PYTHON-5275 Fix handling of FIPS build

.evergreen/config.yml

@@ -67,7 +67,7 @@ functions:
         binary: bash
         working_dir: "src"
         include_expansions_in_env: [VERSION, TOPOLOGY, AUTH, SSL, ORCHESTRATION_FILE, PYTHON_BINARY, PYTHON_VERSION,
-          STORAGE_ENGINE, REQUIRE_API_VERSION, DRIVERS_TOOLS, TEST_CRYPT_SHARED, AUTH_AWS, LOAD_BALANCER, LOCAL_ATLAS]
+          STORAGE_ENGINE, REQUIRE_API_VERSION, DRIVERS_TOOLS, TEST_CRYPT_SHARED, AUTH_AWS, LOAD_BALANCER, LOCAL_ATLAS, NO_EXT]
         args: [.evergreen/just.sh, run-server, "${TEST_NAME}"]
     - command: expansions.update
       params:
@@ -89,7 +89,7 @@ functions:
         include_expansions_in_env: [AUTH, SSL, AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY,
           AWS_SESSION_TOKEN, COVERAGE, PYTHON_BINARY, LIBMONGOCRYPT_URL, MONGODB_URI, PYTHON_VERSION,
           DISABLE_TEST_COMMANDS, GREEN_FRAMEWORK, NO_EXT, COMPRESSORS, MONGODB_API_VERSION, DEBUG_LOG,
-          ORCHESTRATION_FILE, OCSP_SERVER_TYPE, VERSION]
+          ORCHESTRATION_FILE, OCSP_SERVER_TYPE, VERSION, REQUIRE_FIPS]
         binary: bash
         working_dir: "src"
         args: [.evergreen/just.sh, setup-tests, "${TEST_NAME}", "${SUB_TEST_NAME}"]

.evergreen/generated_configs/variants.yml

@@ -18,6 +18,7 @@ buildvariants:
     batchtime: 10080
     expansions:
       NO_EXT: "1"
+      REQUIRE_FIPS: "1"
   - name: other-hosts-rhel8-zseries
     tasks:
       - name: .6.0 .standalone !.sync_async

.evergreen/scripts/generate_config.py

@@ -800,10 +800,12 @@ def create_alternative_hosts_variants():
         )
     )
 
-    expansions = dict()
-    handle_c_ext(C_EXTS[0], expansions)
     for host_name in OTHER_HOSTS:
+        expansions = dict()
+        handle_c_ext(C_EXTS[0], expansions)
         host = HOSTS[host_name]
+        if "fips" in host_name.lower():
+            expansions["REQUIRE_FIPS"] = "1"
         tags = [".6.0 .standalone !.sync_async"]
         if host_name == "Amazon2023":
             tags = [f".latest !.sync_async {t}" for t in SUB_TASKS]

.evergreen/scripts/setup_tests.py

@@ -33,6 +33,7 @@
     "DEBUG_LOG",
     "PYTHON_BINARY",
     "PYTHON_VERSION",
+    "REQUIRE_FIPS",
 ]
 
 # Map the test name to test extra.

test/__init__.py

@@ -389,6 +389,8 @@ def fips_enabled(self):
             self._fips_enabled = True
         except (subprocess.SubprocessError, FileNotFoundError):
             self._fips_enabled = False
+        if os.environ.get("REQUIRE_FIPS") and not self._fips_enabled:
+            raise RuntimeError("Expected FIPS to be enabled")
         return self._fips_enabled
 
     def check_auth_type(self, auth_type):

test/asynchronous/__init__.py

@@ -391,6 +391,8 @@ def fips_enabled(self):
             self._fips_enabled = True
         except (subprocess.SubprocessError, FileNotFoundError):
             self._fips_enabled = False
+        if os.environ.get("REQUIRE_FIPS") and not self._fips_enabled:
+            raise RuntimeError("Expected FIPS to be enabled")
         return self._fips_enabled
 
     def check_auth_type(self, auth_type):