/.evergreen/config/test-task-groups.yml index a8edffa41..4a83bac2c 100644 --- a/.evergreen/config/test-task-groups.yml +++ b/.evergreen/config/test-task-groups.yml @@ -8,6 +8,9 @@ task_groups: - func: "locate PHP binaries" - func: "fetch extension" - func: "install composer" + - command: ec2.assume_role + params: + role_arn: ${aws_test_secrets_role} - command: subprocess.exec params: working_dir: src From 69db1adab299daaa10bff035b4a2001628b4e6a8 Mon Sep 17 00:00:00 2001 From: Andreas Braun Date: Fri, 23 May 2025 10:56:30 +0200 Subject: [PATCH 2/2] Use assume_role command before accessing secrets for atlas-data-lake tests --- .evergreen/config/test-tasks.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.evergreen/config/test-tasks.yml b/.evergreen/config/test-tasks.yml index 5519561c4..83b301c08 100644 --- a/.evergreen/config/test-tasks.yml +++ b/.evergreen/config/test-tasks.yml @@ -25,6 +25,9 @@ tasks: - name: "test-atlas-data-lake" commands: + - command: ec2.assume_role + params: + role_arn: ${aws_test_secrets_role} - func: "bootstrap mongohoused" - func: "run atlas data lake test"