common.yml

# Support for mongodump+mongorestore passthrough tests.

include:
  - filename: "mongodump_passthrough/globals.yml"
  - filename: "mongodump_passthrough/parameters.yml"
  - filename: "mongodump_passthrough/modules.yml"
  - filename: "mongodump_passthrough/functions.yml"
  - filename: "mongodump_passthrough/tasks.yml"
  - filename: "mongodump_passthrough/variants.yml"

#######################################
#    Tools Driver Config for MCI      #
#######################################
# default command type
command_type: system

# 3 hour default timeout
exec_timeout_secs: 10800

# run the same task in the previous revision if the current task fails
stepback: true

variables:
  # Common mongodb arguments
  mongod_arguments:
    default: &mongod_default_startup_args
      mongod_args: ""
      mongod_port: 33333
    ssl: &mongod_ssl_startup_args
      mongod_args:
        "--sslMode requireSSL --sslCAFile common/db/testdata/ca-ia.pem --sslPEMKeyFile
        common/db/testdata/test-server.pem"
      replsettest_ssl_config:
        'sslMode: "requireSSL",sslPEMKeyFile: "common/db/testdata/test-server.pem", sslCAFile:
        "common/db/testdata/ca-ia.pem", sslAllowInvalidHostnames: ""'
      mongod_port: 33333
    tls: &mongod_tls_startup_args
      mongod_args_tls:
        "--tlsMode requireTLS --tlsCAFile common/db/testdata/ca-ia.pem --tlsCertificateKeyFile
        common/db/testdata/test-server.pem"
      replsettest_tls_config:
        'tlsMode: "requireTLS",tlsCertificateKeyFile: "common/db/testdata/test-server.pem",
        tlsCAFile: "common/db/testdata/ca-ia.pem", tlsAllowInvalidHostnames: ""'
      mongod_port: 33333

  mongo_arguments:
    default: &mongo_default_startup_args
      mongo_args: &mongo_default_startup_args_string "--port 33333"
      mongod_port: 33333
    ssl: &mongo_ssl_startup_args
      mongo_args:
        "--port 33333 --ssl --sslCAFile common/db/testdata/ca-ia.pem --sslPEMKeyFile
        common/db/testdata/test-server.pem --sslAllowInvalidCertificates"
      mongod_port: 33333
    tls: &mongo_tls_startup_args
      mongo_args_tls:
        "--port 33333 --tls --tlsCAFile common/db/testdata/ca-ia.pem --tlsCertificateKeyFile
        common/db/testdata/test-server.pem --tlsAllowInvalidCertificates"
      mongod_port: 33333

  # Used to determine load_libs_version for *-latest builds.
  # Same as maxServerVersion supported in download_server.go
  max_server_version: &max_server_version "9.0"

parameters:
  - key: fake_tag_for_release_testing
    description: |
      This can be set to test tasks that require a tag without actually
      triggering all of the release automation. Setting it will cause the
      `EVG_TRIGGERED_BY_TAG` environment variable to be populated with this
      parameter's value.

functions:
  "install mise and go":
    - command: cache.restore
      params:
        aws_key: ${aws_key}
        aws_secret: ${aws_secret}
        bucket: mciuploads
        key_expansions:
          - ${distro_arch}
          - ${mise_and_go_cache_version}
        key_files:
          - src/github.com/mongodb/mongo-tools/mise.toml
          - src/github.com/mongodb/mongo-tools/scripts/mise-version.txt
          - src/github.com/mongodb/mongo-tools/scripts/install-mise-and-go.sh
        name: mise-and-go
        remote_path: mongo-tools/mise-cache
    - command: shell.exec
      params:
        shell: bash
        working_dir: src/github.com/mongodb/mongo-tools
        env:
          EVG_WORKDIR: ${workdir}
          MISE_AND_GO_CACHE_HIT: ${mise_and_go_cache_hit}
        script: |
          set -o errexit
          set -o pipefail
          set -o verbose

          ./scripts/install-mise-and-go.sh
    - command: cache.save
      params:
        aws_key: ${aws_key}
        aws_secret: ${aws_secret}
        bucket: mciuploads
        key_expansions:
          - ${distro_arch}
          - ${mise_and_go_cache_version}
        key_files:
          - src/github.com/mongodb/mongo-tools/mise.toml
          - src/github.com/mongodb/mongo-tools/scripts/mise-version.txt
          - src/github.com/mongodb/mongo-tools/scripts/install-mise-and-go.sh
        name: mise-and-go
        paths:
          - .local/bin
          - .local/share/mise
        remote_path: mongo-tools/mise-cache

  # mise has no builds at all for ppc64le or s390x (see install-go-without-mise.sh), so there's
  # nothing worth caching on those architectures: we don't touch .local/bin or .local/share/mise
  # there. In most cases, we expect the Go toolchain version we need to already exist on the
  # machine. But even in cases where we have to download our own Go toolchain, it's not enough work
  # to be worth caching.
  "install go without mise":
    - command: shell.exec
      params:
        shell: bash
        working_dir: src/github.com/mongodb/mongo-tools
        env:
          EVG_WORKDIR: ${workdir}
        script: |
          set -o errexit
          set -o pipefail
          set -o verbose

          ./scripts/install-go-without-mise.sh

  "install mise-managed tools":
    - command: cache.restore
      params:
        aws_key: ${aws_key}
        aws_secret: ${aws_secret}
        bucket: mciuploads
        key_expansions:
          - ${distro_arch}
          - ${mise_and_go_cache_version}
          - ${mise_all_tools_cache_version}
        key_files:
          - src/github.com/mongodb/mongo-tools/mise.toml
          - src/github.com/mongodb/mongo-tools/scripts/mise-version.txt
          - src/github.com/mongodb/mongo-tools/package.json
          - src/github.com/mongodb/mongo-tools/scripts/install-mise-managed-tools.sh
        name: mise-all-tools
        remote_path: mongo-tools/mise-cache
    - command: shell.exec
      params:
        shell: bash
        working_dir: src/github.com/mongodb/mongo-tools
        env:
          EVG_WORKDIR: ${workdir}
          MISE_ALL_TOOLS_CACHE_HIT: ${mise_all_tools_cache_hit}
        script: |
          set -o errexit
          set -o pipefail
          set -o verbose

          ./scripts/install-mise-managed-tools.sh
    - command: cache.save
      params:
        aws_key: ${aws_key}
        aws_secret: ${aws_secret}
        bucket: mciuploads
        key_expansions:
          - ${distro_arch}
          - ${mise_and_go_cache_version}
          - ${mise_all_tools_cache_version}
        key_files:
          - src/github.com/mongodb/mongo-tools/mise.toml
          - src/github.com/mongodb/mongo-tools/scripts/mise-version.txt
          - src/github.com/mongodb/mongo-tools/package.json
          - src/github.com/mongodb/mongo-tools/scripts/install-mise-managed-tools.sh
        name: mise-all-tools
        # We deliberately don't cache node_modules: Evergreen's cache.save dereferences symlinks
        # when archiving, but npm creates node_modules/.bin/<tool> as a symlink into the package's
        # own directory. After a cache.restore those become plain file copies sitting in the wrong
        # place, breaking any tool that resolves paths relative to its own real location (e.g.
        # `require("../package.json")`), so `npm install` always runs fresh instead.
        paths:
          - .local/bin
          - .local/share/mise
        remote_path: mongo-tools/mise-cache

  "run legacy tests":
    command: subprocess.exec
    type: test
    params:
      # binary must be bash (with the script passed via args), not the script
      # directly: Windows can't execute a shebang script as a native binary.
      binary: bash
      working_dir: src/github.com/mongodb/mongo-tools
      args:
        - "./scripts/run-legacy-tests.sh"
      env:
        LOAD_LIBS_VERSION: ${load_libs_version}
        TEST_PATH: ${test_path}

  "run qa-tests":
    command: subprocess.exec
    params:
      binary: bash
      working_dir: src/github.com/mongodb/mongo-tools
      args:
        - "./scripts/run_qa.sh"
      add_expansions_to_env: true

  "run native-cert-ssl":
    command: subprocess.exec
    params:
      binary: bash
      working_dir: src/github.com/mongodb/mongo-tools
      args:
        - "./scripts/run_native_cert_ssl.sh"
      add_expansions_to_env: true

  "run make target":
    - command: subprocess.exec
      type: test
      params:
        # binary must be bash (with the script passed via args), not the script
        # directly: Windows can't execute a shebang script as a native binary.
        binary: bash
        working_dir: src/github.com/mongodb/mongo-tools
        args:
          - "./scripts/run-make-target.sh"
        env:
          EVG_BUILD_VARIANT: ${build_variant}
          EVG_PLATFORM: ${_platform}
          EVG_WORKDIR: ${workdir}
          TARGET: ${target}
          TOOLS_TESTING_AUTH_PASSWORD: ${auth_password}
          TOOLS_TESTING_AUTH_USERNAME: ${auth_username}
          TOOLS_TESTING_PKCS8_PASSWORD: ${pkcs8_password}

