fix(pikaoa): 分离测试与生产 Gitea 凭据 key

2026-07-15 07:16:29 +02:00
parent 796d6d34cd
commit 1c4d486964
2 changed files with 17 additions and 1 deletions
@@ -47,6 +47,22 @@ describe("platform-infra Gitea repository GitHub credentials", () => {
      .not.toBe(githubTokenEnvNameForSecretKey(globalCredential.gitFetchCredential.secretRef.key));
  });

+  test("keeps PikaOA master and release authorities on distinct Secret keys", () => {
+    const config = readGiteaConfig();
+    const testAuthority = config.sourceAuthority.repositories.find((repo) => repo.key === "pikaoa-test-nc01");
+    const productionAuthority = config.sourceAuthority.repositories.find((repo) => repo.key === "pikaoa-nc01");
+    const testKey = testAuthority?.credentialOverride?.github.gitFetchCredential.secretRef.key;
+    const productionKey = productionAuthority?.credentialOverride?.github.gitFetchCredential.secretRef.key;
+
+    expect(testAuthority?.upstream.branch).toBe("master");
+    expect(productionAuthority?.upstream.branch).toBe("release");
+    expect(testKey).toBe("github-token-pikainc-pikaoa");
+    expect(productionKey).toBe("github-token-pikainc-pikaoa-release");
+    expect(productionKey).not.toBe(testKey);
+    expect(githubTokenEnvNameForSecretKey(productionKey ?? ""))
+      .not.toBe(githubTokenEnvNameForSecretKey(testKey ?? ""));
+  });
+
  test("normalizes Secret keys to bounded environment variable names", () => {
    expect(githubTokenEnvNameForSecretKey("github-token-pikainc-selfmedia"))
      .toBe("UNIDESK_GITEA_GITHUB_TOKEN_GITHUB_TOKEN_PIKAINC_SELFMEDIA");