WuYongJie/gongxiangp2
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: accept api key migration audit in deploy gate

Browse Source
This commit is contained in:
chenpei 2026-08-29 11:09:07 +08:00
parent 0cf7984ce3
commit f50b8db719
2 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
scripts/git-incremental-deploy.ps1
View File

@ -1508,6 +1508,7 @@ const expectedMigrationNames = new Set([
'20260826_add_pack_video_early_access', '20260826_add_pack_video_early_access',
'20260828_add_pack_item_can_edit_assets', '20260828_add_pack_item_can_edit_assets',
'20260828_add_task_detail_change_approvals', '20260828_add_task_detail_change_approvals',
'20260829_add_recoverable_api_key_secret',
]); ]);
if (migrations.length !== expectedMigrationNames.size if (migrations.length !== expectedMigrationNames.size
|| migrations.some((item) => !expectedMigrationNames.has(item && item.name) || migrations.some((item) => !expectedMigrationNames.has(item && item.name)

4
scripts/safe-production-migrate.test.mjs
View File

@ -563,7 +563,7 @@ test('target evidence rejects nullable logo columns and structurally wrong index
}) })
test('container supply chain and migrator image are immutable while SOP keeps complete gates', async () => { test('container supply chain and migrator image are immutable while SOP keeps complete gates', async () => {
const [dockerfile, sop, incidentSop, migratorSource, backupSource, uploadIdMigration, dockerIgnore] = await Promise.all([ const [dockerfile, sop, incidentSop, migratorSource, backupSource, uploadIdMigration, dockerIgnore, deploymentSource] = await Promise.all([
readFile(new URL('../Dockerfile', import.meta.url), 'utf8'), readFile(new URL('../Dockerfile', import.meta.url), 'utf8'),
readFile(new URL('../docs/生产数据库安全增量迁移SOP-2026-08-12.md', import.meta.url), 'utf8'), readFile(new URL('../docs/生产数据库安全增量迁移SOP-2026-08-12.md', import.meta.url), 'utf8'),
readFile(new URL('../docs/视频预览任务中断事故复盘-2026-08-11.md', import.meta.url), 'utf8'), readFile(new URL('../docs/视频预览任务中断事故复盘-2026-08-11.md', import.meta.url), 'utf8'),
@ -571,6 +571,7 @@ test('container supply chain and migrator image are immutable while SOP keeps co
readFile(new URL('./create-verified-production-backup.mjs', import.meta.url), 'utf8'), readFile(new URL('./create-verified-production-backup.mjs', import.meta.url), 'utf8'),
readFile(new URL('../prisma/migrations/20260812_align_material_upload_idempotency_index/migration.sql', import.meta.url), 'utf8'), readFile(new URL('../prisma/migrations/20260812_align_material_upload_idempotency_index/migration.sql', import.meta.url), 'utf8'),
readFile(new URL('../.dockerignore', import.meta.url), 'utf8'), readFile(new URL('../.dockerignore', import.meta.url), 'utf8'),
readFile(new URL('./git-incremental-deploy.ps1', import.meta.url), 'utf8'),
]) ])
const migratorStart = dockerfile.indexOf('FROM base AS migrator') const migratorStart = dockerfile.indexOf('FROM base AS migrator')
const runnerStart = dockerfile.indexOf('FROM base AS runner', migratorStart) const runnerStart = dockerfile.indexOf('FROM base AS runner', migratorStart)
@ -630,6 +631,7 @@ test('container supply chain and migrator image are immutable while SOP keeps co
} }
assert.match(dockerfile, /20260829_add_recoverable_api_key_secret/) assert.match(dockerfile, /20260829_add_recoverable_api_key_secret/)
assert.match(migratorSource, /'20260829_add_recoverable_api_key_secret'/) assert.match(migratorSource, /'20260829_add_recoverable_api_key_secret'/)
assert.match(deploymentSource, /'20260829_add_recoverable_api_key_secret'/)
assert.ok(sop.includes('`20260829_add_recoverable_api_key_secret`')) assert.ok(sop.includes('`20260829_add_recoverable_api_key_secret`'))
assert.match(backupSource, /'--format=custom'/) assert.match(backupSource, /'--format=custom'/)
assert.match(backupSource, /'--serializable-deferrable'/) assert.match(backupSource, /'--serializable-deferrable'/)