From 9f7c40c0c89eb64346273623a3507b43e4b3c46b Mon Sep 17 00:00:00 2001 From: dxin Date: Mon, 17 Nov 2025 17:28:19 +0800 Subject: [PATCH] =?UTF-8?q?=E5=A2=9E=E5=8A=A0?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- SCM/部署镜像/DM_s2_lessie_go_api.groovy | 222 +++++++++--------------- 1 file changed, 84 insertions(+), 138 deletions(-) diff --git a/SCM/部署镜像/DM_s2_lessie_go_api.groovy b/SCM/部署镜像/DM_s2_lessie_go_api.groovy index 63e3f4c..3984948 100644 --- a/SCM/部署镜像/DM_s2_lessie_go_api.groovy +++ b/SCM/部署镜像/DM_s2_lessie_go_api.groovy @@ -7,6 +7,11 @@ pipeline { defaultValue: false, description: '是否快速回滚上一个版本?' ) + choice( + name: 'BRANCH_NAME', + choices: ['opt'], + description: '选择Yaml的分支' + ) imageTag( name: 'IMAGE_NAME', description: '此处是 sit 镜像仓库内的 go 服务镜像', @@ -20,13 +25,11 @@ pipeline { } environment { KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 - Deployment_yaml = "/opt-config/lessie-ai/s2/s2-lessie-go-api.yaml" + Deployment_yaml = "${WORKSPACE}/lessie-ai/s2/s2-lessie-go-api.yaml" Deployment_name = "s2-lessie-go-api-deployment" K8s_namespace = "sit" Pod_container_name = "s2-lessie-go-api" - } - stages { stage('快速回滚上一版本') { when { @@ -46,14 +49,12 @@ pipeline { } } } - - stage('拉取yaml') { when { expression { return params.DEPLOY_AFTER_BUILD == false } } steps { - git branch: "opt", + git branch: "${params.BRANCH_NAME}", credentialsId: 'fly_gitlab_auth', url: 'http://106.53.194.199/opt/opt-config.git' } @@ -64,7 +65,7 @@ pipeline { } steps { script { - echo "=== 所选择镜像 tag: ${params.IMAGE_NAME} ===" + echo "=== 所选择镜像: ${params.IMAGE_NAME} ===" sh """ echo "=== 修改 Deployment YAML 中的镜像版本 ===" sed -i 's#image:.*#image: ${params.IMAGE_NAME}#' ${Deployment_yaml} @@ -72,158 +73,103 @@ pipeline { } } } + // stage('部署到k8s') { + // when { + // expression { return params.DEPLOY_AFTER_BUILD == false } + // } + // steps { + // script { + // def ANNOTATION = "更新 image 为 ${params.IMAGE_NAME}" + // sh """ + // echo "===Apply Deployment YAML ===" + // kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} - stage('部署到k8s') { + // echo "=== 查看当前使用的镜像 ===" + // kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + + // echo "=== 添加注解 ===" + // kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${ANNOTATION}" --overwrite -n ${K8s_namespace} + + // echo "=== 查看历史版本 ===" + // kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} + // """ + // } + // } + // } + // stage('检查部署情况') { + // when { + // expression { return params.DEPLOY_AFTER_BUILD == false } + // } + // steps { + // echo "检测部署状态并验证新版本运行情况" + // sh """ + // echo "=== 检查 Deployment 更新状态 ===" + // kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=180s + + // echo "=== 检查 Pods 是否全部 Ready ===" + // kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} -o wide + + // echo "=== 获取最新 Pod 名称 ===" + // NEW_POD=\$(kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}') + + // echo "=== 新 Pod 启动日志(最近20行) ===" + // kubectl logs \$NEW_POD -n ${K8s_namespace} --tail=20 || true + + // echo "✅ 部署成功：\$NEW_POD 已正常运行" + // """ + // } + // } + stage('生成变更说明') { when { expression { return params.DEPLOY_AFTER_BUILD == false } } steps { script { - sh """ - kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} - kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=180s - """ + def user = currentBuild.getBuildCauses()[0].userName ?: "SYSTEM" + def now = sh(script: "date '+%Y-%m-%d %H:%M:%S'", returnStdout: true).trim() + env.CHANGE_MSG = """ + jenkins执行人: ${user} + 修改时间: ${now} + 镜像版本: ${params.IMAGE_NAME} + 部署对象: ${Deployment_name} + """.stripIndent() + echo "=== 本次部署变更说明 ===" + echo env.CHANGE_MSG } } } - - stage('获取信息') { + stage('提交变更记录到 GitLab') { + when { + expression { return params.DEPLOY_AFTER_BUILD == false } + } steps { script { - + withCredentials([usernamePassword(credentialsId: 'fly_gitlab_auth', usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) { + sh """ + cd ${WORKSPACE} + git config user.name "jenkins" + git config