  "download mongod and shell":
    - command: github.generate_token
      params:
        owner: 10gen
        repo: mongo-release
        expansion_name: generated_token_mongo_release
        permissions:
          contents: read
    - command: subprocess.exec
      params:
        # binary must be bash (with the script passed via args), not the script
        # directly: Windows can't execute a shebang script as a native binary.
        binary: bash
        working_dir: src/github.com/mongodb/mongo-tools
        args:
          - "./scripts/download-mongod-and-shell.sh"
        env:
          AWS_ACCESS_KEY_ID: ${cdn_aws_access_key_id}
          AWS_SECRET_ACCESS_KEY: ${cdn_aws_secret}
          EVG_BUILD_ID: ${build_id}
          EVG_IS_PATCH: ${is_patch}
          EVG_KEY: ${evg_key}
          EVG_TRIGGERED_BY_TAG: ${triggered_by_git_tag}
          EVG_USER: ${evg_user}
          EVG_VARIANT: ${build_variant}
          EVG_VERSION: ${version_id}
          EVG_WORKDIR: ${workdir}
          FAKE_TAG_FOR_RELEASE_TESTING: ${fake_tag_for_release_testing}
          MONGO_VERSION: ${mongo_version}
          PLATFORM_OVERRIDE: ${_platform}
          generated_token_mongo_release: ${generated_token_mongo_release}

  "get buildnumber":
    command: keyval.inc
    params:
      key: "${build_variant}_tools"
      destination: "builder_num"

  "setup integration test":
    command: subprocess.exec
    params:
      # binary must be bash (with the script passed via args), not the script
      # directly: Windows can't execute a shebang script as a native binary.
      binary: bash
      working_dir: src/github.com/mongodb/mongo-tools
      # Set up Kerberos stuff: run kinit if necessary, and add KDC to registry
      # on Windows (see https://wiki.mongodb.com/display/DH/Testing+Kerberos)
      args:
        - "./scripts/setup-integration-test.sh"
      env:
        KERBEROS_KEYTAB: ${kerberos_keytab}
        RUN_KINIT: ${run_kinit}

  "setup credentials":
    command: subprocess.exec
    params:
      # binary must be bash (with the script passed via args), not the script
      # directly: Windows can't execute a shebang script as a native binary.
      binary: bash
      working_dir: src/github.com/mongodb/mongo-tools
      silent: true
      args:
        - "./scripts/setup-credentials.sh"
      env:
        BUILDER_NUM: ${builder_num}
        BUILD_VARIANT: ${build_variant}
        EXECUTION: ${execution}
        PASSWD: ${passwd}
        SLAVE: ${slave}
        TASK_NAME: ${task_name}

  "start mongod":
    command: subprocess.exec
    params:
      # binary must be bash (with the script passed via args), not the script
      # directly: Windows can't execute a shebang script as a native binary.
      binary: bash
      working_dir: src/github.com/mongodb/mongo-tools
      background: true
      args:
        - "./scripts/start-mongod.sh"
      env:
        ADDITIONAL_ARGS: ${additional_args}
        AWS_AUTH: ${AWS_AUTH}
        EXTENSION: ${extension}
        LOGFILE: ${logfile|run.log}
        MONGOD_ARGS: ${mongod_args}
        MONGOD_ARGS_TLS: ${mongod_args_tls}
        MONGOD_PORT: ${mongod_port}
        STORAGE_ENGINE: ${STORAGE_ENGINE}
        USE_TLS: ${USE_TLS}

  "wait for mongod to be ready":
    command: subprocess.exec
    params:
      # binary must be bash (with the script passed via args), not the script
      # directly: Windows can't execute a shebang script as a native binary.
      binary: bash
      working_dir: src/github.com/mongodb/mongo-tools
      args:
        - "./scripts/wait-for-mongod.sh"
      env:
        AWS_AUTH: ${AWS_AUTH}
        EXTENSION: ${extension}
        MONGO_ARGS: ${mongo_args}
        MONGO_ARGS_TLS: ${mongo_args_tls}
        USE_TLS: ${USE_TLS}

  "create mongod users":
    - command: subprocess.exec
      params:
        # binary must be bash (with the script passed via args), not the script
        # directly: Windows can't execute a shebang script as a native binary.
        binary: bash
        working_dir: src/github.com/mongodb/mongo-tools
        args:
          - "./scripts/create-mongod-users.sh"
        env:
          AUTH_PASSWORD: ${auth_password}
          AUTH_USERNAME: ${auth_username}
          EXTENSION: ${extension}
          MONGO_ARGS: ${mongo_args}
          MONGO_ARGS_TLS: ${mongo_args_tls}
          USE_TLS: ${USE_TLS}

  "create release artifacts":
    # build release artifacts
    - command: subprocess.exec
      params:
        # binary must be bash (with the script passed via args), not the script
        # directly: Windows can't execute a shebang script as a native binary.
        binary: bash
        working_dir: src/github.com/mongodb/mongo-tools
        args:
          - "./scripts/build-release-archive.sh"
        env:
          EVG_BUILD_ID: ${build_id}
          EVG_IS_PATCH: ${is_patch}
          EVG_TRIGGERED_BY_TAG: ${triggered_by_git_tag}
          EVG_VARIANT: ${build_variant}
          EVG_VERSION: ${version_id}
          EVG_WORKDIR: ${workdir}
          FAKE_TAG_FOR_RELEASE_TESTING: ${fake_tag_for_release_testing}
          PLATFORM_OVERRIDE: ${_platform}

    # temporary workaround for TOOLS-2606
    - command: shell.exec
      params:
        shell: bash
        working_dir: src/github.com/mongodb/mongo-tools
        script: |
          set -o errexit
          set -o pipefail
          set -o verbose

          rm -rf ./mongorestore/testdata/longcollectionname/

    # upload individual release artifacts to task page
    - command: s3.put
      params:
        aws_key: ${aws_key}
        aws_secret: ${aws_secret}
        local_files_include_filter:
          - src/github.com/mongodb/mongo-tools/mongodb-database-tools*.deb
          - src/github.com/mongodb/mongo-tools/mongodb-database-tools*.msi
          - src/github.com/mongodb/mongo-tools/mongodb-database-tools*.rpm
          - src/github.com/mongodb/mongo-tools/mongodb-database-tools*.tgz
          - src/github.com/mongodb/mongo-tools/mongodb-database-tools*.zip
        remote_file: mongo-tools/pkgs/${build_id}/
        content_type: application/octet-stream
        bucket: mciuploads
        permissions: public-read
        display_name: "Release Artifact - "

    # pack all release artifacts into a tarball and upload them to one
    # place so that they can be more easily downloaded by the sign task
    - command: archive.targz_pack
      params:
        target: src/github.com/mongodb/mongo-tools/upload.tgz
        source_dir: src/github.com/mongodb/mongo-tools
        include:
          - mongodb-database-tools*.deb
          - mongodb-database-tools*.msi
          - mongodb-database-tools*.rpm
          - mongodb-database-tools*.tgz
          - mongodb-database-tools*.zip
    - command: s3.put
      params:
        aws_key: ${aws_key}
        aws_secret: ${aws_secret}
        local_file: src/github.com/mongodb/mongo-tools/upload.tgz
        remote_file: mongo-tools/task/dist/${build_id}/all-release-artifacts.tgz
        content_type: application/x-gzip
        bucket: mciuploads
        permissions: public-read
        display_name: All Release Artifacts (.tgz)

  "fetch dist release artifacts":
    - command: s3.get
      params:
        aws_key: ${aws_key}
        aws_secret: ${aws_secret}
        remote_file: mongo-tools/task/dist/${build_id}/all-release-artifacts.tgz
        extract_to: src/github.com/mongodb/mongo-tools/
        bucket: mciuploads

  "sign artifacts":
    - command: subprocess.exec
      params:
        # binary must be bash (with the script passed via args), not the script
        # directly: Windows can't execute a shebang script as a native binary.
        binary: bash
        working_dir: src/github.com/mongodb/mongo-tools
        args:
          - "./scripts/sign_artifacts.sh"
        env:
          ARTIFACTORY_PASSWORD: ${artifactory_password}
          ARTIFACTORY_USERNAME: ${artifactory_username}
          AUTHENTICODE_KEY_NAME: ${authenticode_key_name}
          EVG_TASK_ID: ${task_id}
          EVG_TRIGGERED_BY_TAG: ${triggered_by_git_tag}
          GARASIGN_PASSWORD: ${garasign_password}
          GARASIGN_USERNAME: ${garasign_username}
          MACOS_NOTARY_KEY: ${MACOS_NOTARY_KEY}
          MACOS_NOTARY_SECRET: ${MACOS_NOTARY_SECRET}

