jenkins-pipeline/SCM/s1_python_lessie_agents.groovy

pipeline {
    agent any

    parameters {
        gitParameter(
            branchFilter: 'origin/(.*)',
            defaultValue: 'dxin',
            name: 'Code_branch',
            type: 'PT_BRANCH',
            selectedValue: 'DEFAULT',
            sortMode: 'NONE',
            description: '选择代码分支:',
            quickFilterEnabled: true,
            tagFilter: '*',
            listSize: "1"
        )
        choice(
            name: 'NAME_SPACES',
            choices: ['sit', 'test', 'prod'],
            description: '选择存放镜像的仓库命名空间：'
        )
        string(
            name: 'CUSTOM_TAG',
            defaultValue: '',
            description: '可选：自定义镜像 Tag (字母、数字、点、下划线、短横线), 留空则自动生成 “ v+构建次数_分支名_短哈希_构建时间 ”'
        )
        booleanParam(
            name: 'DEPLOY_AFTER_BUILD',
            defaultValue: true,
            description: '是否构建完镜像后部署?'
        )
    }
    environment {
        KUBECONFIG = credentials('k8s-test-config-admin')  // k8s 凭证 ID, Jenkins 中配置的凭证名称
        
        REGISTRY = "uswccr.ccs.tencentyun.com"  // 镜像仓库地址
        NAMESPACE = "lessie${params.NAME_SPACES}"  // 命名空间
        IMAGE_NAME = "lessie-sourcing-agents"  // 镜像名（固定前缀）
        CREDENTIALS_ID = "dxin_img_hub_auth"  // 容器仓库凭证ID

        Deployment_name = "s1-lessie-agents-deployment" // 工作负载资源清单文件名
        Pod_container_name = "s1-lessie-agents" // pod内运行的容器名
        K8s_namespace = "sit" // 这是k8s集群的命名空间
    }

    stages {
        stage('拉取代码') {
            steps {
                // 拉取指定分支代码（通过参数 params.Code_branch 动态指定）
                git branch: "${params.Code_branch}", 
                    credentialsId: 'fly_gitlab_auth', 
                    url: 'http://106.53.194.199/python/lessie-sourcing-agents.git'
            }
        }

        stage('获取提交信息') {
            steps {
                script {
                    env.GIT_COMMIT_SHORT = sh(script: 'git rev-parse --short HEAD', returnStdout: true).trim()
                    env.GIT_AUTHOR = sh(script: 'git log -1 --pretty=format:%an', returnStdout: true).trim()
                    env.GIT_COMMIT_TIME = sh(script: 'git log -1 --pretty=format:%ct | xargs -I {} date -d @{} +%Y%m%d-%H%M%S', returnStdout: true).trim()
                    env.GIT_COMMIT_MSG = sh(script: 'git log -1 --pretty=format:%s | sed -e \'s/"/\\"/g\'', returnStdout: true).trim()

                    def buildNumber = env.BUILD_NUMBER
                    def branchName = sh(script: 'git rev-parse --abbrev-ref HEAD', returnStdout: true).trim()
                    def formattedBranch = branchName.replace('/', '-').replace('_', '-')
                    def buildTime = sh(script: 'date +%Y%m%d%H%M', returnStdout: true).trim()
                    def defaultTag = "v${buildNumber}_${formattedBranch}_${GIT_COMMIT_SHORT}_${buildTime}"

                    def customTag = params.CUSTOM_TAG?.trim()
                    def tagPattern = ~/^[a-zA-Z0-9._-]+$/

                    if (customTag && customTag ==~ tagPattern) {
                        echo "✅ 使用自定义镜像 Tag: ${customTag}"
                        env.IMAGE_TAG = customTag
                    } else if (customTag) {
                        echo "⚠️ 自定义 Tag '${customTag}' 不符合规范，将使用默认生成的 Tag: ${defaultTag}"

                        def confirmed = true
                        timeout(time: 1, unit: 'MINUTES') {
                            try {
                                input(
                                    message: """⚠️ Tag 命名不规范：
                                        ${customTag}

                                        将使用自动生成的 Tag：
                                        ${defaultTag}

                                        是否继续构建？""",
                                    ok: '确认'
                                )
                            } catch (err) {
                                // 用户点击“取消”或中断
                                echo "🚫 用户取消构建"
                                confirmed = false
                            }
                        }