user.email "jenkins@local" + + git add ${Deployment_yaml} + git commit -m "更新镜像 ${CHANGE_MSG}" + + # 生成临时 .netrc 文件 + echo "machine 106.53.194.199 login \$GIT_USER password \$GIT_PASS" > ~/.netrc + chmod 600 ~/.netrc + + git push http://106.53.194.199/opt/opt-config.git ${params.BRANCH_NAME} + """ + } } } } - - stage('部署到K8S') { - when { - expression { return params.DEPLOY_AFTER_BUILD } - } - steps { - sh """ - echo "=== 更新 Deployment 镜像 ===" - kubectl set image deployment/${Deployment_name} ${Pod_container_name}=${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG} -n ${K8s_namespace} - echo "=== 添加注解 ===" - kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${GIT_COMMIT_MSG}" --overwrite -n ${K8s_namespace} - echo "=== 查看历史版本 ===" - kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} - echo "=== 查看所使用的镜像 ===" - kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' - """ - } - } - - stage('检查部署情况') { - when { - expression { return params.DEPLOY_AFTER_BUILD } - } - steps { - echo "检测部署状态并验证新版本运行情况" - sh """ - echo "=== 检查 Deployment 滚动更新状态 ===" - kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=180s - - if [ \$? -ne 0 ]; then - echo "❌ 部署超时或失败，开始收集诊断信息..." - echo "=== 查看当前 Pods 状态 ===" - kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} -o wide - - echo "=== 查看最近的事件 ===" - kubectl get events -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp | tail -n 20 - - echo "=== 查看最近一个失败 Pod 的详细描述 ===" - FAILED_POD=\$(kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} --field-selector=status.phase!=Running -o jsonpath='{.items[0].metadata.name}') - if [ ! -z "\$FAILED_POD" ]; then - kubectl describe pod \$FAILED_POD -n ${K8s_namespace} || true - kubectl logs \$FAILED_POD -n ${K8s_namespace} --tail=50 || true - fi - - echo "=== 回滚到上一个版本 ===" - kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace} - - exit 1 - fi - - echo "=== 检查 Pods 是否全部 Ready ===" - kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} -o wide - - echo "=== 获取最新 Pod 名称 ===" - NEW_POD=\$(kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}') - - echo "=== 新 Pod 启动日志(最近20行) ===" - kubectl logs \$NEW_POD -n ${K8s_namespace} --tail=20 || true - - echo "✅ 部署成功：\$NEW_POD 已正常运行" - """ - } - } - } post { - always { - script { - def keepCount = 2 - echo "开始清理本地旧镜像，仅保留最近 ${keepCount} 个构建版本" - def imagePrefix = "${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}" - - // 获取所有镜像（按创建时间排序，越新的越前） - // 格式：Repository:Tag ImageID CreatedAt - def allImagesRaw = sh(script: "docker images ${imagePrefix} --format '{{.Repository}}:{{.Tag}} {{.ID}} {{.CreatedAt}}' | sort -rk3", returnStdout: true).trim() - if (!allImagesRaw) { - echo "未找到任何镜像，无需清理" - return - } - - def allImages = allImagesRaw.split('\n') - if (allImages.size() <= keepCount) { - echo "当前镜像数未超过 ${keepCount} 个，无需清理" - return - } - - def oldImages = allImages.drop(keepCount) - echo "发现 ${oldImages.size()} 个旧镜像需要清理" - oldImages.each { line -> - echo " ${line}" - } - - oldImages.each { line -> - def parts = line.split(' ') - def imageTag = parts[0] - def imageId = parts.size() > 1 ? parts[1] : "" - - // 对于标签为的无效镜像，使用镜像ID删除 - if (imageTag.contains("") && imageId) { - echo "删除无效镜像: ${imageId}" - sh(returnStatus: true, script: "docker rmi -f ${imageId} || true") - } else if (imageId) { - // 对于有标签的有效镜像，优先使用镜像ID删除 - echo "删除旧镜像: ${imageTag} (${imageId})" - sh(returnStatus: true, script: "docker rmi -f ${imageId} || true") - } else { - // 兜底方案，使用标签删除 - echo "删除旧镜像: ${imageTag}" - sh(returnStatus: true, script: "docker rmi -f ${imageTag} || true") - } - } - - echo "清理完成，当前镜像状态：" - sh """ - docker images ${imagePrefix} --format 'table {{.Repository}}\\t{{.Tag}}\\t{{.CreatedAt}}\\t{{.Size}}' - """ - - sh "docker logout ${REGISTRY}" - echo "容器仓库已登出，本地凭证已清理" - } - } success { - // 输出构建结果 echo "成功！" - echo "镜像地址：${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG}" - echo "对应代码提交：${GIT_COMMIT_SHORT}（${GIT_COMMIT_MSG}）" } failure { - // 输出构建结果 echo "有步骤失败，请检查！" } }