303 lines
14 KiB
Groovy
303 lines
14 KiB
Groovy
|
pipeline {
|
|||
|
|
agent any
|
|||
|
|
tools{
|
|||
|
|
maven 'mvn3.8.8'
|
|||
|
|
jdk 'jdk21'
|
|||
|
|
}
|
|||
|
|
parameters {
|
|||
|
|
gitParameter(
|
|||
|
|
branchFilter: 'origin/(.*)',
|
|||
|
|
defaultValue: 'dxin',
|
|||
|
|
name: 'Code_branch',
|
|||
|
|
type: 'PT_BRANCH_TAG',
|
|||
|
|
selectedValue: 'DEFAULT',
|
|||
|
|
sortMode: 'NONE',
|
|||
|
|
description: '选择代码分支: ',
|
|||
|
|
quickFilterEnabled: true,
|
|||
|
|
tagFilter: '*',
|
|||
|
|
listSize: "1"
|
|||
|
|
)
|
|||
|
|
choice(
|
|||
|
|
name: 'NAME_SPACES',
|
|||
|
|
choices: ['sit', 'test', 'prod'],
|
|||
|
|
description: '选择存放镜像的仓库命名空间：'
|
|||
|
|
)
|
|||
|
|
string(
|
|||
|
|
name: 'CUSTOM_TAG',
|
|||
|
|
defaultValue: '',
|
|||
|
|
description: '可选：自定义镜像 Tag (字母、数字、点、下划线、短横线), 留空则自动生成 “ v+构建次数_分支名_短哈希_构建时间 ”'
|
|||
|
|
)
|
|||
|
|
booleanParam(
|
|||
|
|
name: 'DEPLOY_AFTER_BUILD',
|
|||
|
|
defaultValue: true,
|
|||
|
|
description: '是否构建完镜像后部署?'
|
|||
|
|
)
|
|||
|
|
}
|
|||
|
|
environment {
|
|||
|
|
KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称
|
|||
|
|
|
|||
|
|
REGISTRY = "uswccr.ccs.tencentyun.com" // 镜像仓库地址
|
|||
|
|
NAMESPACE = "lessie${params.NAME_SPACES}" // 命名空间根据choices的选择拼接
|
|||
|
|
IMAGE_NAME = "flymoon-agent" // 镜像名（固定前缀）
|
|||
|
|
CREDENTIALS_ID = "dxin_img_hub_auth" // 容器仓库凭证ID
|
|||
|
|
|
|||
|
|
Deployment_name = "s1-flymoon-agent-deployment" // 工作负载名
|
|||
|
|
Pod_container_name = "s1-flymoon-agent" // pod内运行的容器名
|
|||
|
|
K8s_namespace = "sit" // 这是k8s集群的命名空间
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
stages {
|
|||
|
|
stage('拉取代码') {
|
|||
|
|
steps {
|
|||
|
|
git branch: "${params.Code_branch}",
|
|||
|
|
credentialsId: 'fly_gitlab_auth',
|
|||
|
|
url: 'http://106.53.194.199/root/fly_moon_agent.git'
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
stage('获取信息') {
|
|||
|
|
steps {
|
|||
|
|
script {
|
|||
|
|
// 获取最近一次提交的哈希值（短格式，前8位）
|
|||
|
|
env.GIT_COMMIT_SHORT = sh(script: 'git rev-parse --short HEAD',returnStdout: true).trim()
|
|||
|
|
// 获取最近一次提交的作者
|
|||
|
|
env.GIT_AUTHOR = sh(script: 'git log -1 --pretty=format:%an',returnStdout: true).trim()
|
|||
|
|
// 获取最近一次提交的时间（格式化）
|
|||
|
|
env.GIT_COMMIT_TIME = sh(
|
|||
|
|
script: 'git log -1 --pretty=format:%ct | xargs -I {} date -d @{} +%Y%m%d-%H%M%S',
|
|||
|
|
returnStdout: true
|
|||
|
|
).trim()
|
|||
|
|
// 获取最近一次提交的备注信息（转义特殊字符，避免构建失败）
|
|||
|
|
env.GIT_COMMIT_MSG = sh(script: 'git log -1 --pretty=format:%s | sed -e \'s/"/\\"/g\'', returnStdout: true).trim()
|
|||
|
|
|
|||
|
|
// Jenkins构建次数
|
|||
|
|
def buildNumber = env.BUILD_NUMBER // Jenkins内置变量，直接获取当前Job的构建序号
|
|||
|
|
