Skip to content

RUBY-3800 Add test variant for the Atlas Secure Frontend Processor (SFP)#3080

Open
comandeo-mongo wants to merge 4 commits into
mongodb:masterfrom
comandeo-mongo:RUBY-3800-sfp-testing
Open

RUBY-3800 Add test variant for the Atlas Secure Frontend Processor (SFP)#3080
comandeo-mongo wants to merge 4 commits into
mongodb:masterfrom
comandeo-mongo:RUBY-3800-sfp-testing

Conversation

@comandeo-mongo

@comandeo-mongo comandeo-mongo commented Jul 9, 2026

Copy link
Copy Markdown
Contributor

Description

Adds connectivity tests for the Atlas Secure Frontend Processor (SFP, aka monguard), a proxy that sits in front of Atlas clusters. Test-only; no driver source changes. Implements the atlas-sfp-testing specification.

Jira

https://jira.mongodb.org/browse/RUBY-3800

Add SFP (monguard) connectivity tests that run against a preconfigured
Atlas cluster proxied by a Secure Frontend Processor. The tests cover
unauthenticated, SCRAM-SHA-256, and X.509 access, each authenticated
case under baseline, compression, and Server API v1 variations, per the
atlas-sfp-testing specification.

Add a dedicated Evergreen "sfp" build variant with a test-sfp task that
fetches credentials from the drivers/sfp secrets vault and runs the new
spec/sfp suite.
@comandeo-mongo comandeo-mongo added the tracked-in-jira Ticket filed in Mongo's Jira system label Jul 9, 2026
@comandeo-mongo comandeo-mongo force-pushed the RUBY-3800-sfp-testing branch from 4bd6a09 to 124b1be Compare July 15, 2026 13:58
@comandeo-mongo comandeo-mongo marked this pull request as ready for review July 15, 2026 16:33
@comandeo-mongo comandeo-mongo requested a review from a team as a code owner July 15, 2026 16:33
@comandeo-mongo comandeo-mongo requested review from Copilot and jamis and removed request for Copilot July 15, 2026 16:33
…ting

# Conflicts:
#	.mod/drivers-evergreen-tools
Copilot AI review requested due to automatic review settings July 15, 2026 16:38
@comandeo-mongo comandeo-mongo requested a review from Jibola July 15, 2026 16:40

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Adds a new Evergreen test variant and RSpec suite to validate connectivity through the Atlas Secure Frontend Processor (SFP / monguard), implementing the atlas-sfp-testing specification. This is test-only and does not change driver runtime behavior.

Changes:

  • Introduces spec/sfp/sfp_spec.rb covering unauthenticated, SCRAM-SHA-256, and X.509 scenarios, each under baseline/compression/Server API v1 variations.
  • Adds .evergreen/run-tests-sfp.sh to run the SFP spec suite in CI with secrets provisioning.
  • Wires a new test-sfp task and sfp buildvariant into Evergreen configs.

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 1 comment.

Show a summary per file
File Description
spec/sfp/sfp_spec.rb New Atlas SFP connectivity + CRUD RSpec coverage driven by environment variables and spec-defined variations.
.evergreen/run-tests-sfp.sh New Evergreen runner script to execute the SFP RSpec suite.
.evergreen/config/standard.yml.erb Adds the sfp buildvariant matrix to the generated Evergreen config template.
.evergreen/config/common.yml.erb Adds export SFP credentials / run SFP tests functions and the test-sfp task in the template.
.evergreen/config.yml Updates the generated Evergreen config with the new SFP functions/task/buildvariant.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .evergreen/run-tests-sfp.sh
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

tracked-in-jira Ticket filed in Mongo's Jira system

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants