fix(ci): audit recovery image roles

This commit is contained in:
whyour
2026-08-22 17:12:20 +08:00
parent 9bf3472c14
commit 1250555881
2 changed files with 6 additions and 6 deletions
@@ -193,11 +193,9 @@ function validatePluginPackageRecoveryE2ELiveReport(report) {
images?.controlSourceRevision !== report?.sourceRevision ||
images?.postgresRepositoryDigest !==
'postgres@sha256:1961f96e6029a02c3812d7cb329a3b03a3ac2bb067058dec17b0f5596aca9296' ||
!imageDigest(images?.migrationImageId) ||
imageDigest(images?.initialRecoveryImageId) !==
imageDigest(images?.migrationImageId) ||
imageDigest(images?.upgradeRecoveryImageId) !==
imageDigest(images?.migrationImageId) ||
imageDigest(images?.migrationImageId) !== images?.controlBuildId ||
imageDigest(images?.initialRecoveryImageId) !== images?.adminBuildId ||
imageDigest(images?.upgradeRecoveryImageId) !== images?.adminBuildId ||
!imageDigest(images?.postgresImageId)
) {
findings.push(
@@ -42,7 +42,7 @@ function validReport() {
controlSourceRevision: sourceRevision,
postgresRepositoryDigest:
'postgres@sha256:1961f96e6029a02c3812d7cb329a3b03a3ac2bb067058dec17b0f5596aca9296',
migrationImageId: `docker://${admin}`,
migrationImageId: `docker://${control}`,
initialRecoveryImageId: `docker://${admin}`,
upgradeRecoveryImageId: `docker://${admin}`,
postgresImageId: `containerd://sha256:${'e'.repeat(64)}`,
@@ -135,6 +135,7 @@ test('offline audit rejects broken upgrade, ordering and image relationships', (
report.database.upgradeRevisionCount = 1;
report.ordering.upgradeRecoveryCompletedAt =
'2026-08-14T07:59:59.000Z';
report.images.initialRecoveryImageId = `docker://${report.images.controlBuildId}`;
report.runtime.imageIds = [`docker://sha256:${'9'.repeat(64)}`];
report.gates.activePointerJsonUnchanged = false;
const codes = validatePluginPackageRecoveryE2ELiveReport(report).findings.map(
@@ -142,6 +143,7 @@ test('offline audit rejects broken upgrade, ordering and image relationships', (
);
assert.ok(codes.includes('QL3_PLUGIN_RECOVERY_E2E_DATABASE'));
assert.ok(codes.includes('QL3_PLUGIN_RECOVERY_E2E_ORDERING'));
assert.ok(codes.includes('QL3_PLUGIN_RECOVERY_E2E_IMAGES'));
assert.ok(codes.includes('QL3_PLUGIN_RECOVERY_E2E_RUNTIME'));
assert.ok(codes.includes('QL3_PLUGIN_RECOVERY_E2E_GATES'));
});