jenkins+k8s+pipeline

使用jenkinsfile持续集成Django项目

1,kubeadm部署k8s集群,集群内部署jenkins,jenkins安装kubernets plugin插件,

2,使用jenkinsfile实现自动拉代码,自动编译,自动构建docker镜像,推送镜像到harbor,更改yaml文件部署应用

#podtemplate定义jenkins-slave容器模板,label标签,serveraccount是k8s集群rbac账号,
podTemplate(label: 'test',serverAccout: 'jenkins-sa', securityContext: [ runAsUser: 'root'],
   #jnlp容器镜像默认以jenkins用户运行,这样会导致在jnlp容器内执行docker命令时,会有权限问题,因为jnlp容器挂载了宿主机的docker.sock,
   #宿主机的docker.sock权限是660,所以jnlp容器执行不了,简单解决方式可以自定义Dockerfile生成jnlp镜像,使用USER root将镜像默认运行的用户改为root containers: [ containerTemplate(name:
'jnlp', image: '192.168.125.202/image/jenkins_inbound_agent:v1', args: '${computer.jnlpmac} ${computer.name}'), ],
#将宿主机docker.sock,docker跟libltdl.so.7挂载进容器内,让容器可以执行docker命令,docker in docker
#k8s定义一个pvc,挂载一个文件夹进去,保存git代码 volumes: [ hostPathVolume(hostPath:
'/var/run/docker.sock', mountPath: '/var/run/docker.sock'), hostPathVolume(hostPath: '/usr/bin/docker', mountPath: '/usr/bin/docker'), hostPathVolume(hostPath: '/usr/lib64/libltdl.so.7', mountPath: '/usr/lib/x86_64-linux-gnu/libltdl.so.7'), persistentVolumeClaim(claimName: 'test', mountPath: '/opt/code', readOnly: false) ], ) {
  node('test') {
#定义变量
def app_name='learn_logs'
def workdir='/home/jenkins/'
def img_url='192.168.125.202'
def docker='/usr/bin/docker'
stage('Clone') {
echo "1.Clone Stage"
sh "${workdir}kubectl --kubeconfig ${workdir}.kube/config get pods -n devops"
sh "cd ${workdir}learn_logs && git pull origin master"
}
stage('Test') {
echo "2.Test Stage"
#获取项目最近一次提交的commit id,并注册到env中去,用以构建镜像的版本号
script {
env.imageTag = sh (script: 'GIT_DIR=/home/jenkins/learn_logs/.git git rev-parse --short HEAD ${GIT_COMMIT}', returnStdout: true).trim()
env.img_url_all = "${img_url}/image/${app_name}:${imageTag}"
}
sh "echo ${imageTag}"
sh "echo ${img_url_all}"
}
stage('Build') {
echo "3.Build Docker Image Stage."
sh "cd ${workdir}${app_name} && ${docker} build -t ${img_url}/image/${app_name}:${imageTag} -f ${workdir}${app_name}/Dockerfile /home"
}
stage('Push') {
echo "4.Push Docker Image Stage."
#使用函数withcredentials获取jenkins上面的账号信息,用以登录镜像仓库
withCredentials([usernamePassword(credentialsId: 'harbor_user', passwordVariable: 'PASSWORD', usernameVariable: 'USERNAME')]) {
sh "docker login ${img_url}/harbor -u $USERNAME -p $PASSWORD"
sh "/usr/bin/docker push ${img_url}/image/${app_name}:${imageTag}"
}
}
stage('YAML') {
echo "5. Change YAML File Stage."
#替换yaml文件镜像名称
//def img_url_all="192.168.125.202/image/learnlog:${imageTag}"
sh "sed -i 's#{{img}}#${img_url_all}#g' ${workdir}${app_name}/${app_name}.yaml"
}
stage('Deploy') {
echo "6. Deploy Stage."
//def img_url_all="192.168.125.202/image/learnlog:${imageTag}"
sh "${workdir}kubectl --kubeconfig ${workdir}.kube/config apply -f ${workdir}${app_name}/${app_name}.yaml"
#执行完再讲yaml文件镜像名称改成通用匹配字符
sh "sed -i 's#${img_url_all}#{{img}}#g' ${workdir}${app_name}/${app_name}.yaml"
}
}
 }
原文地址:https://www.cnblogs.com/allmdzz/p/14336337.html