ci: 增加 Admin 生产部署流程

src/deployment/nginxConfig.test.ts

@@ -5,6 +5,7 @@ import { describe, expect, it } from 'vitest'
 const config = readFileSync(resolve(process.cwd(), 'nginx/default.conf.template'), 'utf8')
 const testCompose = readFileSync(resolve(process.cwd(), 'docker-compose.test.yml'), 'utf8')
 const developmentCompose = readFileSync(resolve(process.cwd(), 'docker-compose.development.yml'), 'utf8')
+const productionCompose = readFileSync(resolve(process.cwd(), 'docker-compose.production.yml'), 'utf8')
 const jenkinsfile = readFileSync(resolve(process.cwd(), 'Jenkinsfile'), 'utf8')
 const dockerfile = readFileSync(resolve(process.cwd(), 'Dockerfile'), 'utf8')
 
@@ -47,13 +48,17 @@ describe('admin nginx deployment config', () => {
     expect(config).toContain('proxy_set_header Host $proxy_host;')
   })
 
-  it('runs each deployment on its target node without controller-local SSH files', () => {
-    expect(jenkinsfile).toContain("env.JOB_BASE_NAME?.endsWith('-dev') ? 'java-dev' : 'java-test'")
+  it('keeps local environments on target nodes and uses credential-managed SSH for production', () => {
+    expect(jenkinsfile).toContain("env.JOB_BASE_NAME?.endsWith('-prod') ? 'java-builder'")
     expect(jenkinsfile).toContain("DEVELOPMENT_COMPOSE_PROJECT = 'admin-web'")
     expect(jenkinsfile).toContain('docker compose -p "$DEVELOPMENT_COMPOSE_PROJECT" -f "$DEVELOPMENT_COMPOSE_FILE" up -d')
     expect(jenkinsfile).not.toContain('/var/jenkins_home/.ssh')
     expect(jenkinsfile).not.toContain('docker save')
-    expect(jenkinsfile).not.toMatch(/\bssh\b/)
+    expect(jenkinsfile).toContain("credentialsId: 'firstleg-production-ssh'")
+    expect(jenkinsfile).toContain('git rev-parse origin/main')
+    expect(productionCompose).toContain('127.0.0.1:${HOST_PORT:-9001}:80')
+    expect(productionCompose).toContain('API_UPSTREAM: "http://gateway:9000"')
+    expect(productionCompose).toContain('name: firstleg-prod-infra-network')
   })
 
   it('uses authenticated internal base images in CI instead of pulling from Docker Hub', () => {