From faf4002bdd37fc51ea844b182bb40c8f9c7edf8a Mon Sep 17 00:00:00 2001 From: Steven Silvester Date: Thu, 3 Jul 2025 13:11:20 -0500 Subject: [PATCH] PYTHON-5431 Include assume role creds in backport task --- .evergreen/generated_configs/tasks.yml | 4 ++++ .evergreen/scripts/generate_config.py | 3 ++- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/.evergreen/generated_configs/tasks.yml b/.evergreen/generated_configs/tasks.yml index e91d2c119b..79594da774 100644 --- a/.evergreen/generated_configs/tasks.yml +++ b/.evergreen/generated_configs/tasks.yml @@ -128,6 +128,10 @@ tasks: - mongo-python-driver - ${github_commit} working_dir: src + include_expansions_in_env: + - AWS_ACCESS_KEY_ID + - AWS_SECRET_ACCESS_KEY + - AWS_SESSION_TOKEN type: test # Coverage report tests diff --git a/.evergreen/scripts/generate_config.py b/.evergreen/scripts/generate_config.py index 809792679b..1bd54b80ae 100644 --- a/.evergreen/scripts/generate_config.py +++ b/.evergreen/scripts/generate_config.py @@ -896,7 +896,8 @@ def create_backport_pr_tasks(): "mongo-python-driver", "${github_commit}", ] - cmd = get_subprocess_exec(args=args) + include_expansions = ["AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_SESSION_TOKEN"] + cmd = get_subprocess_exec(args=args, include_expansions_in_env=include_expansions) assume_func = FunctionCall(func="assume ec2 role") return [EvgTask(name=name, commands=[assume_func, cmd], allowed_requesters=["commit"])]