// 当前分支名（处理/为-，如feature/docker_1015 → feature-docker_1015）
|
|||
|
|
def branchName = sh(script: 'git rev-parse --abbrev-ref HEAD', returnStdout: true).trim()
|
|||
|
|
def formattedBranch = branchName.replace('/', '-').replace('_', '-') // 替换分支名中的/和_为-
|
|||
|
|
// 构建时间（格式：202510181215，年-月-日-时-分，无分隔符）
|
|||
|
|
def buildTime = sh(script: 'date +%Y%m%d%H%M', returnStdout: true).trim()
|
|||
|
|
def defaultTag = "v${buildNumber}_${formattedBranch}_${GIT_COMMIT_SHORT}_${buildTime}"
|
|||
|
|
|
|||
|
|
def customTag = params.CUSTOM_TAG?.trim()
|
|||
|
|
def tagPattern = ~/^[a-zA-Z0-9._-]+$/
|
|||
|
|
|
|||
|
|
// 判断最终Tag
|
|||
|
|
if (customTag && customTag ==~ tagPattern) {
|
|||
|
|
echo "✅ 使用自定义镜像 Tag: ${customTag}"
|
|||
|
|
env.IMAGE_TAG = customTag
|
|||
|
|
} else if (customTag) {
|
|||
|
|
echo "⚠️ 自定义 Tag '${customTag}' 不符合规范，将使用默认生成的 Tag: ${defaultTag}"
|
|||
|
|
|
|||
|
|
def confirmed = true
|
|||
|
|
timeout(time: 1, unit: 'MINUTES') {
|
|||
|
|
try {
|
|||
|
|
input(
|
|||
|
|
message: """⚠️ Tag 命名不规范：
|
|||
|
|
${customTag}
|
|||
|
|
|
|||
|
|
将使用自动生成的 Tag：
|
|||
|
|
${defaultTag}
|
|||
|
|
|
|||
|
|
是否继续构建？""",
|
|||
|
|
ok: '确认'
|
|||
|
|
)
|
|||
|
|
} catch (err) {
|
|||
|
|
// 用户点击“取消”或中断
|
|||
|
|
echo "🚫 用户取消构建"
|
|||
|
|
confirmed = false
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
if (confirmed) {
|
|||
|
|
echo "✅ 用户确认使用自动生成的 Tag：${defaultTag}"
|
|||
|
|
env.IMAGE_TAG = defaultTag
|
|||
|
|
} else {
|
|||
|
|
error("流水线已终止。")
|
|||
|
|
}
|
|||
|
|
} else {
|
|||
|
|
env.IMAGE_TAG = defaultTag
|
|||
|
|
echo "未输入自定义 Tag, 使用自动生成规则: ${env.IMAGE_TAG}"
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
stage('Maven 编译') {
|
|||
|
|
steps {
|
|||
|
|
sh "cd ${WORKSPACE}/ && mvn clean install -Dmaven.test.skip=true"
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
stage('登录容器仓库') {
|
|||
|
|
steps {
|
|||
|
|
withCredentials([usernamePassword(
|
|||
|
|
credentialsId: env.CREDENTIALS_ID,
|
|||
|
|
usernameVariable: 'REGISTRY_USER',
|
|||
|
|
passwordVariable: 'REGISTRY_PWD'
|
|||
|
|
)]) {
|
|||
|
|
sh '''
|
|||
|
|
echo "$REGISTRY_PWD" | docker login ${REGISTRY} -u ${REGISTRY_USER} --password-stdin
|
|||
|
|
'''
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
stage('构建容器镜像') {
|
|||
|
|
steps {
|
|||
|
|
script {
|
|||
|
|
// 构建镜像，添加标签信息
|
|||
|
|
sh """
|
|||
|
|
docker build -t ${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG} \
|
|||
|
|
--label "git-branch='${params.Code_branch}'" \
|
|||
|
|
--label "git-commit='${GIT_COMMIT_SHORT}'" \
|
|||
|
|
--label "git-author='${GIT_AUTHOR}'" \
|
|||
|
|
--label "git-message='${GIT_COMMIT_MSG}'" \
|
|||
|
|
--label "build-time='${GIT_COMMIT_TIME}'" \
|
|||
|
|
.
