This commit is contained in:
dxin
2025-11-17 17:28:19 +08:00
parent 8cadbf8ba9
commit 9f7c40c0c8

View File

@@ -7,6 +7,11 @@ pipeline {
defaultValue: false,
description: '是否快速回滚上一个版本?'
)
choice(
name: 'BRANCH_NAME',
choices: ['opt'],
description: '选择Yaml的分支'
)
imageTag(
name: 'IMAGE_NAME',
description: '此处是 sit 镜像仓库内的 go 服务镜像',
@@ -20,13 +25,11 @@ pipeline {
}
environment {
KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称
Deployment_yaml = "/opt-config/lessie-ai/s2/s2-lessie-go-api.yaml"
Deployment_yaml = "${WORKSPACE}/lessie-ai/s2/s2-lessie-go-api.yaml"
Deployment_name = "s2-lessie-go-api-deployment"
K8s_namespace = "sit"
Pod_container_name = "s2-lessie-go-api"
}
stages {
stage('快速回滚上一版本') {
when {
@@ -46,14 +49,12 @@ pipeline {
}
}
}
stage('拉取yaml') {
when {
expression { return params.DEPLOY_AFTER_BUILD == false }
}
steps {
git branch: "opt",
git branch: "${params.BRANCH_NAME}",
credentialsId: 'fly_gitlab_auth',
url: 'http://106.53.194.199/opt/opt-config.git'
}
@@ -64,7 +65,7 @@ pipeline {
}
steps {
script {
echo "=== 所选择镜像 tag: ${params.IMAGE_NAME} ==="
echo "=== 所选择镜像: ${params.IMAGE_NAME} ==="
sh """
echo "=== 修改 Deployment YAML 中的镜像版本 ==="
sed -i 's#image:.*#image: ${params.IMAGE_NAME}#' ${Deployment_yaml}
@@ -72,158 +73,103 @@ pipeline {
}
}
}
// stage('部署到k8s') {
// when {
// expression { return params.DEPLOY_AFTER_BUILD == false }
// }
// steps {
// script {
// def ANNOTATION = "更新 image 为 ${params.IMAGE_NAME}"
// sh """
// echo "===Apply Deployment YAML ==="
// kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace}
stage('部署到k8s') {
// echo "=== 查看当前使用的镜像 ==="
// kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}'
// echo "=== 添加注解 ==="
// kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${ANNOTATION}" --overwrite -n ${K8s_namespace}
// echo "=== 查看历史版本 ==="
// kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace}
// """
// }
// }
// }
// stage('检查部署情况') {
// when {
// expression { return params.DEPLOY_AFTER_BUILD == false }
// }
// steps {
// echo "检测部署状态并验证新版本运行情况"
// sh """
// echo "=== 检查 Deployment 更新状态 ==="
// kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=180s
// echo "=== 检查 Pods 是否全部 Ready ==="
// kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} -o wide
// echo "=== 获取最新 Pod 名称 ==="
// NEW_POD=\$(kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}')
// echo "=== 新 Pod 启动日志(最近20行) ==="
// kubectl logs \$NEW_POD -n ${K8s_namespace} --tail=20 || true
// echo "✅ 部署成功:\$NEW_POD 已正常运行"
// """
// }
// }
stage('生成变更说明') {
when {
expression { return params.DEPLOY_AFTER_BUILD == false }
}
steps {
script {
sh """
kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace}
kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=180s
"""
def user = currentBuild.getBuildCauses()[0].userName ?: "SYSTEM"
def now = sh(script: "date '+%Y-%m-%d %H:%M:%S'", returnStdout: true).trim()
env.CHANGE_MSG = """
jenkins执行人: ${user}
修改时间: ${now}
镜像版本: ${params.IMAGE_NAME}
部署对象: ${Deployment_name}
""".stripIndent()
echo "=== 本次部署变更说明 ==="
echo env.CHANGE_MSG
}
}
}
stage('获取信息') {
stage('提交变更记录到 GitLab') {
when {
expression { return params.DEPLOY_AFTER_BUILD == false }
}
steps {
script {
withCredentials([usernamePassword(credentialsId: 'fly_gitlab_auth', usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) {
sh """
cd ${WORKSPACE}
git config user.name "jenkins"
git config user.email "jenkins@local"
git add ${Deployment_yaml}
git commit -m "更新镜像 ${CHANGE_MSG}"
# 生成临时 .netrc 文件
echo "machine 106.53.194.199 login \$GIT_USER password \$GIT_PASS" > ~/.netrc
chmod 600 ~/.netrc
git push http://106.53.194.199/opt/opt-config.git ${params.BRANCH_NAME}
"""
}
}
}
}
stage('部署到K8S') {
when {
expression { return params.DEPLOY_AFTER_BUILD }
}
steps {
sh """
echo "=== 更新 Deployment 镜像 ==="
kubectl set image deployment/${Deployment_name} ${Pod_container_name}=${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG} -n ${K8s_namespace}
echo "=== 添加注解 ==="
kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${GIT_COMMIT_MSG}" --overwrite -n ${K8s_namespace}
echo "=== 查看历史版本 ==="
kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace}
echo "=== 查看所使用的镜像 ==="
kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}'
"""
}
}
stage('检查部署情况') {
when {
expression { return params.DEPLOY_AFTER_BUILD }
}
steps {
echo "检测部署状态并验证新版本运行情况"
sh """
echo "=== 检查 Deployment 滚动更新状态 ==="
kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=180s
if [ \$? -ne 0 ]; then
echo "❌ 部署超时或失败,开始收集诊断信息..."
