Skip to content

Commit acedf5c

Browse files
authored
chore(release) fix iam role used for dry run releases DEVPROD-21408 (#2525)
This commit adjusts our release dry run task to use the correct IAM role for its operations. The non-dry-run release task was using the expected role, but dry-run wasn't assuming the role we need to use.
1 parent 973db36 commit acedf5c

File tree

2 files changed

+12
-0
lines changed

2 files changed

+12
-0
lines changed

.evergreen.yml

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -4810,6 +4810,9 @@ functions:
48104810
params:
48114811
file: tmp/expansions.yaml
48124812
redacted: true
4813+
- command: ec2.assume_role
4814+
params:
4815+
role_arn: "arn:aws:iam::119629040606:role/s3-access.cdn-origin-compass"
48134816
- command: shell.exec
48144817
# silent: true
48154818
params:
@@ -4818,6 +4821,9 @@ functions:
48184821
env:
48194822
devtoolsbot_npm_token: ${devtoolsbot_npm_token}
48204823
node_js_version: ${node_js_version}
4824+
DOWNLOAD_CENTER_AWS_KEY_ARTIFACTS: ${AWS_ACCESS_KEY_ID}
4825+
DOWNLOAD_CENTER_AWS_SECRET_ARTIFACTS: ${AWS_SECRET_ACCESS_KEY}
4826+
DOWNLOAD_CENTER_AWS_SESSION_TOKEN_ARTIFACTS: ${AWS_SESSION_TOKEN}
48214827
script: |
48224828
set -e
48234829
.evergreen/run-evergreen-release.sh publish -- --dry-run

.evergreen/evergreen.yml.in

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1007,6 +1007,9 @@ functions:
10071007
params:
10081008
file: tmp/expansions.yaml
10091009
redacted: true
1010+
- command: ec2.assume_role
1011+
params:
1012+
role_arn: "arn:aws:iam::119629040606:role/s3-access.cdn-origin-compass"
10101013
- command: shell.exec
10111014
# silent: true
10121015
params:
@@ -1015,6 +1018,9 @@ functions:
10151018
env:
10161019
devtoolsbot_npm_token: ${devtoolsbot_npm_token}
10171020
node_js_version: ${node_js_version}
1021+
DOWNLOAD_CENTER_AWS_KEY_ARTIFACTS: ${AWS_ACCESS_KEY_ID}
1022+
DOWNLOAD_CENTER_AWS_SECRET_ARTIFACTS: ${AWS_SECRET_ACCESS_KEY}
1023+
DOWNLOAD_CENTER_AWS_SESSION_TOKEN_ARTIFACTS: ${AWS_SESSION_TOKEN}
10181024
script: |
10191025
set -e
10201026
.evergreen/run-evergreen-release.sh publish -- --dry-run

0 commit comments

Comments
 (0)