  "upload signed release artifacts":
    # temporary workaround for TOOLS-2606
    - command: shell.exec
      params:
        shell: bash
        working_dir: src/github.com/mongodb/mongo-tools
        script: |
          set -o errexit
          set -o pipefail
          set -o verbose

          rm -rf ./mongorestore/testdata/longcollectionname/
    - command: s3.put
      params:
        aws_key: ${aws_key}
        aws_secret: ${aws_secret}
        local_files_include_filter:
          - src/github.com/mongodb/mongo-tools/mongodb-database-tools*.sig
          - src/github.com/mongodb/mongo-tools/mongodb-database-tools*.deb
          - src/github.com/mongodb/mongo-tools/mongodb-database-tools*.msi
          - src/github.com/mongodb/mongo-tools/mongodb-database-tools*.rpm
          - src/github.com/mongodb/mongo-tools/mongodb-database-tools*.tgz
          - src/github.com/mongodb/mongo-tools/mongodb-database-tools*.zip
        remote_file: mongo-tools/task/sign/${build_id}/
        bucket: mciuploads
        permissions: public-read
        content_type: application/octet-stream

  "upload release packages to s3":
    - command: subprocess.exec
      params:
        # binary must be bash (with the script passed via args), not the script
        # directly: Windows can't execute a shebang script as a native binary.
        binary: bash
        working_dir: src/github.com/mongodb/mongo-tools
        args:
          - "./scripts/upload-release.sh"
        env:
          EVG_BUILD_ID: ${build_id}
          EVG_IS_PATCH: ${is_patch}
          EVG_KEY: ${evg_key}
          EVG_TRIGGERED_BY_TAG: ${triggered_by_git_tag}
          EVG_USER: ${evg_user}
          EVG_VARIANT: ${build_variant}
          EVG_VERSION: ${version_id}
          EVG_WORKDIR: ${workdir}
          FAKE_TAG_FOR_RELEASE_TESTING: ${fake_tag_for_release_testing}
          PLATFORM_OVERRIDE: ${_platform}

  "upload release json feed to s3":
    - command: subprocess.exec
      params:
        # binary must be bash (with the script passed via args), not the script
        # directly: Windows can't execute a shebang script as a native binary.
        binary: bash
        working_dir: src/github.com/mongodb/mongo-tools
        args:
          - "./scripts/upload-release-json.sh"
        env:
          EVG_BUILD_ID: ${build_id}
          EVG_IS_PATCH: ${is_patch}
          EVG_KEY: ${evg_key}
          EVG_TRIGGERED_BY_TAG: ${triggered_by_git_tag}
          EVG_USER: ${evg_user}
          EVG_VARIANT: ${build_variant}
          EVG_VERSION: ${version_id}
          EVG_WORKDIR: ${workdir}
          FAKE_TAG_FOR_RELEASE_TESTING: ${fake_tag_for_release_testing}
          PLATFORM_OVERRIDE: ${_platform}
    - command: s3.put
      params:
        aws_key: ${aws_key}
        aws_secret: ${aws_secret}
        local_file: src/github.com/mongodb/mongo-tools/release.json
        remote_file: mongo-tools/release/${build_id}/
        optional: true
        content_type: application/json
        bucket: mciuploads
        permissions: public-read

  "generate full JSON feed":
    - command: subprocess.exec
      params:
        # binary must be bash (with the script passed via args), not the script
        # directly: Windows can't execute a shebang script as a native binary.
        binary: bash
        working_dir: src/github.com/mongodb/mongo-tools
        args:
          - "./scripts/generate-full-json-feed.sh"
        env:
          EVG_BUILD_ID: ${build_id}
          EVG_IS_PATCH: ${is_patch}
          EVG_TRIGGERED_BY_TAG: ${triggered_by_git_tag}
          EVG_VARIANT: ${build_variant}
          EVG_VERSION: ${version_id}
          EVG_WORKDIR: ${workdir}
          FAKE_TAG_FOR_RELEASE_TESTING: ${fake_tag_for_release_testing}
          PLATFORM_OVERRIDE: ${_platform}

  "upload release packages to linux repos":
    - command: shell.exec
      params:
        shell: bash
        working_dir: src/github.com/mongodb/mongo-tools
        script: |
          set -o errexit
          set -o pipefail
          set -o verbose

          curl -L -O http://boxes.10gen.com/build/curator/curator-dist-rhel70-latest.tar.gz
          tar -zxvf curator-dist-rhel70-latest.tar.gz
    - command: subprocess.exec
      params:
        # binary must be bash (with the script passed via args), not the script
        # directly: Windows can't execute a shebang script as a native binary.
        binary: bash
        working_dir: src/github.com/mongodb/mongo-tools
        args:
          - "./scripts/linux-release.sh"
        env:
          BARQUE_API_KEY: ${barque_api_key}
          BARQUE_USERNAME: ${barque_username}
          EVG_BUILD_ID: ${build_id}
          EVG_IS_PATCH: ${is_patch}
          EVG_KEY: ${evg_key}
          EVG_TRIGGERED_BY_TAG: ${triggered_by_git_tag}
          EVG_USER: ${evg_user}
          EVG_VARIANT: ${build_variant}
          EVG_VERSION: ${version_id}
          EVG_WORKDIR: ${workdir}
          FAKE_TAG_FOR_RELEASE_TESTING: ${fake_tag_for_release_testing}
          PLATFORM_OVERRIDE: ${_platform}

  "fetch source":
    - command: shell.exec
      params:
        shell: bash
        script: |
          set -o errexit
          set -o pipefail
          set -o verbose

          mkdir -p src/github.com/mongodb
    - command: git.get_project
      params:
        directory: src/github.com/mongodb/mongo-tools
    - command: git.apply_patch
      params:
        directory: src/github.com/mongodb/mongo-tools
    - command: shell.exec
      params:
        shell: bash
        working_dir: src/github.com/mongodb/mongo-tools
        script: |
          set -o errexit
          set -o pipefail
          set -o verbose

          mkdir -p bin

  "create repl_set":
    - command: subprocess.exec
      params:
        # binary must be bash (with the script passed via args), not the script
        # directly: Windows can't execute a shebang script as a native binary.
        binary: bash
        working_dir: src/github.com/mongodb/mongo-tools
        background: true
        args:
          - "./scripts/create-repl-set.sh"
        env:
          LOAD_LIBS_VERSION: ${load_libs_version}
          MONGOD_PORT: ${mongod_port}
          MONGO_ARGS: ${mongo_args}
          MONGO_ARGS_TLS: ${mongo_args_tls}
          REPLSETTEST_SSL_CONFIG: ${replsettest_ssl_config}
          REPLSETTEST_TLS_CONFIG: ${replsettest_tls_config}
          USE_SSL: ${USE_SSL}
          USE_TLS: ${USE_TLS}

    - command: subprocess.exec
      params:
        # binary must be bash (with the script passed via args), not the script
        # directly: Windows can't execute a shebang script as a native binary.
        binary: bash
        working_dir: src/github.com/mongodb/mongo-tools
        args:
          - "./scripts/wait-for-cluster.sh"
        env:
          MONGOD_PORT: ${mongod_port}
          MONGO_ARGS: ${mongo_args}
          MONGO_ARGS_TLS: ${mongo_args_tls}
          USE_TLS: ${USE_TLS}

  "create sharded cluster":
    - command: subprocess.exec
      params:
        # binary must be bash (with the script passed via args), not the script
        # directly: Windows can't execute a shebang script as a native binary.
        binary: bash
        working_dir: src/github.com/mongodb/mongo-tools
        background: true
        args:
          - "./scripts/create-sharded-cluster.sh"
        env:
          LOAD_LIBS_VERSION: ${load_libs_version}
          MONGOD_PORT: ${mongod_port}

    - command: subprocess.exec
      params:
        # binary must be bash (with the script passed via args), not the script
        # directly: Windows can't execute a shebang script as a native binary.
        binary: bash
        working_dir: src/github.com/mongodb/mongo-tools
        args:
          - "./scripts/wait-for-cluster.sh"
        env:
          MONGOD_PORT: ${mongod_port}
          MONGO_ARGS: ""
          MONGO_ARGS_TLS: ""
          USE_TLS: ""

