diff --git a/Dockerfile/python/lessie-review-service/dockerfile b/Dockerfile/python/lessie-review-service/dockerfile index e3fd6ea..44c8151 100644 --- a/Dockerfile/python/lessie-review-service/dockerfile +++ b/Dockerfile/python/lessie-review-service/dockerfile @@ -2,52 +2,43 @@ # 1) 构建依赖阶段 # =============================== FROM uswccr.ccs.tencentyun.com/lessie/python:3.12-slim AS build - WORKDIR /app - # 使用 uv 官方镜像中的二进制文件（不用 pip install uv ） COPY --from=ghcr.io/astral-sh/uv:latest /uv /uv/bin/uv - # APT 源替换 + 安装依赖（合并为一个 RUN，最大化缓存） RUN set -eux; \ sed -i 's@deb.debian.org@mirrors.tuna.tsinghua.edu.cn@g' /etc/apt/sources.list.d/debian.sources; \ apt-get update; \ apt-get install -y --no-install-recommends build-essential git; \ rm -rf /var/lib/apt/lists/* - # 拷贝依赖定义（用于缓存） COPY uv.lock pyproject.toml ./ - +# 依赖变更标记（CI 传入 lock 文件 hash，确保依赖变化时重新构建） +ARG DEPS_HASH="" # 使用 uv 安装依赖（--frozen 确保锁定版本） -RUN /uv/bin/uv sync --frozen --no-dev --no-install-project - +RUN echo "deps:${DEPS_HASH}" && /uv/bin/uv sync --frozen --no-dev --no-install-project # =============================== # 2) 运行阶段 # =============================== FROM uswccr.ccs.tencentyun.com/lessie/python:3.12-slim AS runtime - WORKDIR /app - -# 设置时区 (Debian 方式) +# 设置时区 + 安装 ca-certificates (Kafka SSL 需要) RUN set -eux; \ sed -i 's@deb.debian.org@mirrors.tuna.tsinghua.edu.cn@g' /etc/apt/sources.list.d/debian.sources; \ apt-get update; \ - apt-get install -y --no-install-recommends tzdata; \ + apt-get install -y --no-install-recommends tzdata ca-certificates; \ ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime; \ echo "Asia/Shanghai" > /etc/timezone; \ rm -rf /var/lib/apt/lists/* - -# 拷贝 uv、虚拟环境 +# 拷贝 uv、虚拟环境（依赖变更时重新拷贝） +ARG DEPS_HASH="" COPY --from=build /uv/bin/uv /usr/local/bin/uv +RUN echo "deps:${DEPS_HASH}" COPY --from=build /app/.venv /app/.venv - # 拷贝代码 COPY . . - ENV APP_ENV=local \ PYTHONUNBUFFERED=1 \ PATH="/app/.venv/bin:$PATH" - EXPOSE 8081 - CMD ["uv", "run", "main.py"] diff --git a/Dockerfile/python/lessie-search-agent/dockerfile b/Dockerfile/python/lessie-search-agent/dockerfile index e3fd6ea..44c8151 100644 --- a/Dockerfile/python/lessie-search-agent/dockerfile +++ b/Dockerfile/python/lessie-search-agent/dockerfile @@ -2,52 +2,43 @@ # 1) 构建依赖阶段 # =============================== FROM uswccr.ccs.tencentyun.com/lessie/python:3.12-slim AS build - WORKDIR /app - # 使用 uv 官方镜像中的二进制文件（不用 pip install uv ） COPY --from=ghcr.io/astral-sh/uv:latest /uv /uv/bin/uv - # APT 源替换 + 安装依赖（合并为一个 RUN，最大化缓存） RUN set -eux; \ sed -i 's@deb.debian.org@mirrors.tuna.tsinghua.edu.cn@g' /etc/apt/sources.list.d/debian.sources; \ apt-get update; \ apt-get install -y --no-install-recommends build-essential git; \ rm -rf /var/lib/apt/lists/* - # 拷贝依赖定义（用于缓存） COPY uv.lock pyproject.toml ./ - +# 依赖变更标记（CI 传入 lock 文件 hash，确保依赖变化时重新构建） +ARG DEPS_HASH="" # 使用 uv 安装依赖（--frozen 确保锁定版本） -RUN /uv/bin/uv sync --frozen --no-dev --no-install-project - +RUN echo "deps:${DEPS_HASH}" && /uv/bin/uv sync --frozen --no-dev --no-install-project # =============================== # 2) 运行阶段 # =============================== FROM uswccr.ccs.tencentyun.com/lessie/python:3.12-slim AS runtime - WORKDIR /app - -# 设置时区 (Debian 方式) +# 设置时区 + 安装 ca-certificates (Kafka SSL 需要) RUN set -eux; \ sed -i 's@deb.debian.org@mirrors.tuna.tsinghua.edu.cn@g' /etc/apt/sources.list.d/debian.sources; \ apt-get update; \ - apt-get install -y --no-install-recommends tzdata; \ + apt-get install -y --no-install-recommends tzdata ca-certificates; \ ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime; \ echo "Asia/Shanghai" > /etc/timezone; \ rm -rf /var/lib/apt/lists/* - -# 拷贝 uv、虚拟环境 +# 拷贝 uv、虚拟环境（依赖变更时重新拷贝） +ARG DEPS_HASH="" COPY --from=build /uv/bin/uv /usr/local/bin/uv +RUN echo "deps:${DEPS_HASH}" COPY --from=build /app/.venv /app/.venv - # 拷贝代码 COPY . . - ENV APP_ENV=local \ PYTHONUNBUFFERED=1 \ PATH="/app/.venv/bin:$PATH" - EXPOSE 8081 - CMD ["uv", "run", "main.py"] diff --git a/Dockerfile/web/admin_web_Dockerfile b/Dockerfile/web/admin_web_Dockerfile index 8e2019c..b7a193c 100644 --- a/Dockerfile/web/admin_web_Dockerfile +++ b/Dockerfile/web/admin_web_Dockerfile @@ -1,41 +1,44 @@ # =============================== # 1) 依赖安装 + 构建阶段 # =============================== -FROM node:16-alpine AS build +FROM node:20.15.0-alpine AS builder +# 设定工作目录，后续所有指令基于此，避免路径混乱 WORKDIR /app -# 只拷贝 package.json，加快缓存命中 +# 配置npm国内源（仅1次配置，后续所有npm命令自动复用，删除冗余的registry传参） +ENV NPM_REGISTRY=https://registry.npmmirror.com/ +RUN npm config set registry ${NPM_REGISTRY} + +# 先拷贝package.json（核心：利用Docker层缓存，代码不变则不重装依赖） COPY package.json ./ -# 预先安装依赖（利用缓存） -RUN npm install --registry=https://registry.npmmirror.com +# 安装依赖（无需重复写registry，已全局配置，加快构建） +RUN npm install -# 拷贝全部代码 +# 拷贝全部项目代码（放在装依赖后，最大化缓存收益） COPY . . -# 通过构建参数传入构建环境（如 sit/test/prod） +# 构建参数：默认sit，build时可通过--build-arg覆盖（如prod/test） ARG BUILD_ENV=sit +# 注入环境变量，确保构建脚本能读取到（部分框架需要环境变量透传） ENV BUILD_ENV=${BUILD_ENV} -# 要求 package.json 中的 script 形如：build:sit, build:test, build:prod +# 执行环境构建命令（兼容package.json的build:sit/build:test/build:prod） RUN npm run build:${BUILD_ENV} # =============================== -# 2) 生产镜像阶段 +# 2) 生产镜像阶段（轻量Nginx，仅保留构建产物） # =============================== -FROM nginx:1.25-alpine AS runtime - -# 清理默认 nginx 静态内容 -RUN rm -rf /usr/share/nginx/html/* - -# 拷贝 build 结果 -COPY --from=build /app/dist /usr/share/nginx/html/ - -# 权限 -RUN chmod -R 755 /usr/share/nginx/html +FROM nginx:stable-alpine AS runtime +# 暴露80端口（Docker声明，方便容器映射，不影响实际运行） EXPOSE 80 -CMD ["nginx", "-g", "daemon off;"] +# 复制自定义Nginx配置（解决路由404+禁用所有缓存，核心修正） +COPY ./default.conf /etc/nginx/conf.d/default.conf +# 从构建阶段拷贝最终构建产物到Nginx静态资源根目录 +COPY --from=builder /app/dist /usr/share/nginx/html + +# Nginx官方镜像默认自动启动nginx，无需额外CMD/ENTRYPOINT \ No newline at end of file diff --git a/Dockerfile/web/default.conf b/Dockerfile/web/default.conf new file mode 100644 index 0000000..4d52f18 --- /dev/null +++ b/Dockerfile/web/default.conf @@ -0,0 +1,27 @@ +server { + listen 80; + server_name _; # 匹配所有域名，适合容器化部署 + root /usr/share/nginx/html; # Nginx静态资源根目录，和Dockerfile拷贝路径一致 + index index.html index.htm; # 默认入口文件 + + # 客户端最大请求体大小，适配文件上传等场景 + client_max_body_size 100M; + + # 核心：解决前端Vue/React/Angular等SPA的history模式路由刷新404问题 + location / { + try_files $uri $uri/ /index.html; + } + + # 全局禁用缓存：禁止浏览器/代理服务器缓存任何资源 + add_header Cache-Control "no-store, no-cache, must-revalidate, proxy-revalidate" always; + add_header Pragma "no-cache" always; + add_header Expires "0" always; + add_header Surrogate-Control "no-store" always; + + # 对所有静态资源单独强化无缓存配置，立即过期 + location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg|woff|woff2|ttf|eot)$ { + try_files $uri =404; # 资源不存在直接返回404，避免走index.html + expires -1; # 立即过期，优先级高于全局缓存配置 + add_header Cache-Control "no-store, no-cache, must-revalidate" always; + } +} \ No newline at end of file diff --git a/Dockerfile/web/lessie_web_Dockerfile b/Dockerfile/web/lessie_web_Dockerfile index f9ddccf..244b37b 100644 --- a/Dockerfile/web/lessie_web_Dockerfile +++ b/Dockerfile/web/lessie_web_Dockerfile @@ -1,16 +1,3 @@ -# # 使用 Nginx 官方轻量镜像 -# FROM nginx:1.25-alpine - -# # 拷贝前端构建产物 -# COPY dist/ /usr/share/nginx/html/ - -# # 暴露端口 -# EXPOSE 80 - -# CMD ["nginx", "-g", "daemon off;"] - - - # 第一阶段：构建阶段 - 使用指定node20.15.0版本，安装pnpm FROM node:20.15.0-alpine AS builder @@ -46,7 +33,7 @@ FROM nginx:stable-alpine EXPOSE 80 # 可选：替换Nginx默认配置（解决前端路由刷新404、开启gzip压缩，优化静态资源） -# COPY ./nginx.conf /etc/nginx/conf.d/default.conf +# COPY ./default.conf /etc/nginx/conf.d/default.conf # 从构建阶段（builder）复制构建后的dist目录到Nginx的静态资源根目录 COPY --from=builder /app/dist /usr/share/nginx/html diff --git a/SCM/构建镜像/v4/build_image_lessie_search_service_v4.groovy b/SCM/构建镜像/v4/build_image_lessie_search_service_v4.groovy new file mode 100644 index 0000000..bce918b --- /dev/null +++ b/SCM/构建镜像/v4/build_image_lessie_search_service_v4.groovy @@ -0,0 +1,405 @@ +// --- 辅助函数：深拷贝对象以确保可序列化 --- +def deepCopyForSerialization(obj) { + if (obj instanceof Map) { + // 创建新的 LinkedHashMap，递归拷贝值 + return obj.collectEntries { k, v -> [(k): deepCopyForSerialization(v)] } + } else if (obj instanceof List) { + // 创建新的 ArrayList，递归拷贝元素 + return obj.collect { item -> deepCopyForSerialization(item) } + } else if (obj instanceof String || obj instanceof Number || obj instanceof Boolean || obj == null) { + return obj + } else { + return obj.toString() + } +} +// --- 结束辅助函数 --- + +pipeline { + agent any + + parameters { + gitParameter( + branchFilter: 'origin/(.*)', + defaultValue: 'master', + name: 'Code_branch', + type: 'PT_BRANCH_TAG', + selectedValue: 'DEFAULT', + sortMode: 'NONE', + description: '选择代码分支: ', + quickFilterEnabled: true, + tagFilter: '*', + listSize: "1" + ) + choice( + name: 'NAME_SPACES', + choices: ['sit', 'test', 'prod'], + description: '选择存放镜像的仓库命名空间：' + ) + string( + name: 'CUSTOM_TAG', + defaultValue: '', + description: '可选：自定义镜像 Tag (字母、数字、点、下划线、短横线), 留空则自动生成 “ v+构建次数_分支名_短哈希_构建时间 ”' + ) + booleanParam( + name: 'DEPLOY_TO_SIT', + defaultValue: false, + description: '可选：构建成功后部署到 SIT 环境 (触发 job: DM_s1_lessie_search_agent)' + ) + } + environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送构建通知 + REGISTRY = "uswccr.ccs.tencentyun.com" // 镜像仓库地址 + NAMESPACE = "lessie${params.NAME_SPACES}" // 命名空间根据choices的选择拼接 + IMAGE_NAME = "lessie-search-service" // 镜像名（固定前缀） + CREDENTIALS_ID = "dxin_img_hub_auth" // 容器仓库凭证ID + } + + stages { + stage('拉取代码') { + steps { + git branch: "${params.Code_branch}", + credentialsId: 'fly_gitlab_auth', + url: 'http://172.24.16.20/python/lessie-search-agent.git' + } + } + stage('获取信息') { + steps { + script { + // 获取构建者 + def cause = currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause') + env.ACTUAL_USER = cause ? cause.userName[0] : "系统/自动触发" + // 获取分支名 + env.Code_branch = "${params.Code_branch}" + // 获取最近一次提交的哈希值（短格式，前8位） + env.GIT_COMMIT_SHORT = sh(script: 'git rev-parse --short HEAD',returnStdout: true).trim() + // 获取最近一次提交的哈希值（全格式） + env.GIT_COMMIT_LONG = sh(script: 'git rev-parse HEAD', returnStdout: true).trim() + // 获取最近一次提交的作者 + env.GIT_AUTHOR = sh(script: 'git log -1 --pretty=format:%an',returnStdout: true).trim() + // 获取最近一次提交的时间（格式化） + env.GIT_COMMIT_TIME = sh( + script: 'git log -1 --pretty=format:%ct | xargs -I {} date -d @{} +%Y%m%d-%H%M%S', + returnStdout: true + ).trim() + // 获取最近一次提交的备注信息（转义特殊字符，避免构建失败） + env.GIT_COMMIT_MSG = sh(script: 'git log -1 --pretty=format:%s | sed -e \'s/"/\\"/g\'', returnStdout: true).trim() + + // Jenkins构建次数 + def buildNumber = env.BUILD_NUMBER // Jenkins内置变量，直接获取当前Job的构建序号 + // 当前分支名（处理/为-，如feature/docker_1015 → feature-docker_1015） + def branchName = sh(script: 'git rev-parse --abbrev-ref HEAD', returnStdout: true).trim() + def formattedBranch = branchName.replace('/', '-').replace('_', '-') // 替换分支名中的/和_为- + // 构建时间（格式：202510181215，年-月-日-时-分，无分隔符） + def buildTime = sh(script: 'date +%Y%m%d%H%M', returnStdout: true).trim() + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + + def defaultTag = "v${buildNumber}_${formattedBranch}_${GIT_COMMIT_SHORT}_${buildTime}" + + def customTag = params.CUSTOM_TAG?.trim() + def tagPattern = ~/^[a-zA-Z0-9._-]+$/ + + // 