|
|||
|
|
"""
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
stage('推送镜像到仓库') {
|
|||
|
|
steps {
|
|||
|
|
script {
|
|||
|
|
sh "docker push ${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG}"
|
|||
|
|
echo "推送镜像成功：${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG}"
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
stage('部署到K8S') {
|
|||
|
|
when {
|
|||
|
|
expression { return params.DEPLOY_AFTER_BUILD }
|
|||
|
|
}
|
|||
|
|
steps {
|
|||
|
|
sh """
|
|||
|
|
echo "=== 更新 Deployment 镜像 ==="
|
|||
|
|
kubectl set image deployment/${Deployment_name} ${Pod_container_name}=${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG} -n ${K8s_namespace}
|
|||
|
|
echo "=== 添加注解 ==="
|
|||
|
|
kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${GIT_COMMIT_MSG}" --overwrite -n ${K8s_namespace}
|
|||
|
|
echo "=== 查看历史版本 ==="
|
|||
|
|
kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace}
|
|||
|
|
echo "=== 查看所使用的镜像 ==="
|
|||
|
|
kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}'
|
|||
|
|
"""
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
stage('检查部署情况') {
|
|||
|
|
when {
|
|||
|
|
expression { return params.DEPLOY_AFTER_BUILD }
|
|||
|
|
}
|
|||
|
|
steps {
|
|||
|
|
echo "检测部署状态并验证新版本运行情况"
|
|||
|
|
sh """
|
|||
|
|
echo "=== 检查 Deployment 滚动更新状态 ==="
|
|||
|
|
kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=180s
|
|||
|
|
|
|||
|
|
if [ \$? -ne 0 ]; then
|
|||
|
|
echo "❌ 部署超时或失败，开始收集诊断信息..."
|
|||
|
|
echo "=== 查看当前 Pods 状态 ==="
|
|||
|
|
kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} -o wide
|
|||
|
|
|
|||
|
|
echo "=== 查看最近的事件 ==="
|
|||
|
|
kubectl get events -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp | tail -n 20
|
|||
|
|
|
|||
|
|
echo "=== 查看最近一个失败 Pod 的详细描述 ==="
|
|||
|
|
FAILED_POD=\$(kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} --field-selector=status.phase!=Running -o jsonpath='{.items[0].metadata.name}')
|
|||
|
|
if [ ! -z "\$FAILED_POD" ]; then
|
|||
|
|
kubectl describe pod \$FAILED_POD -n ${K8s_namespace} || true
|
|||
|
|
kubectl logs \$FAILED_POD -n ${K8s_namespace} --tail=50 || true
|
|||
|
|
fi
|
|||
|
|
|
|||
|
|
echo "=== 回滚到上一个版本 ==="
|
|||
|
|
kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace}
|
|||
|
|
|
|||
|
|
exit 1
|
|||
|
|
fi
|
|||
|
|
|
|||
|
|
echo "=== 检查 Pods 是否全部 Ready ==="
|
|||
|
|
kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} -o wide
|
|||
|
|
|
|||
|
|
echo "=== 获取最新 Pod 名称 ==="
|
|||
|
|
NEW_POD=\$(kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}')
|
|||
|
|
|
|||
|
|
echo "=== 新 Pod 启动日志(最近20行) ==="