  "add-aws-auth-variables-to-file":
    - command: subprocess.exec
      type: test
      params:
        # binary must be bash (with the script passed via args), not the script
        # directly: Windows can't execute a shebang script as a native binary.
        binary: bash
        silent: true
        working_dir: src/github.com/mongodb/mongo-tools
        args:
          - "./scripts/add-aws-auth-variables-to-file.sh"
        env:
          IAM_AUTH_ASSUME_AWS_ACCOUNT: ${iam_auth_assume_aws_account}
          IAM_AUTH_ASSUME_AWS_SECRET_ACCESS_KEY: ${iam_auth_assume_aws_secret_access_key}
          IAM_AUTH_ASSUME_ROLE_NAME: ${iam_auth_assume_role_name}

  "setup-aws-auth-test-with-assume-role-credentials":
    - command: subprocess.exec
      type: test
      params:
        # binary must be bash (with the script passed via args), not the script
        # directly: Windows can't execute a shebang script as a native binary.
        binary: bash
        # silent: true
        working_dir: src/github.com/mongodb/mongo-tools
        args:
          - "./scripts/setup-aws-auth-assume-role.sh"
    - command: subprocess.exec
      type: test
      params:
        # binary must be bash (with the script passed via args), not the script
        # directly: Windows can't execute a shebang script as a native binary.
        binary: bash
        silent: true
        working_dir: src/github.com/mongodb/mongo-tools
        args:
          - "./scripts/build-aws-auth-mongod-uri.sh"

  "check sbom lite":
    - command: subprocess.exec
      type: test
      params:
        # binary must be bash (with the script passed via args), not the script
        # directly: Windows can't execute a shebang script as a native binary.
        binary: bash
        working_dir: src/github.com/mongodb/mongo-tools
        args:
          - "./scripts/regenerate-and-diff-sbom-lite.sh"
        env:
          EVG_WORKDIR: ${workdir}

  "check sarif report":
    - command: subprocess.exec
      type: test
      params:
        # binary must be bash (with the script passed via args), not the script
        # directly: Windows can't execute a shebang script as a native binary.
        binary: bash
        working_dir: src/github.com/mongodb/mongo-tools
        args:
          - "./scripts/regenerate-and-diff-sarif-report.sh"
        env:
          EVG_WORKDIR: ${workdir}

  "create evergreen config file":
    - command: subprocess.exec
      type: test
      params:
        # binary must be bash (with the script passed via args), not the script
        # directly: Windows can't execute a shebang script as a native binary.
        binary: bash
        working_dir: src/github.com/mongodb/mongo-tools
        args:
          - "./scripts/write-evergreen-config-file.sh"
        env:
          EVG_KEY: ${evg_key}
          EVG_USER: ${evg_user}

  "set silkbomb credentials":
    - command: ec2.assume_role
      display_name: Assume IAM role with permissions to pull Kondukto API token
      params:
        role_arn: ${kondukto_role_arn}
    - command: shell.exec
      display_name: Pull Kondukto API token from AWS Secrets Manager and write it to file
      params:
        shell: bash
        silent: true
        include_expansions_in_env: [AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN]
        script: |
          set -o errexit
          set -o pipefail
          set -o verbose

          # use AWS CLI to get the Kondukto API token from AWS Secrets Manager
          kondukto_token=$(aws secretsmanager get-secret-value --secret-id "kondukto-token" --region "us-east-1" --query 'SecretString' --output text)
          # set the KONDUKTO_TOKEN environment variable
          echo "KONDUKTO_TOKEN: $kondukto_token" > kondukto_token.yml
    - command: expansions.update
      params:
        file: kondukto_token.yml
        redact_file_expansions: true

pre:
  - command: shell.exec
    params:
      silent: true
      shell: bash
      script: |
        # This script intentionally doesn't set errexit or pipefail, since these commands can fail and that's ok.
        set -o verbose

        ${killall_mci|pkill -9 mongo; pkill -9 mongodump; pkill -9 mongoexport; pkill -9 mongoimport; pkill -9 mongofiles; pkill -9 mongorestore; pkill -9 mongostat; pkill -9 mongotop; pkill -9 mongod; pkill -9 mongos; pkill -f buildlogger.py; pkill -f smoke.py} >/dev/null 2>&1
        rm -rf src /data/db/*
        exit 0
  # Extra pre steps needed for mongodump passthrough.
  - command: expansions.update
    params:
      updates:
        - key: python
          value: "/opt/mongodbtoolchain/v4/bin/python3"
        - key: resmoke_dir
          value: "src/resmoke"
        - key: resmoke_venv_dir
          value: "resmoke-venv"
        - key: mongosync_binary_folder
          value: "mongosync-coverage-binary"
  # Bump these to force-invalidate the mise Evergreen caches (see the "install mise and go" and
  # "install mise-managed tools" functions).
  - command: expansions.update
    params:
      updates:
        - key: mise_and_go_cache_version
          value: v2
        - key: mise_all_tools_cache_version
          value: v3

post:
  # attach.results works for jstests, gotest.parse_files for golang tests
  - command: attach.results
    params:
      file_location: src/github.com/mongodb/mongo-tools/report.json
  - command: gotest.parse_files
    params:
      files: ["src/github.com/mongodb/mongo-tools/testing_output/*.suite"]
  - command: shell.exec
    params:
      shell: bash
      silent: true
      script: |
        # This script intentionally doesn't set errexit or pipefail, since these commands can fail and that's ok.
        set -o verbose

        ${killall_mci|pkill -9 mongo; pkill -9 mongodump; pkill -9 mongoexport; pkill -9 mongoimport; pkill -9 mongofiles; pkill -9 mongorestore; pkill -9 mongostat; pkill -9 mongotop; pkill -9 mongod; pkill -9 mongos; pkill -f buildlogger.py; pkill -f smoke.py} >/dev/null 2>&1
        exit 0
  - command: shell.exec
    params:
      shell: bash
      script: |
        set -o errexit
        set -o pipefail
        set -o verbose

        rm -rf /data/db/*
        exit 0
  # Extra post steps needed for mongodump passthrough.
  - func: f_resmoke_report_attach
  - func: "attach artifacts"
  - func: f_mongo_coredumps_save

timeout:
  - command: subprocess.exec
    params:
      # binary must be bash (with the script passed via args), not the script
      # directly: Windows can't execute a shebang script as a native binary.
      binary: bash
      silent: true
      working_dir: src/github.com/mongodb/mongo-tools
      args:
        - "./scripts/timeout-abort-hung-tools.sh"
      env:
        KILLALL_MCI: ${killall_mci}
  # Extra timeout steps needed for mongodump passthrough.
  - func: f_expansions_write
  - func: "wait for resmoke to shutdown"

tasks:
  - name: dist
    tags: ["git_tag"]
    commands:
      - func: "fetch source"
      - func: "install mise and go"
      - func: "run make target"
        vars:
          target: checkMinVersion
      - func: "run make target"
        vars:
          target: build
      - func: "create release artifacts"

  # Identical to "dist", except it uses "install go without mise" instead of
  # "install mise and go", since mise has no builds at all for ppc64le or s390x. Used only by the
  # ppc64le/s390x buildvariants below.
  - name: dist-without-mise
    tags: ["git_tag"]
    commands:
      - func: "fetch source"
      - func: "install go without mise"
      - func: "run make target"
        vars:
          target: checkMinVersion
      - func: "run make target"
        vars:
          target: build
      - func: "create release artifacts"

  # Regardless of the buildvariant, the sign task must be run on a
  # distro that has the notary client available. We will use
  # amazon1-2018-test for this purpose. The notary client is not
  # available on all distros, which is why sign must be a separate task.
  - name: sign
    tags: ["git_tag"]
    depends_on:
      - name: dist
    commands:
      - func: "fetch source"
      - func: "fetch dist release artifacts"
      - func: "install mise and go"
      - func: "sign artifacts"
      - func: "upload signed release artifacts"

  - name: push
    tags: ["git_tag"]
    depends_on:
      - name: sign
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "upload release packages to s3"
      - func: "upload release packages to linux repos"
      - command: subprocess.exec
        params:
          binary: bash
          working_dir: src/github.com/mongodb/mongo-tools
          args:
            - "./scripts/set-expansions-for-papertrail.sh"
      - command: expansions.update
        params:
          file: src/github.com/mongodb/mongo-tools/expansions.yml
      - func: "fetch dist release artifacts"
      - command: papertrail.trace
        params:
          key_id: ${papertrail_key_id}
          secret_key: ${papertrail_secret_key}
          product: ${product_name}
          version: ${release_tag}
          filenames:
            - "./src/github.com/mongodb/mongo-tools/mongodb-database-tools*"