判断最终Tag + if (customTag && customTag ==~ tagPattern) { + echo "✅ 使用自定义镜像 Tag: ${customTag}" + env.IMAGE_TAG = customTag + } else if (customTag) { + echo "⚠️ 自定义 Tag '${customTag}' 不符合规范，将使用默认生成的 Tag: ${defaultTag}" + + def confirmed = true + timeout(time: 1, unit: 'MINUTES') { + try { + input( + message: """⚠️ Tag 命名不规范： + ${customTag} + + 将使用自动生成的 Tag： + ${defaultTag} + + 是否继续构建？""", + ok: '确认' + ) + } catch (err) { + // 用户点击“取消”或中断 + echo "🚫 用户取消构建" + confirmed = false + } + } + + if (confirmed) { + echo "✅ 用户确认使用自动生成的 Tag：${defaultTag}" + env.IMAGE_TAG = defaultTag + } else { + error("流水线已终止。") + } + } else { + env.IMAGE_TAG = defaultTag + echo "未输入自定义 Tag, 使用自动生成规则: ${env.IMAGE_TAG}" + } + } + } + } + stage('登录仓库') { + steps { + withCredentials([usernamePassword( + credentialsId: env.CREDENTIALS_ID, + usernameVariable: 'REGISTRY_USER', + passwordVariable: 'REGISTRY_PWD' + )]) { + sh ''' + echo "$REGISTRY_PWD" | docker login ${REGISTRY} -u ${REGISTRY_USER} --password-stdin + ''' + } + } + } + stage('构建镜像') { + steps { + script { + // 构建镜像，添加标签信息 + sh """ + docker build -t ${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG} \ + --label "git-branch='${Code_branch}'" \ + --label "git-commit='${GIT_COMMIT_SHORT}'" \ + --label "git-author='${GIT_AUTHOR}'" \ + --label "git-message='${GIT_COMMIT_MSG}'" \ + --label "build-time='${GIT_COMMIT_TIME}'" \ + . + """ + } + } + } + stage('推送镜像') { + steps { + script { + // 推送镜像（带唯一 Tag） + sh "docker push ${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG}" + echo "推送镜像成功：${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG}" + } + } + } + } + + post { + always { + script { + def keepCount = 3 + echo "开始清理本地旧镜像，仅保留最近 ${keepCount} 个构建版本" + def imagePrefix = "${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}" + + // 获取所有镜像（按创建时间排序，越新的越前） + // 格式：Repository:Tag ImageID CreatedAt + def allImagesRaw = sh(script: "docker images ${imagePrefix} --format '{{.Repository}}:{{.Tag}} {{.ID}} {{.CreatedAt}}' | sort -rk3", returnStdout: true).trim() + if (!allImagesRaw) { + echo "未找到任何镜像，无需清理" + return + } + + def allImages = allImagesRaw.split('\n') + if (allImages.size() <= keepCount) { + echo "当前镜像数未超过 ${keepCount} 个，无需清理" + return + } + + def oldImages = allImages.drop(keepCount) + echo "发现 ${oldImages.size()} 个旧镜像需要清理" + oldImages.each { line -> + echo " ${line}" + } + + oldImages.each { line -> + def parts = line.split(' ') + def imageTag = parts[0] + def imageId = parts.size() > 1 ? parts[1] : "" + + // 对于标签为的无效镜像，使用镜像ID删除 + if (imageTag.contains("") && imageId) { + echo "删除无效镜像: ${imageId}" + sh(returnStatus: true, script: "docker rmi -f ${imageId} || true") + } else if (imageId) { + // 对于有标签的有效镜像，优先使用镜像ID删除 + echo "删除旧镜像: ${imageTag} (${imageId})" + sh(returnStatus: true, script: "docker rmi -f ${imageId} || true") + } else { + // 兜底方案，使用标签删除 + echo "删除旧镜像: ${imageTag}" + sh(returnStatus: true, script: "docker rmi -f ${imageTag} || true") + } + } + + echo "清理完成，当前镜像状态：" + sh """ + docker images ${imagePrefix} --format 'table {{.Repository}}\\t{{.Tag}}\\t{{.CreatedAt}}\\t{{.Size}}' + """ + } + } + success { + script { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${IMAGE_NAME}镜像构建成功", + text: [ + "📅 **构建时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🔀 **代码分支**: ${params.Code_branch}", + "🌟 **构建状态**: 构建成功", + "⏱️ **构建用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **镜像名称**: ${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG}", + "📝 **提交摘要**: ${env.GIT_COMMIT_MSG}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + // 1. 准备元数据 (转换所有环境变量为 String) + def metadataDir = '/var/lib/jenkins/metadata' + def metadataFileRelativePath = "${env.NAMESPACE}-${env.IMAGE_NAME}.json" // 相对于 metadataDir 的文件名 + def fullMetadataPath = "${metadataDir}/${metadataFileRelativePath}" + + // --- 转换为 String --- + def registry = env.REGISTRY as String + def namespace = env.NAMESPACE as String + def imageName = env.IMAGE_NAME as String + def imageTag = env.IMAGE_TAG as String + def codeBranch = params.Code_branch as String // 使用 params，因为 Code_branch 是参数 + def gitCommit = env.GIT_COMMIT_LONG as String + def gitAuthor = env.GIT_AUTHOR as String + def gitCommitMsg = env.GIT_COMMIT_MSG as String + def gitCommitTime = env.GIT_COMMIT_TIME as String + def buildNumber = env.BUILD_NUMBER as String + // --- 转换为 String --- + + // 2. 准备新数据 + def newImageData = [ + image_tag: imageTag, // 使用转换后的变量 + full_image_name: "${registry}/${namespace}/${imageName}:${imageTag}", // 使用转换后的变量 + labels: [ + "git-branch": codeBranch, + "git-commit": gitCommit, + "git-author": gitAuthor, + "git-message": gitCommitMsg, + "build-time": gitCommitTime + ], + build_job_number: buildNumber, + build_time: new Date().format('yyyy-MM-dd HH:mm:ss') // Jenkins 构建完成时间 + ] + + // 2. 读取现有数据（如果文件存在） + def existingDataList = [] + try { + // 使用 readJSON 步骤读取文件内容 (readJSON 会自动处理 LazyMap 问题) + def rawExistingData = readJSON file: fullMetadataPath, default: [] // 如果文件不存在，则返回空列表 [] + + // --- ✅ 修复：深拷贝 rawExistingData (修正内联代码) --- + if (rawExistingData instanceof List) { + existingDataList = rawExistingData.collect { item -> + if (item instanceof Map) { + // 递归深拷贝 Map (使用辅助函数) + return deepCopyForSerialization(item) + } else { + return item + } + } + } else { + echo "警告: 元数据文件 ${fullMetadataPath} 格式不正确（非 List 类型），将被覆盖。" + existingDataList = [] + } + // --- 结束修复 --- + + } catch (Exception e) { + // readJSON 在文件不存在时通常会返回 default 值，但如果文件存在但格式错误，会抛出异常 + echo "警告: 读取元数据文件 ${fullMetadataPath} 失败或格式错误: ${e.getMessage()}，将被覆盖。" + // 确保目录存在 + sh "mkdir -p ${metadataDir}" + existingDataList = [] // 重置为新列表 + } + + // 3. 