                        if (confirmed) {
                            echo "✅ 用户确认使用自动生成的 Tag：${defaultTag}"
                            env.IMAGE_TAG = defaultTag
                        } else {
                            error("流水线已终止。")
                        }
                    } else {
                        env.IMAGE_TAG = defaultTag
                        echo "未输入自定义 Tag, 使用自动生成规则: ${env.IMAGE_TAG}"
                    }
                }
            }
        }

        stage('登录容器仓库') {
            steps {
                withCredentials([usernamePassword(
                    credentialsId: env.CREDENTIALS_ID,
                    usernameVariable: 'REGISTRY_USER',
                    passwordVariable: 'REGISTRY_PWD'
                )]) {
                    sh '''
                        echo "$REGISTRY_PWD" | docker login ${REGISTRY} -u ${REGISTRY_USER} --password-stdin
                    '''
                }
            }
        }

        stage('构建容器镜像') {
            steps {
                script {
                    // 构建镜像，添加标签信息
                    sh """
                        docker build -t ${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG} \
                            --label "git-branch='${params.Code_branch}'" \
                            --label "git-commit='${GIT_COMMIT_SHORT}'" \
                            --label "git-author='${GIT_AUTHOR}'" \
                            --label "git-message='${GIT_COMMIT_MSG}'" \
                            --label "build-time='${GIT_COMMIT_TIME}'" \
                            .
                    """
                }
            }
        }

        stage('推送镜像到仓库') {
            steps {
                script {
                    sh "docker push ${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG}"
                    echo "推送镜像成功：${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG}"
                }
            }
        }

        stage('部署到K8S') {
            when {
                expression { return params.DEPLOY_AFTER_BUILD }
            }
            steps {
                sh """
                    echo "=== 更新 Deployment 镜像 ==="
                    kubectl set image deployment/${Deployment_name} ${Pod_container_name}=${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG} -n ${K8s_namespace}
                    echo "=== 添加注解 ==="
                    kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${GIT_COMMIT_MSG}" --overwrite -n ${K8s_namespace}
                    echo "=== 查看历史版本 ==="
                    kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} 
                    echo "=== 查看所使用的镜像 ==="
                    kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}'
                """
            }
        }

        stage('检查部署情况') {
            when {
                expression { return params.DEPLOY_AFTER_BUILD }
            }
            steps {
                echo "检测部署状态并验证新版本运行情况"
                sh """
                    echo "=== 检查 Deployment 滚动更新状态 ==="
                    kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=180s
                    
                    if [ \$? -ne 0 ]; then
                        echo "❌ 部署超时或失败，开始收集诊断信息..."
                        echo "=== 查看当前 Pods 状态 ==="
                        kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} -o wide

                        echo "=== 查看最近的事件 ==="
                        kubectl get events -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp | tail -n 20

                        echo "=== 查看最近一个失败 Pod 的详细描述 ==="
                        FAILED_POD=\$(kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} --field-selector=status.phase!=Running -o jsonpath='{.items[0].metadata.name}')
                        if [ ! -z "\$FAILED_POD" ]; then
                            kubectl describe pod \$FAILED_POD -n ${K8s_namespace} || true
                            kubectl logs \$FAILED_POD -n ${K8s_namespace} --tail=50 || true
                        fi

                        echo "=== 回滚到上一个版本 ==="
                        kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace}

                        exit 1
                    fi

                    echo "=== 检查 Pods 是否全部 Ready ==="
                    kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} -o wide

                    echo "=== 获取最新 Pod 名称 ==="
                    NEW_POD=\$(kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}')

                    echo "=== 新 Pod 启动日志(最近20行) ==="
                    kubectl logs \$NEW_POD -n ${K8s_namespace} --tail=20 || true

                    echo "✅ 部署成功：\$NEW_POD 已正常运行"
                """
            }
        }
    }

    post {
        always {
            script {
                echo "开始清理本地旧镜像，仅保留最近 2 个构建版本"
                def keepCount = 2
                def imagePrefix = "${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}"

                // 获取所有镜像（按创建时间排序，越新的越前）
                def allImagesRaw = sh(script: "docker images ${imagePrefix} --format '{{.Repository}}:{{.Tag}} {{.CreatedAt}}' | sort -rk2", returnStdout: true).trim()
                if (!allImagesRaw) {
                    echo "未找到任何镜像，无需清理"
                    return
                }

                def allImages = allImagesRaw.split('\n')
                if (allImages.size() <= keepCount) {
                    echo "当前镜像数未超过 ${keepCount} 个，无需清理"
                    return
                }

                def oldImages = allImages.drop(keepCount)
                echo "发现 ${oldImages.size()} 个旧镜像需要清理"

                oldImages.each { line ->
                    def parts = line.split(' ')
                    def imageId = parts[0]
                    def imageTag = parts[1]
                    echo "删除旧镜像: ${imageTag} (ID: ${imageId})"
                    sh "docker rmi -f \"${imageId}"\ || true"
                }

                echo "清理完成，当前镜像状态："
                sh """
                    docker images ${imagePrefix} --format 'table {{.Repository}}\\t{{.Tag}}\\t{{.CreatedAt}}\\t{{.Size}}'
                """

                sh "docker logout ${REGISTRY}"
                echo "容器仓库已登出，本地凭证已清理"
            }
        }
        success {
            // 输出构建结果
            echo "镜像构建成功！"
            echo "镜像地址：${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG}"
            echo "对应代码提交：${GIT_COMMIT_SHORT}（${GIT_COMMIT_MSG}）"
        }
        failure {
            // 输出构建结果
            echo "有失败步骤！"
        }
    }
}