  - name: check-augmented-sbom
    tags: ["git_tag"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "set silkbomb credentials"
      - func: "install mise and go"
      - command: subprocess.exec
        params:
          # binary must be bash (with the script passed via args), not the script
          # directly: Windows can't execute a shebang script as a native binary.
          binary: bash
          working_dir: src/github.com/mongodb/mongo-tools
          args:
            - "./scripts/regenerate-and-diff-augmented-sbom.sh"
          include_expansions_in_env: [KONDUKTO_TOKEN]
          env:
            EVG_TRIGGERED_BY_TAG: ${triggered_by_git_tag}

  - name: release-json
    tags: ["git_tag"]
    depends_on:
      - name: push
        variant: "*"
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "upload release json feed to s3"

  - name: generate-full-json
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "generate full JSON feed"

  - name: integration-4.2
    tags: ["4.2"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "4.2"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true ${testArgs}

  - name: integration-4.2-auth
    tags: ["4.2", "auth"]
    commands:
      - func: "fetch source"
      # Concat auth args
      - command: expansions.update
        params:
          updates:
            - key: "mongod_args"
              concat: " --auth"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "4.2"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "create mongod users"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -auth=true ${testArgs}

  - name: integration-4.4
    tags: ["4.4"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "4.4"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true ${testArgs}

  - name: integration-4.4-auth
    tags: ["4.4", "auth"]
    commands:
      - func: "fetch source"
      # Concat auth args
      - command: expansions.update
        params:
          updates:
            - key: "mongod_args_tls"
              concat: " --auth"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "4.4"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "create mongod users"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -auth=true ${testArgs}

  - name: integration-4.4-cluster
    tags: ["4.4", "cluster"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "4.4"
      - func: "create repl_set"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -topology=replSet ${testArgs}

  - name: integration-5.0
    tags: ["5.0"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "5.0"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true ${testArgs}

  - name: integration-5.0-auth
    tags: ["5.0", "auth"]
    commands:
      - func: "fetch source"
      # Concat auth args
      - command: expansions.update
        params:
          updates:
            - key: "mongod_args_tls"
              concat: " --auth"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "5.0"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "create mongod users"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -auth=true ${testArgs}

  - name: integration-5.0-cluster
    tags: ["5.0", "cluster"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "5.0"
      - func: "create repl_set"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -topology=replSet ${testArgs}

  - name: aws-auth-5.0
    tags: ["5.0", "aws-auth"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "5.0"
      - func: "start mongod"
        vars:
          AWS_AUTH: "true"
      - func: "wait for mongod to be ready"
        vars:
          AWS_AUTH: "true"
      - func: "add-aws-auth-variables-to-file"
      - func: "setup-aws-auth-test-with-assume-role-credentials"
      - func: "run make target"
        vars:
          target: test:awsauth ${testArgs}

  - name: integration-6.0
    tags: ["6.0"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "6.0"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true ${testArgs}

  - name: integration-6.0-auth
    tags: ["6.0", "auth"]
    commands:
      - func: "fetch source"
      # Concat auth args
      - command: expansions.update
        params:
          updates:
            - key: "mongod_args_tls"
              concat: " --auth"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "6.0"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "create mongod users"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -auth=true ${testArgs}

  - name: integration-6.0-cluster
    tags: ["6.0", "cluster"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "6.0"
      - func: "create repl_set"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -topology=replSet ${testArgs}

  - name: aws-auth-6.0
    tags: ["6.0", "aws-auth"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "6.0"
      - func: "start mongod"
        vars:
          AWS_AUTH: "true"
      - func: "wait for mongod to be ready"
        vars:
          AWS_AUTH: "true"
      - func: "add-aws-auth-variables-to-file"
      - func: "setup-aws-auth-test-with-assume-role-credentials"
      - func: "run make target"
        vars:
          target: test:awsauth ${testArgs}

  - name: integration-7.0
    tags: ["7.0"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "7.0"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true ${testArgs}

  - name: integration-7.0-auth
    tags: ["7.0", "auth"]
    commands:
      - func: "fetch source"
      # Concat auth args
      - command: expansions.update
        params:
          updates:
            - key: "mongod_args_tls"
              concat: " --auth"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "7.0"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "create mongod users"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -auth=true ${testArgs}

  - name: integration-7.0-cluster
    tags: ["7.0", "cluster"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "7.0"
      - func: "create repl_set"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -topology=replSet ${testArgs}

  - name: aws-auth-7.0
    tags: ["7.0", "aws-auth"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "7.0"
      - func: "start mongod"
        vars:
          AWS_AUTH: "true"
      - func: "wait for mongod to be ready"
        vars:
          AWS_AUTH: "true"
      - func: "add-aws-auth-variables-to-file"
      - func: "setup-aws-auth-test-with-assume-role-credentials"
      - func: "run make target"
        vars:
          target: test:awsauth ${testArgs}

  - name: integration-8.0
    tags: ["8.0"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.0"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true ${testArgs}

  - name: integration-8.0-auth
    tags: ["8.0", "auth"]
    commands:
      - func: "fetch source"
      # Concat auth args
      - command: expansions.update
        params:
          updates:
            - key: "mongod_args_tls"
              concat: " --auth"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.0"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "create mongod users"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -auth=true ${testArgs}

  - name: integration-8.0-cluster
    tags: ["8.0", "cluster"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.0"
      - func: "create repl_set"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -topology=replSet ${testArgs}

  - name: aws-auth-8.0
    tags: ["8.0", "aws-auth"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.0"
      - func: "start mongod"
        vars:
          AWS_AUTH: "true"
      - func: "wait for mongod to be ready"
        vars:
          AWS_AUTH: "true"
      - func: "add-aws-auth-variables-to-file"
      - func: "setup-aws-auth-test-with-assume-role-credentials"
      - func: "run make target"
        vars:
          target: test:awsauth ${testArgs}

  - name: integration-8.1
    tags: ["8.1"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.1.0"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true ${testArgs}

  - name: integration-8.1-auth
    tags: ["8.1", "auth"]
    commands:
      - func: "fetch source"
      # Concat auth args
      - command: expansions.update
        params:
          updates:
            - key: "mongod_args_tls"
              concat: " --auth"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.1.0"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "create mongod users"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -auth=true ${testArgs}

  - name: integration-8.1-cluster
    tags: ["8.1", "cluster"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.1.0"
      - func: "create repl_set"
        vars:
          USE_TLS: "true"
          load_libs_version: "8.1"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -topology=replSet ${testArgs}

  - name: aws-auth-8.1
    tags: ["8.1", "aws-auth"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.1.0"
      - func: "start mongod"
        vars:
          AWS_AUTH: "true"
      - func: "wait for mongod to be ready"
        vars:
          AWS_AUTH: "true"
      - func: "add-aws-auth-variables-to-file"
      - func: "setup-aws-auth-test-with-assume-role-credentials"
      - func: "run make target"
        vars:
          target: test:awsauth ${testArgs}

  - name: integration-8.2
    tags: ["8.2"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.2.0"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true ${testArgs}

  - name: integration-8.2-auth
    tags: ["8.2", "auth"]
    commands:
      - func: "fetch source"
      # Concat auth args
      - command: expansions.update
        params:
          updates:
            - key: "mongod_args_tls"
              concat: " --auth"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.2.0"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "create mongod users"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -auth=true ${testArgs}

  - name: integration-8.2-cluster
    tags: ["8.2", "cluster"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.2.0"
      - func: "create repl_set"
        vars:
          USE_TLS: "true"
          load_libs_version: "8.2"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -topology=replSet ${testArgs}

  - name: aws-auth-8.2
    tags: ["8.2", "aws-auth"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.2.0"
      - func: "start mongod"
        vars:
          AWS_AUTH: "true"
      - func: "wait for mongod to be ready"
        vars:
          AWS_AUTH: "true"
      - func: "add-aws-auth-variables-to-file"
      - func: "setup-aws-auth-test-with-assume-role-credentials"
      - func: "run make target"
        vars:
          target: test:awsauth ${testArgs}

  - name: integration-8.3
    tags: ["8.3"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.3.0-rc4"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true ${testArgs}

  - name: integration-8.3-auth
    tags: ["8.3", "auth"]
    commands:
      - func: "fetch source"
      # Concat auth args
      - command: expansions.update
        params:
          updates:
            - key: "mongod_args_tls"
              concat: " --auth"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.3.0-rc4"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "create mongod users"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -auth=true ${testArgs}

  - name: integration-8.3-cluster
    tags: ["8.3", "cluster"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.3.0-rc4"
      - func: "create repl_set"
        vars:
          USE_TLS: "true"
          load_libs_version: "8.3"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -topology=replSet ${testArgs}

  - name: aws-auth-8.3
    tags: ["8.3", "aws-auth"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.3.0-rc4"
      - func: "start mongod"
        vars:
          AWS_AUTH: "true"
      - func: "wait for mongod to be ready"
        vars:
          AWS_AUTH: "true"
      - func: "add-aws-auth-variables-to-file"
      - func: "setup-aws-auth-test-with-assume-role-credentials"
      - func: "run make target"
        vars:
          target: test:awsauth ${testArgs}