将新数据添加到列表开头（最新的在前） + existingDataList.add(0, newImageData) + + // 4. 限制列表大小为 20 + if (existingDataList.size() > 20) { + existingDataList = existingDataList.take(20) + } + + // 5. 使用 writeJSON 步骤写入文件 (writeJSON 会自动处理 Map 的序列化) + writeJSON file: fullMetadataPath, json: existingDataList, pretty: 2 // pretty: 2 表示格式化 JSON (2 个空格缩进) + + echo "镜像元数据已存储到: ${fullMetadataPath}" + + // 输出构建结果 + echo """ + 镜像地址：${registry}/${namespace}/${imageName}:${imageTag} + 对应代码提交哈希：${gitCommit} + 对应代码分支：${codeBranch} + 代码提交者：${gitAuthor} + 提交备注：${gitCommitMsg} + """.stripIndent() + } + // 构建成功后，若选择则触发部署到 SIT 环境 + script { + // 定义部署映射：参数名 → 部署 Job 名 + def deployMap = [ + 'DEPLOY_TO_SIT' : 'DM_s1_lessie_search_agent', + ] + + // 获取完整镜像名（从已有 env 变量拼接） + def fullImageName = "${env.REGISTRY}/${env.NAMESPACE}/${env.IMAGE_NAME}:${env.IMAGE_TAG}" + + echo "构建完成镜像：${fullImageName}" + echo "检查部署触发项..." + + deployMap.each { paramKey, jobName -> + if (params."${paramKey}" == true) { + echo "触发部署：${jobName} ← ${fullImageName}" + // 异步触发 + build job: jobName, + parameters: [ + string(name: 'CUSTOM_IMAGE', value: fullImageName), + string(name: 'ACTUAL_USER', value: ACTUAL_USER), + ], + wait: false // ← 异步（此 Job 结束，不等待被调用的 Job 结束） + } else { + echo "未勾选 ${paramKey}, 跳过触发部署：${jobName}" + } + } + } + } + failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${IMAGE_NAME}镜像构建失败", + text: [ + "📅 **构建时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🔀 **代码分支**: ${params.Code_branch}", + "🌟 **构建状态**: 构建失败", + "⏱️ **构建用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **镜像名称**: ${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG}", + "📝 **提交摘要**: ${env.GIT_COMMIT_MSG}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "有步骤出错！" + } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${IMAGE_NAME}镜像构建取消", + text: [ + "📅 **构建时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🔀 **代码分支**: ${params.Code_branch}", + "🌟 **构建状态**: 构建取消", + "⏱️ **构建用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **镜像名称**: ${REGISTRY}/${NAMESPACE}/${IMAGE_NAME}:${IMAGE_TAG}", + "📝 **提交摘要**: ${env.GIT_COMMIT_MSG}", + "👤 **取消账号**: ${env.ACTUAL_USER}", + ] + ) + } + } +} \ No newline at end of file diff --git a/SCM/部署镜像/s1/v3/DM_s1_lessie_search_service.groovy b/SCM/部署镜像/s1/v3/DM_s1_lessie_search_service.groovy new file mode 100644 index 0000000..d20fe93 --- /dev/null +++ b/SCM/部署镜像/s1/v3/DM_s1_lessie_search_service.groovy @@ -0,0 +1,311 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + +pipeline { + agent any + + parameters { + imageTag( + name: 'IMAGE_NAME', + description: 'sit 仓库镜像 (除非输入 CUSTOM_IMAGE, 否则使用这里的)', + registry: 'https://uswccr.ccs.tencentyun.com', + image: 'lessiesit/lessie-search-service', + credentialId: 'dxin_img_hub_auth', + filter: '.*', + defaultTag: '', + tagOrder: 'DSC_VERSION', + verifySsl: true + ) + string( + name: 'CUSTOM_IMAGE', + defaultValue: '', + description: '手输完整镜像//:，例如: uswccr.ccs.tencentyun.com/lessiesit/lessie-search-agents:v0.0.1 (填充后，则忽略镜像仓库选择)' + ) + booleanParam( + name: 'ROLLBACK_VERSION', + defaultValue: false, + description: '是否快速回滚上一个版本?' + ) + choice( + name: 'BRANCH_NAME', + choices: ['dxin', 'opt'], + description: '选择资源清单Yaml的分支' + ) + } + environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 + KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/lessie-search-service.yaml" + Deployment_name = "sit-lessie-search-service" + K8s_namespace = "sit" + Pod_container_name = "lessie-search-service" + Pod_environment = "sit" + } + stages { + stage('回滚上版') { + when { expression { return params.ROLLBACK_VERSION == true } } + steps { + script { + sh """ + echo "=== 开始回滚到上一个版本 ===" + kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace} + echo "=== 回滚中... ===" + kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s + echo "=== 查看所使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + echo "=== 回滚完成 ===" + """ + } + } + } + stage('决定镜像') { + steps { + script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ + + if (params.CUSTOM_IMAGE?.trim()) { + echo "检测手输镜像格式: ${params.CUSTOM_IMAGE}" + def customImage = params.CUSTOM_IMAGE.trim() + // 验证镜像格式 + def matcher = (customImage =~ imageRegex) + if (!matcher.matches()) { + error "CUSTOM_IMAGE 格式不正确，必须是 registry/namespace/repository:tag 格式\n" + + "示例: uswccr.ccs.tencentyun.com/lessiesit/lessie-sourcing-agents:v1.0.0\n" + + "当前输入: ${customImage}" + } + + echo "使用手输镜像: ${customImage}" + env.IMAGE_FULL_NAME = customImage + + } else { + def img = "uswccr.ccs.tencentyun.com/${params.IMAGE_NAME}" + echo "使用 imageTag 插件镜像: ${img}" + env.IMAGE_FULL_NAME = img + } + } + } + } + stage('查询镜像') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "查询镜像: ${IMAGE_FULL_NAME}" + + def result = sh(returnStdout: true, script: """ + /data/sh/get-image-labels-fast.sh \ + "${IMAGE_FULL_NAME}" \ + "100038894437" \ + 'h8H1o6Fd!HLXn' | awk '/^{/,/^}\$/' + """).trim() + + if (result == "" || result == null) { + error("查询镜像 label 失败，请检查镜像是否存在或凭证问题") + } + + echo "镜像 Label:\n${result}" + env.IMAGE_LABEL = result + } + } + } + stage('拉取yaml') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + git branch: "${params.BRANCH_NAME}", + credentialsId: 'fly_gitlab_auth', + url: 'http://172.24.16.20/opt/opt-config.git' + } + } + stage('修改YAML') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def oldImg = sh ( + script: """ + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' 2>/dev/null || echo "无（可能是首次部署）" + """, + returnStdout: true + ).trim() + env.OLD_IMAGE_NAME = oldImg + echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" + echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" + sh """ + sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} + """ + } + } + } + stage('部署k8s') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" + sh """ + echo "===Apply Deployment YAML ===" + kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} + + echo "=== 查看当前新使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + + echo "=== 添加注解 ===" + kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${ANNOTATION}" --overwrite -n ${K8s_namespace} + + echo "=== 查看历史版本 ===" + kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} + """ + } + } + } + stage('部署情况') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "=== 检测部署状态并验证新版本运行情况 ===" + echo "--- 检查 Deployment 更新状态 ---" + def rolloutStatus = sh( + script: "kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s", + returnStatus: true + ) + + if (rolloutStatus != 0){ + echo "Deployment ${Deployment_name} 发布 **超时或失败**，开始排查..." + sh """ + echo "--- Deployment 状态 ---" + kubectl describe deployment ${Deployment_name} -n ${K8s_namespace} || true + + echo '--- Pod 列表 ---' + kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o wide || true + + echo "--- Pod 描述 (describe) ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- Pod 描述 \$pod --" + kubectl describe pod \$pod -n ${K8s_namespace} || true + done + + echo "--- 最近 200 行 Pod 日志 ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- logs \$pod --" + kubectl logs \$pod -n ${K8s_namespace} --tail=200 || true + done + """ + error("=== Deployment 发布失败，请检查以上输出定位问题 ===") + } + + echo "=== 检查 Pods 是否全部 Ready ===" + sh "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} -o wide" + + echo "=== 获取最新 Pod 名称 ===" + NEW_POD = sh ( + script: "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}'", + returnStdout: true + ).trim() + + echo "=== 新 Pod 启动日志(最近20行) ===" + sh "kubectl logs ${NEW_POD} -n ${K8s_namespace} --tail=20 || true" + + echo "部署成功：${NEW_POD} 已正常运行" + } + } + } + stage('变更说明') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + env.CHANGE_MSG = """ +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} +旧镜像: ${OLD_IMAGE_NAME} +新镜像: ${IMAGE_FULL_NAME} +部署对象: ${Deployment_name} +镜像标签: ${env.IMAGE_LABEL} + """.stripIndent().trim() + echo env.CHANGE_MSG + } + } + } + stage('提交变更') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "略" + } + } + } + } + + post { + success { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" + } + failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "有步骤失败，请检查！" + } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } + } +} \ No newline at end of file diff --git a/SCM/部署镜像/s1/v4/DM_s1_flymoon_admin.groovy b/SCM/部署镜像/s1/v4/DM_s1_flymoon_admin.groovy new file mode 100644 index 0000000..a0fab6c --- /dev/null +++ b/SCM/部署镜像/s1/v4/DM_s1_flymoon_admin.groovy @@ -0,0 +1,345 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + +pipeline { + agent any + + parameters { + imageTag( + name: 'IMAGE_NAME', + description: 'sit 仓库镜像 (除非输入 CUSTOM_IMAGE, 否则使用这里的)', + registry: 'https://uswccr.ccs.tencentyun.com', + image: 'lessiesit/flymoon-admin', + credentialId: 'dxin_img_hub_auth', + filter: '.*', + defaultTag: '', + tagOrder: 'DSC_VERSION', + verifySsl: true + ) + string( + name: 'CUSTOM_IMAGE', + defaultValue: '', + description: '手输完整镜像//:，例如: uswccr.ccs.tencentyun.com/lessiesit/flymoon-admin:v0.0.1 (填充后，则忽略镜像仓库选择)' + ) + booleanParam( + name: 'ROLLBACK_VERSION', + defaultValue: false, + description: '是否快速回滚上一个版本?' + ) + choice( + name: 'BRANCH_NAME', + choices: ['dxin', 'opt'], + description: '选择资源清单Yaml的分支' + ) + } + environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 + KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/flymoon-admin.yaml" + Deployment_name = "s1-flymoon-admin" + K8s_namespace = "sit" + Pod_container_name = "flymoon-admin" + } + stages { + stage('回滚上版') { + when { expression { return params.ROLLBACK_VERSION == true } } + steps { + script { + sh """ + echo "=== 开始回滚到上一个版本 ===" + kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace} + echo "=== 回滚中... ===" + kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s + echo "=== 查看所使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + echo "=== 回滚完成 ===" + """ + } + } + } + stage('决定镜像') { + steps { + script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ + + if (params.CUSTOM_IMAGE?.trim()) { + echo "检测手输镜像格式: ${params.CUSTOM_IMAGE}" + def customImage = params.CUSTOM_IMAGE.trim() + // 验证镜像格式 + def matcher = (customImage =~ imageRegex) + if (!matcher.matches()) { + error "CUSTOM_IMAGE 格式不正确，必须是 registry/namespace/repository:tag 格式\n" + + "示例: uswccr.ccs.tencentyun.com/lessiesit/flymoon-payment:v1.0.0\n" + + "当前输入: ${customImage}" + } + + echo "使用手输镜像: ${customImage}" + env.IMAGE_FULL_NAME = customImage + + } else { + def img = "uswccr.ccs.tencentyun.com/${params.IMAGE_NAME}" + echo "使用 imageTag 插件镜像: ${img}" + env.IMAGE_FULL_NAME = img + } + } + } + } + stage('查询镜像') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "查询镜像: ${IMAGE_FULL_NAME}" + + def result = sh(returnStdout: true, script: """ + /data/sh/get-image-labels-fast.sh \ + "${IMAGE_FULL_NAME}" \ + "100038894437" \ + 'h8H1o6Fd!HLXn' | awk '/^{/,/^}\$/' + """).trim() + + if (result == "" || result == null) { + error("查询镜像 label 失败，请检查镜像是否存在或凭证问题") + } + + echo "镜像 Label:\n${result}" + env.IMAGE_LABEL = result + } + } + } + stage('拉取yaml') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + git branch: "${params.BRANCH_NAME}", + credentialsId: 