RUST-2254 Switch from artifactory to AWS (#1476)

Author: abr-egn

.evergreen/release-build-vars.sh

@@ -25,8 +25,6 @@ CRATE_VERSION: "${CRATE_VERSION}"
 PAPERTRAIL_KEY_ID: "${PAPERTRAIL_KEY_ID}"
 PAPERTRAIL_SECRET_KEY: "${PAPERTRAIL_SECRET_KEY}"
 PAPERTRAIL_PRODUCT: "${PAPERTRAIL_PRODUCT}"
-ARTIFACTORY_USERNAME: "${ARTIFACTORY_USERNAME}"
-ARTIFACTORY_PASSWORD: "${ARTIFACTORY_PASSWORD}"
 GARASIGN_USERNAME: "${GARASIGN_USERNAME}"
 GARASIGN_PASSWORD: "${GARASIGN_PASSWORD}"
 S3_UPLOAD_AWS_KEY: "${S3_UPLOAD_AWS_KEY}"

.evergreen/release-sign.sh

@@ -3,7 +3,7 @@
 set -o errexit
 set +x
 
-echo "${ARTIFACTORY_PASSWORD}" | docker login --password-stdin --username ${ARTIFACTORY_USERNAME} artifactory.corp.mongodb.com
+aws ecr get-login-password --region us-east-1 | docker login --username AWS --password-stdin 901841024863.dkr.ecr.us-east-1.amazonaws.com
 
 echo "GRS_CONFIG_USER1_USERNAME=${GARASIGN_USERNAME}" >> "signing-envfile"
 echo "GRS_CONFIG_USER1_PASSWORD=${GARASIGN_PASSWORD}" >> "signing-envfile"
@@ -13,13 +13,13 @@ docker run \
   --rm \
   -v $(pwd):$(pwd) \
   -w $(pwd) \
-  artifactory.corp.mongodb.com/release-tools-container-registry-local/garasign-gpg \
+  901841024863.dkr.ecr.us-east-1.amazonaws.com/release-infrastructure/garasign-gpg \
   /bin/bash -c "gpgloader && gpg --yes -v --armor -o mongodb-${CRATE_VERSION}.sig --detach-sign target/package/mongodb-${CRATE_VERSION}.crate"
 
 docker run \
   --env-file=signing-envfile \
   --rm \
   -v $(pwd):$(pwd) \
   -w $(pwd) \
-  artifactory.corp.mongodb.com/release-tools-container-registry-local/garasign-gpg \
+  901841024863.dkr.ecr.us-east-1.amazonaws.com/release-infrastructure/garasign-gpg \
   /bin/bash -c "gpgloader && gpg --yes -v --armor -o mongodb-internal-macros-${CRATE_VERSION}.sig --detach-sign macros/target/package/mongodb-internal-macros-${CRATE_VERSION}.crate"

.evergreen/releases.yml

@@ -12,22 +12,17 @@
 #     --param triggered_by_git_tag=${TAG} \
 #     --param DRY_RUN=yes
 #
-# If the changes need to be developed against the main branch, more steps are needed:
-#
-# 1. Add dummy version numbers to the Cargo.toml lines for mongodb-internal-macros, bson,
-#    and libmongocrypt
-# 2. Comment out the "fetch tag" func call from the "publish-release" task in this file
-# 3. Execute:
+# If the changes need to be developed against the main branch, the "fetch tag" func call
+# in the "publish-release" task needs to be commented out before running:
 #
 # evergreen patch --path .evergreen/releases.yml \
 #     -t publish-release -v all \
 #     -p mongo-rust-driver \
 #     -u --browse \
-#     --param triggered_by_git_tag=${TAG} \
 #     --param DRY_RUN=yes \
 #     --param PACKAGE_ONLY=yes
 #
-# Make sure to remove the changes from 1 and 2 before merging!
+# Make sure to uncomment the call before merging!
 
 exec_timeout_secs: 3600 
 
@@ -144,12 +139,16 @@ functions:
           - src/macros/target/package/mongodb-internal-macros-${CRATE_VERSION}.crate
 
   "sign release":
+    - command: ec2.assume_role
+      params:
+        role_arn: "arn:aws:iam::901841024863:role/ecr-role-evergreen-ro"
     - command: subprocess.exec
       params:
         working_dir: "src"
         include_expansions_in_env:
-          - ARTIFACTORY_USERNAME
-          - ARTIFACTORY_PASSWORD
+          - AWS_ACCESS_KEY_ID
+          - AWS_SECRET_ACCESS_KEY
+          - AWS_SESSION_TOKEN
           - GARASIGN_USERNAME
           - GARASIGN_PASSWORD
           - CRATE_VERSION