  - name: integration-9.0
    tags: ["9.0"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "9.0.0-alpha2"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true ${testArgs}

  - name: integration-9.0-auth
    tags: ["9.0", "auth"]
    commands:
      - func: "fetch source"
      # Concat auth args
      - command: expansions.update
        params:
          updates:
            - key: "mongod_args_tls"
              concat: " --auth"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "9.0.0-alpha2"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "create mongod users"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -auth=true ${testArgs}

  - name: integration-9.0-cluster
    tags: ["9.0", "cluster"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "9.0.0-alpha2"
      - func: "create repl_set"
        vars:
          USE_TLS: "true"
          load_libs_version: "9.0"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -topology=replSet ${testArgs}

  - name: aws-auth-9.0
    tags: ["9.0", "aws-auth"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          edition: "enterprise"
          mongo_version: "9.0.0-alpha2"
      - func: "start mongod"
        vars:
          AWS_AUTH: "true"
      - func: "wait for mongod to be ready"
        vars:
          AWS_AUTH: "true"
      - func: "add-aws-auth-variables-to-file"
      - func: "setup-aws-auth-test-with-assume-role-credentials"
      - func: "run make target"
        vars:
          target: test:awsauth ${testArgs}

  - name: integration-latest
    tags: ["latest"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "latest"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true ${testArgs}

  - name: integration-latest-auth
    tags: ["latest", "auth"]
    commands:
      - func: "fetch source"
      # Concat auth args
      - command: expansions.update
        params:
          updates:
            - key: "mongod_args_tls"
              concat: " --auth"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "latest"
      - func: "start mongod"
        vars:
          USE_TLS: "true"
      - func: "wait for mongod to be ready"
        vars:
          USE_TLS: "true"
      - func: "create mongod users"
        vars:
          USE_TLS: "true"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -auth=true ${testArgs}

  - name: integration-latest-cluster
    tags: ["latest", "cluster"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "latest"
      - func: "create repl_set"
        vars:
          USE_TLS: "true"
          load_libs_version: *max_server_version
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:integration -ssl=true -topology=replSet ${testArgs}

  - name: integration-4.4-sharded
    tags: ["4.4", "sharded"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "4.4"
      - func: "create sharded cluster"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:sharded-integration ${testArgs}

  - name: integration-5.0-sharded
    tags: ["5.0", "sharded"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "5.0"
      - func: "create sharded cluster"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:sharded-integration ${testArgs}

  - name: integration-6.0-sharded
    tags: ["6.0", "sharded"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "6.0"
      - func: "create sharded cluster"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:sharded-integration ${testArgs}

  - name: integration-7.0-sharded
    tags: ["7.0", "sharded"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "7.0"
      - func: "create sharded cluster"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:sharded-integration ${testArgs}

  - name: integration-8.0-sharded
    tags: ["8.0", "sharded"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.0"
      - func: "create sharded cluster"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:sharded-integration ${testArgs}

  - name: integration-8.1-sharded
    tags: ["8.1", "sharded"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.1.0"
      - func: "create sharded cluster"
        vars:
          load_libs_version: "8.1"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:sharded-integration ${testArgs}

  - name: integration-8.2-sharded
    tags: ["8.2", "sharded"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.2.0"
      - func: "create sharded cluster"
        vars:
          load_libs_version: "8.2"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:sharded-integration ${testArgs}

  - name: integration-latest-sharded
    tags: ["latest", "sharded"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "latest"
      - func: "create sharded cluster"
        vars:
          load_libs_version: *max_server_version
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:sharded-integration ${testArgs}

  - name: aws-auth-latest
    tags: ["latest", "aws-auth"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "latest"
      - func: "start mongod"
        vars:
          AWS_AUTH: "true"
      - func: "wait for mongod to be ready"
        vars:
          AWS_AUTH: "true"
      - func: "add-aws-auth-variables-to-file"
      - func: "setup-aws-auth-test-with-assume-role-credentials"
      - func: "run make target"
        vars:
          target: test:awsauth ${testArgs}

  - name: aws-auth-4.4
    tags: ["4.4", "aws-auth"]
    commands:
      - func: "fetch source"
      - command: expansions.update
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "4.4"
      - func: "start mongod"
        vars:
          AWS_AUTH: "true"
      - func: "wait for mongod to be ready"
        vars:
          AWS_AUTH: "true"
      - func: "add-aws-auth-variables-to-file"
      - func: "setup-aws-auth-test-with-assume-role-credentials"
      - func: "run make target"
        vars:
          target: test:awsauth ${testArgs}

  - name: kerberos
    tags: ["kerberos"]
    commands:
      - func: "fetch source"
      # Explicitly run ONLY Kerberos tests
      - command: expansions.update
        params:
          updates:
            - key: "args"
              value: "${args} -test.types=kerberos"
      - func: "setup integration test"
      - func: "install mise and go"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:kerberos ${testArgs}

  - name: legacy-jstests-4.2 # The server jstests from the tools removal from server in 4.2
    tags: ["4.2"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "4.2"
      - func: "run make target"
        vars:
          target: build
      - func: "run legacy tests"
        vars:
          test_path: "test/legacy42"

  - name: legacy-jstests-4.4 # The server jstests from the tools removal from server in 4.2
    tags: ["4.4"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "4.4"
      - func: "run make target"
        vars:
          target: build
      - func: "run legacy tests"
        vars:
          test_path: "test/legacy42"

  - name: legacy-jstests-5.0 # The server jstests from the tools removal from server in 4.2
    tags: ["5.0"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "5.0"
      - func: "run make target"
        vars:
          target: build
      - func: "run legacy tests"
        vars:
          test_path: "test/legacy42"

  - name: legacy-jstests-6.0 # The server jstests from the tools removal from server in 4.2
    tags: ["6.0"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "6.0"
      - func: "run make target"
        vars:
          target: build
      - func: "run legacy tests"
        vars:
          test_path: "test/legacy42"

  - name: legacy-jstests-7.0 # The server jstests from the tools removal from server in 4.2
    tags: ["7.0"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "7.0"
      - func: "run make target"
        vars:
          target: build
      - func: "run legacy tests"
        vars:
          test_path: "test/legacy42"

  - name: legacy-jstests-8.0 # The server jstests from the tools removal from server in 4.2
    tags: ["8.0"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.0"
      - func: "run make target"
        vars:
          target: build
      - func: "run legacy tests"
        vars:
          test_path: "test/legacy42"

  - name: legacy-jstests-8.1 # The server jstests from the tools removal from server in 4.2
    tags: ["8.1"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.1.0"
      - func: "run make target"
        vars:
          target: build
      - func: "run legacy tests"
        vars:
          test_path: "test/legacy42"
          load_libs_version: "8.1"

  - name: legacy-jstests-8.2 # The server jstests from the tools removal from server in 4.2
    tags: ["8.2"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.2.0"
      - func: "run make target"
        vars:
          target: build
      - func: "run legacy tests"
        vars:
          test_path: "test/legacy42"
          load_libs_version: "8.2"

  - name: legacy-jstests-8.3 # The server jstests from the tools removal from server in 4.2
    tags: ["8.3"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.3.0-rc4"
      - func: "run make target"
        vars:
          target: build
      - func: "run legacy tests"
        vars:
          test_path: "test/legacy42"
          load_libs_version: "8.3"

  - name: legacy-jstests-9.0 # The server jstests from the tools removal from server in 4.2
    tags: ["9.0"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "9.0.0-alpha2"
      - func: "run make target"
        vars:
          target: build
      - func: "run legacy tests"
        vars:
          test_path: "test/legacy42"
          load_libs_version: "9.0"

  - name: legacy-jstests-latest # The server jstests from the tools removal from server in 4.2
    tags: ["latest"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "latest"
      - func: "run make target"
        vars:
          target: build
      - func: "run legacy tests"
        vars:
          test_path: "test/legacy42"
          load_libs_version: *max_server_version

  - name: mod-tidy
    commands:
      - func: "fetch source"
      - func: "install mise and go"
      - func: "run make target"
        vars:
          target: sa:modtidy

  - name: lint
    commands:
      - func: "fetch source"
      - func: "install mise and go"
      - func: "install mise-managed tools"
      - func: "create evergreen config file"
      - command: subprocess.exec
        type: test
        params:
          # binary must be bash (with the script passed via args), not the script
          # directly: Windows can't execute a shebang script as a native binary.
          binary: bash
          working_dir: src/github.com/mongodb/mongo-tools
          args:
            - "./scripts/lint.sh"
          env:
            EVG_WORKDIR: ${workdir}