echo "=== 查看当前 Pods 状态 ==="
kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} -o wide
echo "=== 查看最近的事件 ==="
kubectl get events -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp | tail -n 20
echo "=== 查看最近一个失败 Pod 的详细描述 ==="
FAILED_POD=\$(kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} --field-selector=status.phase!=Running -o jsonpath='{.items[0].metadata.name}')
if [ ! -z "\$FAILED_POD" ]; then
kubectl describe pod \$FAILED_POD -n ${K8s_namespace} || true
kubectl logs \$FAILED_POD -n ${K8s_namespace} --tail=50 || true
fi
echo "=== 回滚到上一个版本 ==="
kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace}
exit 1
fi
echo "=== 检查 Pods 是否全部 Ready ==="
kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} -o wide
echo "=== 获取最新 Pod 名称 ==="
NEW_POD=\$(kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}')
echo "=== 新 Pod 启动日志(最近20行) ==="
kubectl logs \$NEW_POD -n ${K8s_namespace} --tail=20 || true
echo "✅ 部署成功:\$NEW_POD 已正常运行"
"""
}
}
}
post {
always {
script {
def keepCount = 2
echo "开始清理本地旧镜像,仅保留最近 ${keepCount} 个构建版本"
def imagePrefix = "${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}"
// 获取所有镜像(按创建时间排序,越新的越前)
// 格式Repository:Tag ImageID CreatedAt
def allImagesRaw = sh(script: "docker images ${imagePrefix} --format '{{.Repository}}:{{.Tag}} {{.ID}} {{.CreatedAt}}' | sort -rk3", returnStdout: true).trim()
if (!allImagesRaw) {
echo "未找到任何镜像,无需清理"
return
}
def allImages = allImagesRaw.split('\n')
if (allImages.size() <= keepCount) {
echo "当前镜像数未超过 ${keepCount} 个,无需清理"
return
}
def oldImages = allImages.drop(keepCount)
echo "发现 ${oldImages.size()} 个旧镜像需要清理"
oldImages.each { line ->
echo " ${line}"
}
oldImages.each { line ->
def parts = line.split(' ')
def imageTag = parts[0]
def imageId = parts.size() > 1 ? parts[1] : ""
// 对于标签为<none>的无效镜像使用镜像ID删除
if (imageTag.contains("<none>") && imageId) {
echo "删除无效镜像: ${imageId}"
sh(returnStatus: true, script: "docker rmi -f ${imageId} || true")
} else if (imageId) {
// 对于有标签的有效镜像优先使用镜像ID删除
echo "删除旧镜像: ${imageTag} (${imageId})"
sh(returnStatus: true, script: "docker rmi -f ${imageId} || true")
} else {
// 兜底方案,使用标签删除
echo "删除旧镜像: ${imageTag}"
sh(returnStatus: true, script: "docker rmi -f ${imageTag} || true")
}
}
echo "清理完成,当前镜像状态:"
sh """
docker images ${imagePrefix} --format 'table {{.Repository}}\\t{{.Tag}}\\t{{.CreatedAt}}\\t{{.Size}}'
"""
sh "docker logout ${REGISTRY}"
echo "容器仓库已登出,本地凭证已清理"
}
}
success {
// 输出构建结果
echo "成功!"
echo "镜像地址:${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG}"
echo "对应代码提交:${GIT_COMMIT_SHORT}${GIT_COMMIT_MSG}"
}
failure {
// 输出构建结果
echo "有步骤失败,请检查!"
}
}