https://plugins.jenkins.io/kubernetes/

    test
    jenkins 连接kubernets配置
    使用证书连接：
    通过 ~/.kube/config 生成 cert.pfx，jenkins通过 cert.pfx来连接k8s
    0、生成ca.crt
    echo “ “| base64 -d > ~/ca.crt (~/.kube/config中certificate-authority-data的内容)
    1、生成client.key
    echo “ “| base64 -d > ~/client.key (~/.kube/config中client-key-data的内容)
    2、生成client.crt
    echo “ “ |base64 -d > ~/client.crt （~/.kube/config中client-certificate-data的内容）
    3、生成cert.pfx
    openssl pkcs12 -export -inkey client.key -in client.crt -certfile ca.crt -out cert.pfx
    4、jenkins 上传pkcs12文件

    1. https://plugins.jenkins.io/kubernetes/
    3. test
    4. jenkins 连接kubernets配置
    5. 使用证书连接：
    6. 通过 ~/.kube/config 生成 cert.pfx，jenkins通过 cert.pfx来连接k8s
    7. 0、生成ca.crt
    8. echo " "| base64 -d > ~/ca.crt  (~/.kube/config中certificate-authority-data的内容)
    9. 1、生成client.key
    10. echo " "| base64 -d > ~/client.key  (~/.kube/config中client-key-data的内容)
    11. 2、生成client.crt
    12. echo " " |base64 -d > ~/client.crt   （~/.kube/config中client-certificate-data的内容）
    13. 3、生成cert.pfx
    14. openssl pkcs12 -export -inkey client.key -in client.crt -certfile ca.crt -out cert.pfx
    15. 4、jenkins 上传pkcs12文件
    19. pod模板：
    20. #!groovy
    21. // Scripted Pipeline
    22. podTemplate(yaml: """
    23. kind: Pod
    24. spec:
    25. containers:
    26. - name: jnlp
    27. image: '172.16.101.214:5000/jenkins-slave:test'
    28. imagePullPolicy: Always
    29. args: ['\$(JENKINS_SECRET)', '\$(JENKINS_NAME)']
    30. resources:
    31. limits:
    32. memory: "512Mi"
    33. cpu: "1000m"
    34. requests:
    35. memory: "256Mi"
    36. cpu: "500m"
    37. - name: npm
    38. image: 172.16.101.214:5000/node:stretch
    39. imagePullPolicy: Always
    40. command: ['cat']
    41. tty: true
    42. resources:
    43. limits:
    44. memory: "3072Mi"
    45. cpu: "2"
    46. requests:
    47. memory: "1024Mi"
    48. cpu: "1"
    49. - name: maven
    50. image: 172.16.101.214:5000/mvn:3.3.9-jdk-8-alpine
    51. imagePullPolicy: Always
    52. command: ['cat']
    53. tty: true
    54. resources:
    55. limits:
    56. memory: "3072Mi"
    57. cpu: "2"
    58. requests:
    59. memory: "1024Mi"
    60. cpu: "1"
    61. - name: kaniko
    62. image: 172.16.101.214:5000/kaniko-executor:debug-v0.24.0
    63. imagePullPolicy: IfNotPresent
    64. command: ['/busybox/cat']
    65. tty: true
    66. resources:
    67. limits:
    68. memory: "512Mi"
    69. cpu: "1000m"
    70. requests:
    71. memory: "256Mi"
    72. cpu: "500m"
    73. volumeMounts:
    74. - name: jenkins-docker-cfg
    75. mountPath: /kaniko/.docker
    76. imagePullSecrets:
    77. - name: ci-nexus-cred
    78. volumes:
    79. - name: jenkins-docker-cfg
    80. configMap:
    81. name: nexus-cred
    82. """
    83. ){
    85. // Pipeline Parameters
    86. properties([
    87. parameters([
    88. gitParameter(name: 'BRANCH_XLPAY_ADMIN',
    89. description: '选择xlpay-admin代码分支',
    90. branchFilter: 'origin/(.*)',
    91. type: 'PT_BRANCH_TAG',
    92. defaultValue: 'master',
    93. useRepository: '.*xlpay.git',
    94. sortMode: 'ASCENDING'),
    95. gitParameter(name: 'BRANCH_PAY_TRUSTLINK_DATA',