  - name: qa-tests-5.0
    tags: ["5.0"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "5.0"
      - func: "run make target"
        vars:
          target: build
      - func: "run qa-tests"
        vars:
          resmoke_suite: "core${resmoke_use_tls}"
          excludes: "requires_unstable,${excludes}"

  - name: qa-tests-6.0
    tags: ["6.0"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "6.0"
      - func: "run make target"
        vars:
          target: build
      - func: "run qa-tests"
        vars:
          resmoke_suite: "core${resmoke_use_tls}"
          excludes: "requires_unstable,${excludes}"

  - name: qa-tests-7.0
    tags: ["7.0"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "7.0"
      - func: "run make target"
        vars:
          target: build
      - func: "run qa-tests"
        vars:
          resmoke_suite: "core${resmoke_use_tls}"
          excludes: "requires_unstable,${excludes}"

  - name: qa-tests-8.0
    tags: ["8.0"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.0"
      - func: "run make target"
        vars:
          target: build
      - func: "run qa-tests"
        vars:
          resmoke_suite: "core${resmoke_use_tls}"
          excludes: "requires_unstable,${excludes}"

  - name: qa-tests-8.1
    tags: ["8.1"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.1.0"
      - func: "run make target"
        vars:
          target: build
      - func: "run qa-tests"
        vars:
          resmoke_suite: "core${resmoke_use_tls}"
          excludes: "requires_unstable,${excludes}"

  - name: qa-tests-8.2
    tags: ["8.2"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.2.0"
      - func: "run make target"
        vars:
          target: build
      - func: "run qa-tests"
        vars:
          resmoke_suite: "core${resmoke_use_tls}"
          excludes: "requires_unstable,${excludes}"

  - name: qa-tests-8.3
    tags: ["8.3"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "8.3.0-rc4"
      - func: "run make target"
        vars:
          target: build
      - func: "run qa-tests"
        vars:
          resmoke_suite: "core${resmoke_use_tls}"
          excludes: "requires_unstable,${excludes}"

  - name: qa-tests-9.0
    tags: ["9.0"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "9.0.0-alpha2"
      - func: "run make target"
        vars:
          target: build
      - func: "run qa-tests"
        vars:
          resmoke_suite: "core${resmoke_use_tls}"
          excludes: "requires_unstable,${excludes}"

  - name: qa-tests-latest
    tags: ["latest"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "latest"
      - func: "run make target"
        vars:
          target: build
      - func: "run qa-tests"
        vars:
          resmoke_suite: "core${resmoke_use_tls}"
          excludes: "requires_unstable,${excludes}"

  - name: qa-tests-4.4
    tags: ["4.4"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "4.4"
      - func: "run make target"
        vars:
          target: build
      - func: "run qa-tests"
        vars:
          resmoke_suite: "core${resmoke_use_tls}"
          excludes: "requires_unstable,${excludes}"

  - name: qa-tests-4.2
    tags: ["4.2"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "4.2"
      - func: "run make target"
        vars:
          target: build
      - func: "run qa-tests"
        vars:
          resmoke_suite: "core${resmoke_use_tls}"
          excludes: "requires_unstable,${excludes}"

  - name: native-cert-ssl-4.4
    tags: ["4.4"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "4.4"
      - func: "run make target"
        vars:
          target: build
      - func: "run native-cert-ssl"

  - name: qa-dump-restore-with-archiving-4.4
    tags: ["4.4"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "4.4"
      - func: "run make target"
        vars:
          target: build -tools=mongodump,mongorestore
      - func: "run qa-tests"
        vars:
          resmoke_suite: "restore_archive"
          excludes: "requires_unstable,${excludes}"

  - name: qa-dump-restore-with-gzip-4.4
    tags: ["4.4"]
    commands:
      - func: "fetch source"
      - func: "get buildnumber"
      - func: "setup credentials"
      - func: "install mise and go"
      - func: "download mongod and shell"
        vars:
          mongo_version: "4.4"
      - func: "run make target"
        vars:
          target: build -tools=mongodump,mongorestore
      - func: "run qa-tests"
        vars:
          resmoke_suite: "restore_gzip"
          excludes: "requires_unstable,${excludes}"

  - name: unit
    commands:
      - command: expansions.update
      - func: "fetch source"
      - func: "install mise and go"
      - func: "run make target"
        vars:
          target: build
      - func: "run make target"
        vars:
          target: test:unit ${testArgs}

  - name: check-third-party-notices
    commands:
      - func: "fetch source"
      - func: "install mise and go"
      - func: "run make target"
        vars:
          target: writeThirdPartyNotices
      - command: shell.exec
        type: test
        params:
          shell: bash
          working_dir: src/github.com/mongodb/mongo-tools
          script: |
            set -o errexit
            set -o pipefail
            set -o verbose

            git diff --exit-code

  - name: check-sbom-lite
    commands:
      - func: "fetch source"
      - func: "install mise and go"
      - func: "check sbom lite"

  - name: check-sarif-report
    commands:
      - func: "fetch source"
      - func: "install mise and go"
      - func: "install mise-managed tools"
      - func: "check sarif report"

buildvariants:
  #######################################
  #     Static Analysis Buildvariant    #
  #######################################

  - name: static
    display_name: "! Static Analysis"
    run_on:
      - rhel80-small
    expansions:
      _platform: rhel80
    tasks:
      - name: lint
      - name: mod-tidy
      - name: check-third-party-notices
      - name: check-sbom-lite
      - name: check-sarif-report

  #######################################
  #     Release Manager Buildvariant    #
  #######################################

  - name: release
    display_name: "! Release Manager"
    tags: ["git_tag"]
    run_on:
      - amazon1-2018-test
    tasks:
      - name: check-augmented-sbom
        # podman is not available on the amazon distro.
        run_on: rhel87-small
      - name: release-json
      - name: generate-full-json

  #######################################
  #     Amazon x86_64 Buildvariants     #
  #######################################

  - name: amazon
    display_name: Amazon Linux 64
    run_on:
      - amazon1-2018-test
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: amazon2
    display_name: Amazon Linux 64 v2
    run_on:
      - amazon2-test
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  #######################################
  #     Debian x86_64 Buildvariants     #
  #######################################

  - name: debian92
    display_name: Debian 9.2
    run_on:
      - debian92-test
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: debian10
    display_name: Debian 10
    run_on:
      - debian10-test
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: debian11
    display_name: Debian 11
    run_on:
      - debian11
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: debian12
    display_name: Debian 12
    run_on:
      - debian12-small
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: debian13
    display_name: Debian 13
    run_on:
      - debian13-small
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  #######################################
  #      macOS x86_64 Buildvariant      #
  #######################################

  - name: macos
    display_name: MacOS 14 x86_64
    run_on:
      - macos-14
    tasks:
      - name: "dist"
      - name: "sign"
      - name: "push"
        run_on: rhel80-small

  #######################################
  #       macOS ARM Buildvariant        #
  #######################################

  - name: macos-arm64
    display_name: MacOS 14 ARM
    run_on:
      - macos-14-arm64
    tasks:
      - name: "dist"
      - name: "sign"
      - name: "push"
        run_on: rhel80-small

  #######################################
  #     RHEL x86_64 Buildvariants       #
  #######################################

  - name: rhel70
    display_name: RHEL 7.0
    run_on:
      - rhel70-small
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: rhel88
    display_name: "# RHEL 8.8"
    cron: 0 3 * * *
    run_on:
      - rhel8.8-large
    expansions:
      <<:
        [
          *mongod_ssl_startup_args,
          *mongo_ssl_startup_args,
          *mongod_tls_startup_args,
          *mongo_tls_startup_args,
        ]
      resmoke_use_tls: _tls
      run_kinit: true
      resmoke_args: --jobs 4
    tasks:
      - name: "unit"
      - name: ".4.2"
      - name: ".4.4"
      - name: ".5.0"
      - name: ".6.0"
      - name: ".7.0"
      - name: ".8.0"
      - name: ".8.1"
      - name: ".8.2"
      - name: ".8.3"
      - name: ".9.0"
      - name: ".latest"
      - name: ".kerberos"
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: rhel88-race
    display_name: RHEL 8.8 w/ Race Detector
    run_on:
      - rhel8.8-large
    expansions:
      <<:
        [
          *mongod_ssl_startup_args,
          *mongo_ssl_startup_args,
          *mongod_tls_startup_args,
          *mongo_tls_startup_args,
        ]
      testArgs: "-race=true"
      resmoke_use_tls: _tls
      run_kinit: true
      resmoke_args: --jobs 4
    tasks:
      - name: "unit"
      - name: ".4.2"
      - name: ".4.4"
      - name: ".5.0"
      - name: ".6.0"
      - name: ".7.0"
      - name: ".8.0"
      - name: ".8.1"
      - name: ".8.2"
      - name: ".8.3"
      - name: ".9.0"
      - name: ".latest"
      - name: ".kerberos"

