Merge branch 'master' into custom-roles

Author: lucian-tosa

.evergreen-functions.yml

@@ -417,7 +417,8 @@ functions:
           - src/github.com/mongodb/mongodb-kubernetes/logs/*
         remote_file: logs/${task_id}/${execution}/
         bucket: operator-e2e-artifacts
-        permissions: public-read
+        permissions: private
+        visibility: signed
         content_type: text/plain
     - command: attach.xunit_results
       params:
@@ -432,7 +433,8 @@ functions:
           - src/github.com/mongodb/mongodb-kubernetes/logs/*
         remote_file: logs/${task_id}/${execution}/
         bucket: operator-e2e-artifacts
-        permissions: public-read
+        permissions: private
+        visibility: signed
         content_type: text/plain
     - command: gotest.parse_files
       params:
@@ -448,7 +450,8 @@ functions:
           - src/github.com/mongodb/mongodb-kubernetes/public/architectures/**/*.out
         remote_file: logs/${task_id}/${execution}/
         bucket: operator-e2e-artifacts
-        permissions: public-read
+        permissions: private
+        visibility: signed
         content_type: text/plain
 
   preflight_image:

controllers/operator/construct/appdb_construction.go

@@ -33,7 +33,7 @@ import (
 
 const (
 	appDBServiceAccount    = "mongodb-kubernetes-appdb"
-	InitAppDbContainerName = "mongodb-enterprise-init-appdb"
+	InitAppDbContainerName = "mongodb-kubernetes-init-appdb"
 	// AppDB environment variable names
 	InitAppdbVersionEnv          = "INIT_APPDB_VERSION"
 	podNamespaceEnv              = "POD_NAMESPACE"

controllers/operator/construct/database_construction.go

@@ -48,7 +48,7 @@ const (
 	databaseLivenessProbeCommand  = "/opt/scripts/probe.sh"
 	databaseReadinessProbeCommand = "/opt/scripts/readinessprobe"
 
-	InitDatabaseContainerName = "mongodb-enterprise-init-database"
+	InitDatabaseContainerName = "mongodb-kubernetes-init-database"
 
 	// Database environment variable names
 	InitDatabaseVersionEnv = "INIT_DATABASE_VERSION"

requirements.txt

@@ -2,22 +2,22 @@ requests==2.32.3
 click==8.0.4
 docker==7.1.0
 Jinja2==3.1.6
-ruamel.yaml==0.18.6
+ruamel.yaml==0.18.10
 dnspython>=2.6.1
 MarkupSafe==2.0.1
 semver==2.13.0
 chardet==3.0.4
 jsonpatch==1.33
 kubernetes==17.17.0
 pymongo==4.6.3
-pytest==7.4.3
-pytest-asyncio==0.14.0
+pytest==8.3.5
+pytest-asyncio==0.26.0
 PyYAML==6.0.2
 urllib3==1.26.19
 cryptography==44.0.1
 python-dateutil==2.9.0
 python-ldap==3.4.4
-GitPython==3.1.43
+GitPython==3.1.44
 setuptools>=71.0.3 # not directly required, pinned by Snyk to avoid a vulnerability
 opentelemetry-api
 opentelemetry-sdk
@@ -44,5 +44,5 @@ types-PyYAML==6.0.12.20250402
 types-pytz==2021.1.0
 types-python-dateutil==0.1.4
 pipupgrade==1.12.0
-pytest-cov==6.0.0
+pytest-cov==6.1.1
 pytest-socket==0.7.0

scripts/dev/configure_docker_auth.sh

@@ -44,7 +44,7 @@ remove_element() {
 check_docker_daemon_is_running
 
 if [[ -f ~/.docker/config.json ]]; then
-  if [[ "${RUNNING_IN_EVG:-""}" == "true" ]]; then
+  if [[ "${RUNNING_IN_EVG:-"false"}" != "true" ]]; then
     # when running locally we don't need to docker login all the time - we can do it once in 11 hours (ECR tokens expire each 12 hours)
     if [[ -n "$(find ~/.docker/config.json -mmin -360 -type f)" ]] &&
       grep "quay.io" -q ~/.docker/config.json && # TODO to be removed at public preview stage of community-search