CXX-3287 assume role before pull-mongohouse-image.sh (mongodb#1413)

Author: kevinAlbs

.evergreen/config_generator/components/mongohouse.py

@@ -8,7 +8,7 @@
 from config_generator.etc.utils import bash_exec
 
 from shrub.v3.evg_build_variant import BuildVariant
-from shrub.v3.evg_command import EvgCommandType
+from shrub.v3.evg_command import EvgCommandType, ec2_assume_role
 from shrub.v3.evg_task import EvgTask, EvgTaskRef
 
 
@@ -17,18 +17,22 @@
 
 class BuildMongohouse(Function):
     name = 'build_mongohouse'
-    commands = bash_exec(
-        command_type=EvgCommandType.SETUP,
-        script='''\
-            if [ ! -d "drivers-evergreen-tools" ]; then
-                git clone https://github.com/mongodb-labs/drivers-evergreen-tools.git
-            fi
-            cd drivers-evergreen-tools
-            export DRIVERS_TOOLS=$(pwd)
-
-            .evergreen/atlas_data_lake/pull-mongohouse-image.sh
-        '''
-    )
+    commands = [
+        ec2_assume_role (role_arn='${aws_test_secrets_role}'),
+        bash_exec(
+            include_expansions_in_env=["AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_SESSION_TOKEN"],
+            command_type=EvgCommandType.SETUP,
+            script='''\
+                if [ ! -d "drivers-evergreen-tools" ]; then
+                    git clone https://github.com/mongodb-labs/drivers-evergreen-tools.git
+                fi
+                cd drivers-evergreen-tools
+                export DRIVERS_TOOLS=$(pwd)
+
+                .evergreen/atlas_data_lake/pull-mongohouse-image.sh
+            '''
+        )
+    ]
 
 
 class RunMongohouse(Function):

.evergreen/generated_configs/functions.yml

@@ -200,20 +200,27 @@ functions:
         permissions: public-read
         remote_file: mongo-cxx-driver/${branch_name}/${revision}/${version_id}/${build_id}/${execution}/rpm-packages.tar.gz
   build_mongohouse:
-    command: subprocess.exec
-    type: setup
-    params:
-      binary: bash
-      args:
-        - -c
-        - |
-          if [ ! -d "drivers-evergreen-tools" ]; then
-              git clone https://github.com/mongodb-labs/drivers-evergreen-tools.git
-          fi
-          cd drivers-evergreen-tools
-          export DRIVERS_TOOLS=$(pwd)
+    - command: ec2.assume_role
+      params:
+        role_arn: ${aws_test_secrets_role}
+    - command: subprocess.exec
+      type: setup
+      params:
+        binary: bash
+        include_expansions_in_env:
+          - AWS_ACCESS_KEY_ID
+          - AWS_SECRET_ACCESS_KEY
+          - AWS_SESSION_TOKEN
+        args:
+          - -c
+          - |
+            if [ ! -d "drivers-evergreen-tools" ]; then
+                git clone https://github.com/mongodb-labs/drivers-evergreen-tools.git
+            fi
+            cd drivers-evergreen-tools
+            export DRIVERS_TOOLS=$(pwd)
 
-          .evergreen/atlas_data_lake/pull-mongohouse-image.sh
+            .evergreen/atlas_data_lake/pull-mongohouse-image.sh
   check augmented sbom:
     - command: ec2.assume_role
       type: setup