  - name: rhel93
    display_name: RHEL 9.3
    run_on:
      - rhel93-small
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: rhel10
    display_name: RHEL 10
    run_on:
      - rhel10.0-small
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: amazon2023
    display_name: Amazon Linux 2023
    run_on:
      - amazon2023-small
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  #######################################
  #     SUSE x86_64 Buildvariants       #
  #######################################

  # Skipping kerberos tests on SUSE, see TOOLS-3014

  - name: suse12
    display_name: SUSE 12
    run_on:
      - suse12-sp5-small
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: suse15
    display_name: SUSE 15
    run_on:
      - suse15sp4-small
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: suse16
    display_name: SUSE 16
    run_on:
      - suse16-small
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  #######################################
  #    Ubuntu x86_64 Buildvariants      #
  #######################################

  - name: ubuntu1604
    display_name: Ubuntu 16.04
    run_on:
      - ubuntu1604-test
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: ubuntu1804
    display_name: Ubuntu 18.04
    run_on:
      - ubuntu1804-test
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: ubuntu2004
    display_name: Ubuntu 20.04
    run_on:
      - ubuntu2004-small
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: ubuntu2204
    display_name: Ubuntu 22.04
    run_on:
      - ubuntu2204-small
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: ubuntu2404
    display_name: Ubuntu 24.04
    run_on:
      - ubuntu2404-small
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: ubuntu2604
    display_name: Ubuntu 26.04
    run_on:
      - ubuntu2604-m6i-xlarge
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  #######################################
  #        Windows Buildvariants        #
  #######################################

  - name: windows
    display_name: "# Windows 64-bit"
    run_on:
      - windows-2022-latest-large
    expansions:
      <<:
        [
          *mongod_ssl_startup_args,
          *mongo_ssl_startup_args,
          *mongod_tls_startup_args,
          *mongo_tls_startup_args,
        ]
      mongo_target: "windows"
      python_binary: "/cygdrive/c/python/Python311/python"
      resmoke_args: --jobs 4
      resmoke_use_tls: _tls
      excludes: requires_large_ram,requires_mongo_24
      extension: .exe
      preproc_gpm: "perl -pi -e 's/\\r\\n/\\n/g' "
      USE_SSL: "true"
    tasks:
      - name: "unit"
      - name: ".4.2"
      - name: ".4.4"
      - name: ".5.0"
      - name: ".6.0"
      - name: ".7.0"
      - name: ".8.0"
      - name: ".8.1"
      - name: ".8.2"
      - name: ".8.3"
      - name: ".9.0"
      - name: ".latest"
      - name: ".kerberos"
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  #######################################
  #        ARM Buildvariants            #
  #######################################

  - name: ubuntu1604-arm64
    display_name: ZAP ARM64 Ubuntu 16.04
    run_on:
      - ubuntu1604-arm64
    stepback: false
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: ubuntu1804-arm64
    display_name: ZAP ARM64 Ubuntu 18.04
    run_on:
      - ubuntu1804-arm64
    stepback: false
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: ubuntu2004-arm64
    display_name: ZAP ARM64 Ubuntu 20.04
    run_on:
      - ubuntu2004-arm64
    stepback: false
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: ubuntu2204-arm64
    display_name: ZAP ARM64 Ubuntu 22.04
    run_on:
      - ubuntu2204-arm64-small
    stepback: false
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: ubuntu2404-arm64
    display_name: ZAP ARM64 Ubuntu 24.04
    run_on:
      - ubuntu2404-arm64-small
    stepback: false
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: ubuntu2604-arm64
    display_name: ZAP ARM64 Ubuntu 26.04
    run_on:
      - ubuntu2604-arm64-m7g-xlarge
    stepback: false
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: amazon2-aarch64
    display_name: Amazon Linux ARM v2
    run_on:
      - amazon2-arm64-small
    stepback: false
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: amazon2023-aarch64
    display_name: Amazon Linux 2023 ARM
    run_on:
      - amazon2023-arm64-small
    stepback: false
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: rhel88-aarch64
    display_name: RHEL 8.8 ARM
    run_on:
      - rhel8.8-arm64-small
    stepback: false
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: rhel93-aarch64
    display_name: RHEL 9.3 ARM
    run_on:
      - rhel93-arm64-small
    stepback: false
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  - name: rhel10-aarch64
    display_name: RHEL 10 ARM
    run_on:
      - rhel10.0-arm64-small
    stepback: false
    tasks:
      - name: "dist"
      - name: "sign"
        run_on: rhel87-small
      - name: "push"
        run_on: rhel80-small

  #######################################
  #        Power Buildvariants          #
  #######################################

  - name: rhel71-ppc64le
    display_name: ZAP PPC64LE RHEL 7.1
    run_on:
      - rhel71-power8
    stepback: false
    tasks:
      - name: "dist-without-mise"
      - name: "sign"
        run_on: rhel87-small
        depends_on:
          - name: dist-without-mise
      - name: "push"
        run_on: rhel80-small

  - name: rhel81-ppc64le
    display_name: ZAP PPC64LE RHEL 8.1
    run_on:
      - rhel81-power8
    stepback: false
    tasks:
      - name: "dist-without-mise"
      - name: "sign"
        run_on: rhel87-small
        depends_on:
          - name: dist-without-mise
      - name: "push"
        run_on: rhel80-small

  - name: rhel9-ppc64le
    display_name: ZAP PPC64LE RHEL 9
    run_on:
      - rhel9-power-small
    stepback: false
    tasks:
      - name: "dist-without-mise"
      - name: "sign"
        run_on: rhel87-small
        depends_on:
          - name: dist-without-mise
      - name: "push"
        run_on: rhel80-small

  - name: rhel10-ppc64le
    display_name: ZAP PPC64LE RHEL 10
    run_on:
      - rhel10-power-small
    stepback: false
    tasks:
      - name: "dist-without-mise"
      - name: "sign"
        run_on: rhel87-small
        depends_on:
          - name: dist-without-mise
      - name: "push"
        run_on: rhel80-small

  #######################################
  #     Z (s390x) Buildvariants         #
  #######################################

  - name: rhel72-s390x
    display_name: ZAP s390x RHEL 7.2
    run_on:
      - rhel72-zseries
    stepback: false
    tasks:
      - name: "dist-without-mise"
      - name: "sign"
        run_on: rhel87-small
        depends_on:
          - name: dist-without-mise
      - name: "push"
        run_on: rhel80-small

  - name: rhel83-s390x
    display_name: ZAP s390x RHEL 8.3
    run_on:
      - rhel83-zseries
    stepback: false
    tasks:
      - name: "dist-without-mise"
      - name: "sign"
        run_on: rhel87-small
        depends_on:
          - name: dist-without-mise
      - name: "push"
        run_on: rhel80-small

  - name: rhel9-s390x
    display_name: ZAP s390x RHEL 9
    run_on:
      - rhel9-zseries-small
    stepback: false
    tasks:
      - name: "dist-without-mise"
      - name: "sign"
        run_on: rhel87-small
        depends_on:
          - name: dist-without-mise
      - name: "push"
        run_on: rhel80-small

  - name: rhel10-s390x
    display_name: ZAP s390x RHEL 10
    run_on:
      - rhel10-zseries-small
    stepback: false
    tasks:
      - name: "dist-without-mise"
      - name: "sign"
        run_on: rhel87-small
        depends_on:
          - name: dist-without-mise
      - name: "push"
        run_on: rhel80-small

# This set of aliases is generated by the code in the `evergreen` directory.
# Do not edit this by hand!
# It can be regenerated by running `go run evergreen/generator/main.go`.
github_pr_aliases:
  # Run all static analysis tasks.
  - variant: "^static$"
    task: ".*"
  # Run unit for every platform.
  - variant: ".*"
    task: "^unit$"
  # Run push and record this PR run in Papertrail.
  - variant: ".*"
    task: "^push$"
  # Run golang tests with the race detector enabled.
  - variant: "^rhel88-race$"
    task: "^(aws-auth|integration|kerberos|unit)"
  # Run all integration tests on one variant. We pick RHEL 8.8 because it's
  # a relatively recent platform that supports a wide range of servers.
  - variant: "^rhel88$"
    task: "^(aws-auth|integration|kerberos|legacy|native-cert-ssl|qa-dump-restore|qa-tests)"
  # Run a subset of integration tests against the latest version of MongoDB
  # Server on all variants where that is the most recent supported version.
  - variant: "^(rhel88|windows)$"
    task: "integration-latest"