    96. description: '选择pay-trustlink-data分支',
    97. branchFilter: 'origin/(.*)',
    98. type: 'PT_BRANCH_TAG',
    99. defaultValue: 'master',
    100. useRepository: '.*pay-trustlink-data.git',
    101. sortMode: 'ASCENDING'),
    102. gitParameter(name: 'BRANCH_PAY_WEB',
    103. description: '选择pay-web分支',
    104. branchFilter: 'origin/(.*)',
    105. type: 'PT_BRANCH_TAG',
    106. defaultValue: 'master',
    107. useRepository: '.*pay-web.git',
    108. sortMode: 'ASCENDING'),    
    109. choice(choices: ['test', 'prod'], description: '配置版本', name: 'CONFIG'),
    110. string(defaultValue: 'xyf', description: '部署namespace名称', name: 'NAMESPACE', trim: false),             
    111. extendedChoice(defaultValue: 'xlpay_admin,xlpay_pay_user,pay_trustlink_data,pay_web', description: '选择需要部署的组件', descriptionPropertyValue: '部署xlpay_admin,部署xlpay_pay_user,部署pay_trustlink_data,部署pay_web', multiSelectDelimiter: ',', name: 'deploy_list', quoteValue: false, saveJSONParameterToFile: false, type: 'PT_CHECKBOX', value: 'xlpay_admin,xlpay_pay_user,pay_trustlink_data,pay_web', visibleItemCount: 4)    
    112. ])
    113. ])
    115. node(POD_LABEL) {
    117. env.IMAGE_TAG_XLPAY_ADMIN = 'latest'
    118. if (params.BRANCH_XLPAY_ADMIN != 'master') {
    119. env.IMAGE_TAG_XLPAY_ADMIN = "${params.BRANCH_XLPAY_ADMIN}"
    120. }
    122. env.IMAGE_TAG_PAY_TRUSTLINK_DATA = 'latest'
    123. if (params.BRANCH_PAY_TRUSTLINK_DATA != 'master') {
    124. env.IMAGE_TAG_PAY_TRUSTLINK_DATA = "${params.BRANCH_PAY_TRUSTLINK_DATA}"
    125. }
    127. env.IMAGE_TAG_PAY_WEB = 'latest'
    128. if (params.BRANCH_PAY_WEB != 'master') {
    129. env.IMAGE_TAG_PAY_WEB = "${params.BRANCH_PAY_WEB}"
    130. }
    131. env.NAMESPACE = params.NAMESPACE
    132. env.CONFIG = params.CONFIG
    133. list = env.deploy_list
    134. echo list
    135. echo ","
    136. String[] str;
    137. str = list.split(",");
    138. str.each{
    139. echo it
    140. if ( it == 'xlpay_admin'){
    141. env.xlpay_admin=true
    142. echo "是否部署xlpay_admin:${xlpay_admin}"
    143. }
    144. if ( it == 'xlpay_pay_user'){
    145. env.xlpay_pay_user=true
    146. echo "是否部署xlpay_pay_user:${xlpay_pay_user}"
    147. }
    148. if ( it == 'pay_trustlink_data'){
    149. env.pay_trustlink_data=true
    150. echo "是否部署pay_trustlink_data:${pay_trustlink_data}"
    151. }
    152. if ( it == 'pay_web'){
    153. env.pay_web=true
    154. echo "是否部署pay_web:${pay_web}"
    155. }
    156. }
    158. stage('编译') {
    159. download_code:{
    160. container('maven'){
    161. checkout([$class: 'GitSCM',
    162. branches: [[name: "${params.BRANCH_XLPAY_ADMIN}"]],
    163. doGenerateSubmoduleConfigurations: false,
    164. extensions: [[$class: 'RelativeTargetDirectory', relativeTargetDir: 'xlpay']],
    165. submoduleCfg: [],
    166. userRemoteConfigs: [[credentialsId: 'ted_gitlab', url: 'http://172.16.101.211/business-project/xlpay/xlpay.git']]
    167. ])    
    168. checkout([$class: 'GitSCM',
    169. branches: [[name: "${params.BRANCH_PAY_TRUSTLINK_DATA}"]],
    170. doGenerateSubmoduleConfigurations: false,
