Set AWS_ROLE_ARN

More AWS cred testing

More AWS cred testing

More AWS cred testing

testing

testing

More cleanup

Debugging

Debugging again

deubg 3.7

deubg 3.7

Security cleanup

Author: NoahStapp

.evergreen/config.yml

@@ -541,6 +541,7 @@ functions:
 
           set -o errexit
           set -o xtrace
+          source ./secrets-export.sh
           # This is required for pypy3.7 UTF encoding
           export LC_ALL=en_US.UTF-8
           bash ${PROJECT_DIRECTORY}/.evergreen/tox.sh ${PYTHON_BINARY} -m test-atlas
@@ -772,18 +773,31 @@ functions:
     - command: ec2.assume_role
       params:
         role_arn: ${aws_test_secrets_role}
+    - command: shell.exec
+      type: test
+      params:
+        working_dir: "src"
+        silent: true
+        script: |
+          # DO NOT ECHO WITH XTRACE (which PREPARE_SHELL does)
+          export AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID}
+          export AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY}
+          export AWS_SESSION_TOKEN=${AWS_SESSION_TOKEN}
     - command: shell.exec
       type: test
       params:
         working_dir: "src"
         shell: bash
         script: |
           ${PREPARE_SHELL}
-          bash ${PROJECT_DIRECTORY}/.evergreen/tox.sh ${PYTHON_BINARY} -m aws-secrets
+
+          # This is required for pypy3.7 UTF encoding
+          export LC_ALL=en_US.UTF-8
+          bash ${PROJECT_DIRECTORY}/.evergreen/tox.sh ${PYTHON_BINARY} -m aws-secrets -- drivers/test
 
     - command: expansions.update
       params:
-        file: secrets-expansion.yml
+        file: src/secrets-expansion.yml
 
   "run oidc auth test with aws credentials":
     - command: shell.exec

tox.ini

@@ -144,10 +144,8 @@ commands =
 deps =
     pytest>=7
 passenv = *
-allowlist_externals =
-    bash
 commands =
-    bash -c 'source ./secrets-export.sh; python -m pytest -v {posargs} ./test/atlas/test_connection.py'
+    python -m pytest -v {posargs} ./test/atlas/test_connection.py
 
 [testenv:test-mockupdb]
 description = run mockupdb tests
@@ -166,7 +164,7 @@ passenv = *
 allowlist_externals =
     bash
 commands =
-    python {env:DRIVERS_TOOLS}/.evergreen/auth_aws/setup_secrets.py drivers/test
+    python {env:DRIVERS_TOOLS}/.evergreen/auth_aws/setup_secrets.py {posargs}
 
 [testenv:test-aws-secrets]
 deps =