|
|||
|
|
kubectl logs \$NEW_POD -n ${K8s_namespace} --tail=20 || true
|
|||
|
|
|
|||
|
|
echo "✅ 部署成功：\$NEW_POD 已正常运行"
|
|||
|
|
"""
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
post {
|
|||
|
|
always {
|
|||
|
|
script {
|
|||
|
|
def keepCount = 2
|
|||
|
|
echo "开始清理本地旧镜像，仅保留最近 ${keepCount} 个构建版本"
|
|||
|
|
def imagePrefix = "${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}"
|
|||
|
|
|
|||
|
|
// 获取所有镜像（按创建时间排序，越新的越前）
|
|||
|
|
// 格式：Repository:Tag ImageID CreatedAt
|
|||
|
|
def allImagesRaw = sh(script: "docker images ${imagePrefix} --format '{{.Repository}}:{{.Tag}} {{.ID}} {{.CreatedAt}}' | sort -rk3", returnStdout: true).trim()
|
|||
|
|
if (!allImagesRaw) {
|
|||
|
|
echo "未找到任何镜像，无需清理"
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
def allImages = allImagesRaw.split('\n')
|
|||
|
|
if (allImages.size() <= keepCount) {
|
|||
|
|
echo "当前镜像数未超过 ${keepCount} 个，无需清理"
|
|||
|
|
return
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
def oldImages = allImages.drop(keepCount)
|
|||
|
|
echo "发现 ${oldImages.size()} 个旧镜像需要清理"
|
|||
|
|
oldImages.each { line ->
|
|||
|
|
echo " ${line}"
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
oldImages.each { line ->
|
|||
|
|
def parts = line.split(' ')
|
|||
|
|
def imageTag = parts[0]
|
|||
|
|
def imageId = parts.size() > 1 ? parts[1] : ""
|
|||
|
|
|
|||
|
|
// 对于标签为<none>的无效镜像，使用镜像ID删除
|
|||
|
|
if (imageTag.contains("<none>") && imageId) {
|
|||
|
|
echo "删除无效镜像: ${imageId}"
|
|||
|
|
sh(returnStatus: true, script: "docker rmi -f ${imageId} || true")
|
|||
|
|
} else if (imageId) {
|
|||
|
|
// 对于有标签的有效镜像，优先使用镜像ID删除
|
|||
|
|
echo "删除旧镜像: ${imageTag} (${imageId})"
|
|||
|
|
sh(returnStatus: true, script: "docker rmi -f ${imageId} || true")
|
|||
|
|
} else {
|
|||
|
|
// 兜底方案，使用标签删除
|
|||
|
|
echo "删除旧镜像: ${imageTag}"
|
|||
|
|
sh(returnStatus: true, script: "docker rmi -f ${imageTag} || true")
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
echo "清理完成，当前镜像状态："
|
|||
|
|
sh """
|
|||
|
|
docker images ${imagePrefix} --format 'table {{.Repository}}\\t{{.Tag}}\\t{{.CreatedAt}}\\t{{.Size}}'
|
|||
|
|
"""
|
|||
|
|
|
|||
|
|
sh "docker logout ${REGISTRY}"
|
|||
|
|
echo "容器仓库已登出，本地凭证已清理"
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
success {
|
|||
|
|
// 输出构建结果
|
|||
|
|
echo "镜像构建成功！"
|
|||
|
|
echo "镜像地址：${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG}"
|
|||
|
|
echo "对应代码提交：${GIT_COMMIT_SHORT}（${GIT_COMMIT_MSG}）"
|
|||
|
|
}
|
|||
|
|
failure {
|
|||
|
|
// 输出构建结果
|
|||
|
|
echo "有步骤出错！"
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|