    171. extensions: [[$class: 'RelativeTargetDirectory', relativeTargetDir: 'pay-trustlink-data']],
    172. submoduleCfg: [],
    173. userRemoteConfigs: [[credentialsId: 'ted_gitlab', url: 'http://172.16.101.211/business-project/xlpay/pay-trustlink-data.git']]
    174. ])    
    175. checkout([$class: 'GitSCM',
    176. branches: [[name: "${params.BRANCH_PAY_WEB}"]],
    177. doGenerateSubmoduleConfigurations: false,
    178. extensions: [[$class: 'RelativeTargetDirectory', relativeTargetDir: 'pay-web']],
    179. submoduleCfg: [],
    180. userRemoteConfigs: [[credentialsId: 'ted_gitlab', url: 'http://172.16.101.211/business-project/xlpay/pay-web.git']]
    181. ])                        
    182. }    
    183. }
    184. parallel build_xlpay_admin: {
    185. if (env.xlpay_admin == 'true' || env.xlpay_pay_user == 'true') {
    186. container('maven'){
    187. echo "====== [DEBUG]: Before building xlpay admin======"
    188. echo "Branch/Tag: ${params.BRANCH_XLPAY_ADMIN}"
    189. echo "Image tag: ${env.IMAGE_TAG_XLPAY_ADMIN}"
    190. sh 'cd xlpay;mvn clean install -U -Dmaven.test.skip=true'
    191. echo "====== [DEBUG]: After building ======"
    192. }            
    193. }        
    194. }, build_pay_trustlink_data: {
    195. if (env.pay_trustlink_data == 'true') {
    196. container('maven'){
    197. echo "====== [DEBUG]: Before building ======"
    198. echo "Branch/Tag: ${params.BRANCH_PAY_TRUSTLINK_DATA}"
    199. echo "Image tag: ${env.IMAGE_TAG_PAY_TRUSTLINK_DATA}"
    200. sh 'cd pay-trustlink-data;mvn clean install -U -Dmaven.test.skip=true'
    201. echo "====== [DEBUG]: After building ======"
    202. }                
    203. }        
    205. }, build_pay_web: {
    206. if (env.pay_web == 'true') {
    207. container('npm'){
    208. echo "====== [DEBUG]: Before building ======"
    209. echo "Branch/Tag: ${params.BRANCH_PAY_WEB}"
    210. echo "Image tag: ${env.BRANCH_PAY_WEB}"
    211. sh 'npm config set registry http://172.16.101.214:8081/repository/npm/'
    212. sh 'cd pay-web;ls;npm install;npm run build'
    213. echo "====== [DEBUG]: After building ======"
    214. }            
    215. }
    216. }
    217. }
    220. stage('build Docker image'){
    221. build_image_xlpay_admin: {
    222. if (env.xlpay_admin == 'true') {
    223. container('kaniko') {
    224. sh "/kaniko/executor -f `pwd`/xlpay/xlpay-admin/Dockerfile -c `pwd`/xlpay/xlpay-admin --insecure --skip-tls-verify --cache=true --destination=172.16.101.214:5000/xlpay-admin:${IMAGE_TAG_XLPAY_ADMIN}"
    225. }            
    226. }            
    227. }
    228. build_image_xlpay_pay_user: {
    229. if (env.xlpay_pay_user == 'true') {
    230. container('kaniko') {
    231. sh "/kaniko/executor -f `pwd`/xlpay/xlpay-pay-user/Dockerfile -c `pwd`/xlpay/xlpay-pay-user --insecure --skip-tls-verify --cache=true --destination=172.16.101.214:5000/xlpay-pay-user:${IMAGE_TAG_XLPAY_ADMIN}"
    232. }
    233. }            
    234. }
    235. buld_image_pay_trustlink_data: {
    236. if (env.pay_trustlink_data == 'true') {
    237. container('kaniko') {            