'fly_gitlab_auth', + url: 'http://172.24.16.20/opt/opt-config.git' + } + } + stage('修改YAML') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def oldImg = sh ( + script: """ + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' 2>/dev/null || echo "无（可能是首次部署）" + """, + returnStdout: true + ).trim() + env.OLD_IMAGE_NAME = oldImg + echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" + echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" + sh """ + sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} + """ + } + } + } + stage('部署k8s') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" + sh """ + echo "===Apply Deployment YAML ===" + kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} + + echo "=== 查看当前新使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + + echo "=== 添加注解 ===" + kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${ANNOTATION}" --overwrite -n ${K8s_namespace} + + echo "=== 查看历史版本 ===" + kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} + """ + } + } + } + stage('部署情况') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "=== 检测部署状态并验证新版本运行情况 ===" + echo "--- 检查 Deployment 更新状态 ---" + def rolloutStatus = sh( + script: "kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s", + returnStatus: true + ) + + if (rolloutStatus != 0){ + echo "Deployment ${Deployment_name} 发布 **超时或失败**，开始排查..." + sh """ + echo "--- Deployment 状态 ---" + kubectl describe deployment ${Deployment_name} -n ${K8s_namespace} || true + + echo '--- Pod 列表 ---' + kubectl get pods -n ${K8s_namespace} -l app=${Pod_container_name} -o wide || true + + echo "--- Pod 描述 (describe) ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l app=${Pod_container_name} -o jsonpath='{.items[*].metadata.name}'); do + echo "-- Pod 描述 \$pod --" + kubectl describe pod \$pod -n ${K8s_namespace} || true + done + + echo "--- 最近 200 行 Pod 日志 ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l app=${Pod_container_name} -o jsonpath='{.items[*].metadata.name}'); do + echo "-- logs \$pod --" + kubectl logs \$pod -n ${K8s_namespace} --tail=200 || true + done + """ + error("=== Deployment 发布失败，请检查以上输出定位问题 ===") + } + + echo "=== 检查 Pods 是否全部 Ready ===" + sh "kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} -o wide" + + echo "=== 获取最新 Pod 名称 ===" + NEW_POD = sh ( + script: "kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}'", + returnStdout: true + ).trim() + + echo "=== 新 Pod 启动日志(最近20行) ===" + sh "kubectl logs ${NEW_POD} -n ${K8s_namespace} --tail=20 || true" + + echo "部署成功：${NEW_POD} 已正常运行" + } + } + } + stage('变更说明') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + env.CHANGE_MSG = """ +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} +旧镜像: ${OLD_IMAGE_NAME} +新镜像: ${IMAGE_FULL_NAME} +部署对象: ${Deployment_name} +镜像标签: ${env.IMAGE_LABEL} + """.stripIndent().trim() + echo env.CHANGE_MSG + } + } + } + stage('提交变更') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + withCredentials([usernamePassword(credentialsId: 'fly_gitlab_auth', usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) { + sh """ + cd ${WORKSPACE} + git config user.name "jenkins" + git config user.email "jenkins@local" + + # 检查工作树是否有变化 + if ! git diff --exit-code ${Deployment_yaml} > /dev/null 2>&1; then + echo "检测到更改，正在提交..." + git add ${Deployment_yaml} + git commit -m "更新镜像 \${CHANGE_MSG}" + else + echo "${Deployment_yaml} 没有变化, 无需commit" + fi + + # 检查是否需要推送（是否有新的提交） + LOCAL=\$(git rev-parse @) + REMOTE=\$(git rev-parse @{u} 2>/dev/null || true) + BASE=\$(git merge-base @ @{u} 2>/dev/null || true) + + if [ "\$LOCAL" = "\$REMOTE" ]; then + echo "已与远程系统同步更新" + elif [ "\$LOCAL" = "\$BASE" ]; then + echo "需要从远程获取数据" + git pull http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + elif [ "\$REMOTE" = "\$BASE" ]; then + echo "将更改推送到远程服务器..." + # 生成临时 .netrc 文件 + echo "machine 172.24.16.20 login \$GIT_USER password \$GIT_PASS" > ~/.netrc + chmod 600 ~/.netrc + git push http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + else + echo "与远程模式不同，跳过推送操作" + fi + """ + } + } + } + } + } + + post { + success { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" + } + failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "有步骤失败，请检查！" + } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } + } +} \ No newline at end of file diff --git a/SCM/部署镜像/s1/v4/DM_s1_flymoon_admin_web.groovy b/SCM/部署镜像/s1/v4/DM_s1_flymoon_admin_web.groovy new file mode 100644 index 0000000..38e8ccb --- /dev/null +++ b/SCM/部署镜像/s1/v4/DM_s1_flymoon_admin_web.groovy @@ -0,0 +1,345 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + +pipeline { + agent any + + parameters { + imageTag( + name: 'IMAGE_NAME', + description: 'sit 仓库镜像 (除非输入 CUSTOM_IMAGE, 否则使用这里的)', + registry: 'https://uswccr.ccs.tencentyun.com', + image: 'lessiesit/flymoon-admin-web', + credentialId: 'dxin_img_hub_auth', + filter: '.