You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
@@ -369,6 +371,8 @@ Local use of secrets manager requires:
369
371
370
372
(see instructions in the secrets handling readme).
371
373
374
+
### CSFLE
375
+
372
376
Here's an example usage of the tooling in drivers-evergreen-tools that configures credentials for CSFLE:
373
377
374
378
```bash
@@ -383,6 +387,33 @@ source secrets-export.sh
383
387
> [!IMPORTANT]
384
388
> Make sure `secrets-export.sh` is in the .gitignore of any Github repo you might be using these tools in to avoid leaking credentials. This is already done for this repo.
385
389
390
+
### AWS Profile
391
+
392
+
These instructions will help you locally configure profile-based AWS credentials.
393
+
394
+
Setup an AWS_PROFILE locally to be able to use AWS and to run AWS tests locally.
395
+
396
+
1. Get SSO sign-in info from AWS
397
+
1. Navigate to https://corp.mongodb.com/app/UserHome
398
+
2. Open AWS
399
+
3. Choose `Drivers` account
400
+
4. Choose `drivers-test-secrets-role`
401
+
5. Click `Access Keys`
402
+
6. Copy down `SSO start URL` and `SSO Region`
403
+
2. Sign in locally
404
+
1. Run `aws configure sso-session`
405
+
2. Pick a name, like `drivers-test-secrets-session`
406
+
3. Specify `SSO start URL` and `SSO Region` from earlier steps
407
+
3. Add a profile
408
+
1. Add the following profile to `~/.aws/config`
409
+
410
+
```ini
411
+
[profile drivers-test-secrets-role-857654397073]
412
+
sso_session = drivers-test-secrets-session
413
+
sso_account_id = 857654397073
414
+
sso_role_name = drivers-test-secrets-role
415
+
```
416
+
386
417
## Testing with Special Environments
387
418
388
419
In order to test some features, you will need to generate and set a specialized group of environment variables. The subsections below will walk you through how to generate and set the environment variables for these features.
@@ -650,30 +681,31 @@ Choose your AWS authentication credential type and export the `AWS_CREDENTIAL_TY
650
681
651
682
An example of performing the above is [`etc/run-aws-integ-tests.sh`](etc/run-aws-integ-tests.sh).
652
683
653
-
#### AWS Profile
684
+
#### Running AWS tests
654
685
655
-
Setup an AWS_PROFILE locally to be able to use AWS and to run AWS tests locally.
686
+
Once you have the AWS Profile configured locally (see section "AWS Profile"for more info), you can run tests like this:
656
687
657
-
1. Get SSO sign-in info from AWS
658
-
1. Navigate to https://corp.mongodb.com/app/UserHome
659
-
2. Open AWS
660
-
3. Choose `Drivers` account
661
-
4. Choose `drivers-test-secrets-role`
662
-
5. Click `Access Keys`
663
-
6. Copy down `SSO start URL` and `SSO Region`
664
-
2. Sign in locally
665
-
1. Run `aws configure sso-session`
666
-
2. Pick a name, like `drivers-test-secrets-session`
667
-
3. Specify `SSO start URL` and `SSO Region` from earlier steps
0 commit comments