    238. sh "/kaniko/executor -f `pwd`/pay-trustlink-data/Dockerfile -c `pwd`/pay-trustlink-data --insecure --skip-tls-verify --cache=true --destination=172.16.101.214:5000/pay-trustlink-data:${IMAGE_TAG_PAY_TRUSTLINK_DATA}"
    239. }
    240. }
    241. }
    242. build_image_pay_web: {
    243. if (env.pay_web == 'true') {
    244. container('kaniko') {
    245. sh "/kaniko/executor -f `pwd`/pay-web/Dockerfile -c `pwd`/pay-web --insecure --skip-tls-verify --cache=true --destination=172.16.101.214:5000/pay-web:${IMAGE_TAG_PAY_WEB}"
    246. }
    247. }
    248. }
    249. }//stage('build Docker image')
    251. stage('部署'){
    252. download_yaml: {
    253. checkout([$class: 'GitSCM',
    254. branches: [[name: "*/master"]],
    255. doGenerateSubmoduleConfigurations: false,
    256. extensions: [[$class: 'RelativeTargetDirectory', relativeTargetDir: 'ci']],
    257. submoduleCfg: [],
    258. userRemoteConfigs: [[credentialsId: 'ted_gitlab', url: 'http://172.16.101.211/business-project/xlpay/ci.git']]
    259. ])    
    260. }        
    262. deploy_xlpay_admin: {
    263. if (env.xlpay_admin == 'true') {
    264. env.IMAGE_TAG=env.IMAGE_TAG_XLPAY_ADMIN
    265. container('jnlp') {                    
    266. sh "set +e;kubectl -n ${NAMESPACE} delete configmap xlpay-admin;set -e"
    267. sh "kubectl -n ${NAMESPACE} create configmap xlpay-admin --from-env-file=./ci/config/${CONFIG}/xlpay-admin.env"    
    268. sh "envsubst < `pwd`/ci/deploy_yaml/xyf-xlpay-admin.yaml|kubectl -n ${NAMESPACE} apply -f -"                
    269. }
    270. }
    271. }
    272. deploy_pay_trustlink_data: {
    273. if (env.pay_trustlink_data == 'true') {
    274. env.IMAGE_TAG=env.IMAGE_TAG_PAY_TRUSTLINK_DATA    
    275. container('jnlp') {
    276. sh "set +e;kubectl -n ${NAMESPACE} delete configmap pay-trustlink-data;set -e"
    277. sh "kubectl -n ${NAMESPACE} create configmap pay-trustlink-data --from-env-file=./ci/config/${CONFIG}/pay-trustlink-data.env"    
    278. sh "envsubst < `pwd`/ci/deploy_yaml/xyf-pay-trustlink-data.yaml|kubectl -n ${NAMESPACE} apply -f -"    
    279. }
    280. }
    281. }
    282. deploy_xlpay_pay_user: {
    283. if (env.xlpay_pay_user == 'true') {
    284. env.IMAGE_TAG=env.IMAGE_TAG_XLPAY_ADMIN
    285. container('jnlp') {                
    286. sh "set +e;kubectl -n ${NAMESPACE} delete configmap xlpay-pay-user;set -e"
    287. sh "kubectl -n ${NAMESPACE} create configmap xlpay-pay-user --from-env-file=./ci/config/${CONFIG}/xlpay-pay-user.env"    
    288. sh "envsubst < `pwd`/ci/deploy_yaml/xyf-xlpay-pay-user.yaml|kubectl -n ${NAMESPACE} apply -f -"    
    289. }
    290. }
    291. }
    292. deploy_pay_web: {
    293. if (env.pay_web == 'true') {
    294. env.IMAGE_TAG=env.IMAGE_TAG_PAY_WEB
    295. container('jnlp') {    
    296. sh "envsubst < `pwd`/ci/deploy_yaml/xyf-pay-web.yaml|kubectl -n ${NAMESPACE} apply -f -"    
    297. }
    298. }            
    299. }
    301. if (env.CONFIG == 'prod') {
    302. deploy_ingress: {
    303. sh "kubectl -n ${NAMESPACE} apply -f `pwd`/ci/deploy_yaml/xyf-ingress.yaml"
    304. sh "sleep 10s"
    305. sh "kubectl -n ${NAMESPACE} get po -o wide"
    306. }
    307. }
    308. }//stage('部署')
    310. }//node(POD_LABEL)
    311. }//podTemplate