*', + defaultTag: '', + tagOrder: 'DSC_VERSION', + verifySsl: true + ) + string( + name: 'CUSTOM_IMAGE', + defaultValue: '', + description: '手输完整镜像//:，例如: uswccr.ccs.tencentyun.com/lessiesit/flymoon-admin-web:v0.0.1 (填充后，则忽略镜像仓库选择)' + ) + booleanParam( + name: 'ROLLBACK_VERSION', + defaultValue: false, + description: '是否快速回滚上一个版本?' + ) + choice( + name: 'BRANCH_NAME', + choices: ['dxin', 'opt'], + description: '选择资源清单Yaml的分支' + ) + } + environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 + KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/flymoon-admin-web.yaml" + Deployment_name = "s1-flymoon-admin-web" + K8s_namespace = "sit" + Pod_container_name = "flymoon-admin-web" + } + stages { + stage('回滚上版') { + when { expression { return params.ROLLBACK_VERSION == true } } + steps { + script { + sh """ + echo "=== 开始回滚到上一个版本 ===" + kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace} + echo "=== 回滚中... ===" + kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s + echo "=== 查看所使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + echo "=== 回滚完成 ===" + """ + } + } + } + stage('决定镜像') { + steps { + script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ + + if (params.CUSTOM_IMAGE?.trim()) { + echo "检测手输镜像格式: ${params.CUSTOM_IMAGE}" + def customImage = params.CUSTOM_IMAGE.trim() + // 验证镜像格式 + def matcher = (customImage =~ imageRegex) + if (!matcher.matches()) { + error "CUSTOM_IMAGE 格式不正确，必须是 registry/namespace/repository:tag 格式\n" + + "示例: uswccr.ccs.tencentyun.com/lessiesit/flymoon-payment:v1.0.0\n" + + "当前输入: ${customImage}" + } + + echo "使用手输镜像: ${customImage}" + env.IMAGE_FULL_NAME = customImage + + } else { + def img = "uswccr.ccs.tencentyun.com/${params.IMAGE_NAME}" + echo "使用 imageTag 插件镜像: ${img}" + env.IMAGE_FULL_NAME = img + } + } + } + } + stage('查询镜像') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "查询镜像: ${IMAGE_FULL_NAME}" + + def result = sh(returnStdout: true, script: """ + /data/sh/get-image-labels-fast.sh \ + "${IMAGE_FULL_NAME}" \ + "100038894437" \ + 'h8H1o6Fd!HLXn' | awk '/^{/,/^}\$/' + """).trim() + + if (result == "" || result == null) { + error("查询镜像 label 失败，请检查镜像是否存在或凭证问题") + } + + echo "镜像 Label:\n${result}" + env.IMAGE_LABEL = result + } + } + } + stage('拉取yaml') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + git branch: "${params.BRANCH_NAME}", + credentialsId: 'fly_gitlab_auth', + url: 'http://172.24.16.20/opt/opt-config.git' + } + } + stage('修改YAML') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def oldImg = sh ( + script: """ + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' 2>/dev/null || echo "无（可能是首次部署）" + """, + returnStdout: true + ).trim() + env.OLD_IMAGE_NAME = oldImg + echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" + echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" + sh """ + sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} + """ + } + } + } + stage('部署k8s') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" + sh """ + echo "===Apply Deployment YAML ===" + kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} + + echo "=== 查看当前新使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + + echo "=== 添加注解 ===" + kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${ANNOTATION}" --overwrite -n ${K8s_namespace} + + echo "=== 查看历史版本 ===" + kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} + """ + } + } + } + stage('部署情况') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "=== 检测部署状态并验证新版本运行情况 ===" + echo "--- 检查 Deployment 更新状态 ---" + def rolloutStatus = sh( + script: "kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s", + returnStatus: true + ) + + if (rolloutStatus != 0){ + echo "Deployment ${Deployment_name} 发布 **超时或失败**，开始排查..." + sh """ + echo "--- Deployment 状态 ---" + kubectl describe deployment ${Deployment_name} -n ${K8s_namespace} || true + + echo '--- Pod 列表 ---' + kubectl get pods -n ${K8s_namespace} -l app=${Pod_container_name} -o wide || true + + echo "--- Pod 描述 (describe) ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l app=${Pod_container_name} -o jsonpath='{.items[*].metadata.name}'); do + echo "-- Pod 描述 \$pod --" + kubectl describe pod \$pod -n ${K8s_namespace} || true + done + + echo "--- 最近 200 行 Pod 日志 ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l app=${Pod_container_name} -o jsonpath='{.items[*].metadata.name}'); do + echo "-- logs \$pod --" + kubectl logs \$pod -n ${K8s_namespace} --tail=200 || true + done + """ + error("=== Deployment 发布失败，请检查以上输出定位问题 ===") + } + + echo "=== 检查 Pods 是否全部 Ready ===" + sh "kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} -o wide" + + echo "=== 获取最新 Pod 名称 ===" + NEW_POD = sh ( + script: "kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}'", + returnStdout: true + ).trim() + + echo "=== 新 Pod 启动日志(最近20行) ===" + sh "kubectl logs ${NEW_POD} -n ${K8s_namespace} --tail=20 || true" + + echo "部署成功：${NEW_POD} 已正常运行" + } + } + } + stage('变更说明') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + env.CHANGE_MSG = """ +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} +旧镜像: ${OLD_IMAGE_NAME} +新镜像: ${IMAGE_FULL_NAME} +部署对象: ${Deployment_name} +镜像标签: ${env.IMAGE_LABEL} + """.stripIndent().trim() + echo env.CHANGE_MSG + } + } + } + stage('提交变更') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + withCredentials([usernamePassword(credentialsId: 'fly_gitlab_auth', usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) { + sh """ + cd ${WORKSPACE} + git config user.name "jenkins" + git config user.email "jenkins@local" + + # 检查工作树是否有变化 + if ! git diff --exit-code ${Deployment_yaml} > /dev/null 2>&1; then + echo "检测到更改，正在提交..." + git add ${Deployment_yaml} + git commit -m "更新镜像 \${CHANGE_MSG}" + else + echo "${Deployment_yaml} 没有变化, 无需commit" + fi + + # 检查是否需要推送（是否有新的提交） + LOCAL=\$(git rev-parse @) + REMOTE=\$(git rev-parse @{u} 2>/dev/null || true) + BASE=\$(git merge-base @ @{u} 2>/dev/null || true) + + if [ "\$LOCAL" = "\$REMOTE" ]; then + echo "已与远程系统同步更新" + elif [ "\$LOCAL" = "\$BASE" ]; then + echo "需要从远程获取数据" + git pull http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + elif [ "\$REMOTE" = "\$BASE" ]; then + echo "将更改推送到远程服务器..." + # 生成临时 .netrc 文件 + echo "machine 172.24.16.20 login \$GIT_USER password \$GIT_PASS" > ~/.netrc + chmod 600 ~/.netrc + git push http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + else + echo "与远程模式不同，跳过推送操作" + fi + """ + } + } + } + } + } + + post { + success { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" + } + failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "有步骤失败，请检查！" + } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } + } +} \ No newline at end of file diff --git a/SCM/部署镜像/s1/v4/DM_s1_flymoon_agent.groovy b/SCM/部署镜像/s1/v4/DM_s1_flymoon_agent.groovy new file mode 100644 index 0000000..cce88e9 --- /dev/null +++ b/SCM/部署镜像/s1/v4/DM_s1_flymoon_agent.groovy @@ -0,0 +1,345 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + +pipeline { + agent any + + parameters { + imageTag( + name: 'IMAGE_NAME', + description: 'sit 仓库镜像 (除非输入 CUSTOM_IMAGE, 否则使用这里的)', + registry: 'https://uswccr.ccs.tencentyun.com', + image: 'lessiesit/flymoon-agent', + credentialId: 'dxin_img_hub_auth', + filter: '.*', + defaultTag: '', + tagOrder: 'DSC_VERSION', + verifySsl: true + ) + string( + name: 'CUSTOM_IMAGE', + defaultValue: '', + description: '手输完整镜像//:，例如: uswccr.ccs.tencentyun.com/lessiesit/flymoon-agent:v0.0.1 (填充后，则忽略镜像仓库选择)' + ) + booleanParam( + name: 'ROLLBACK_VERSION', + defaultValue: false, + description: '是否快速回滚上一个版本?' + ) + choice( + name: 'BRANCH_NAME', + choices: ['dxin', 'opt'], + description: '选择资源清单Yaml的分支' + ) + } + environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 + KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/flymoon-agent.yaml" + Deployment_name = "s1-flymoon-agent" + K8s_namespace = "sit" + Pod_container_name = "flymoon-agent" + } + stages { + stage('回滚上版') { + when { expression { return params.ROLLBACK_VERSION == true } } + steps { + script { + sh """ + echo "=== 开始回滚到上一个版本 ===" + kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace} + echo "=== 回滚中... ===" + kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s + echo "=== 查看所使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + echo "=== 回滚完成 ===" + """ + } + } + } + stage('决定镜像') { + steps { + script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ + + if (params.CUSTOM_IMAGE?.trim()) { + echo "检测手输镜像格式: ${params.CUSTOM_IMAGE}" + def customImage = params.CUSTOM_IMAGE.trim() + // 验证镜像格式 + def matcher = (customImage =~ imageRegex) + if (!matcher.matches()) { + error "CUSTOM_IMAGE 格式不正确，必须是 registry/namespace/repository:tag 格式\n" + + "示例: uswccr.ccs.tencentyun.com/lessiesit/flymoon-payment:v1.0.0\n" + + "当前输入: ${customImage}" + } + + echo "使用手输镜像: ${customImage}" + env.IMAGE_FULL_NAME = customImage + + } else { + def img = "uswccr.ccs.tencentyun.com/${params.IMAGE_NAME}" + echo "使用 imageTag 插件镜像: ${img}" + env.IMAGE_FULL_NAME = img + } + } + } + } + stage('查询镜像') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "查询镜像: ${IMAGE_FULL_NAME}" + + def result = sh(returnStdout: true, script: """ + /data/sh/get-image-labels-fast.sh \ + "${IMAGE_FULL_NAME}" \ + "100038894437" \ + 'h8H1o6Fd!HLXn' | awk '/^{/,/^}\$/' + """).trim() + + if (result == "" || result == null) { + error("查询镜像 label 失败，请检查镜像是否存在或凭证问题") + } + + echo "镜像 Label:\n${result}" + env.IMAGE_LABEL = result + } + } + } + stage('拉取yaml') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + git branch: "${params.BRANCH_NAME}", + credentialsId: 'fly_gitlab_auth', + url: 'http://172.24.16.20/opt/opt-config.git' + } + } + stage('修改YAML') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def oldImg = sh ( + script: """ + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' 2>/dev/null || echo "无（可能是首次部署）" + """, + returnStdout: true + ).trim() + env.OLD_IMAGE_NAME = oldImg + echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" + echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" + sh """ + sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} + """ + } + } + } + stage('部署k8s') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" + sh """ + echo "===Apply Deployment YAML ===" + kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} + + echo "=== 查看当前新使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + + echo "=== 添加注解 ===" + kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${ANNOTATION}" --overwrite -n ${K8s_namespace} + + echo "=== 查看历史版本 ===" + kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} + """ + } + } + } + stage('部署情况') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "=== 检测部署状态并验证新版本运行情况 ===" + echo "--- 检查 Deployment 更新状态 ---" + def rolloutStatus = sh( + script: "kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s", + returnStatus: true + ) + + if (rolloutStatus != 0){ + echo "Deployment ${Deployment_name} 发布 **超时或失败**，开始排查..." + sh """ + echo "--- Deployment 状态 ---" + kubectl describe deployment ${Deployment_name} -n ${K8s_namespace} || true + + echo '--- Pod 列表 ---' + kubectl get pods -n ${K8s_namespace} -l app=${Pod_container_name} -o wide || true + + echo "--- Pod 描述 (describe) ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l app=${Pod_container_name} -o jsonpath='{.items[*].metadata.name}'); do + echo "-- Pod 描述 \$pod --" + kubectl describe pod \$pod -n ${K8s_namespace} || true + done + + echo "--- 最近 200 行 Pod 日志 ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l app=${Pod_container_name} -o jsonpath='{.items[*].metadata.name}'); do + echo "-- logs \$pod --" + kubectl logs \$pod -n ${K8s_namespace} --tail=200 || true + done + """ + error("=== Deployment 发布失败，请检查以上输出定位问题 ===") + } + + echo "=== 检查 Pods 是否全部 Ready ===" + sh "kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} -o wide" + + echo "=== 获取最新 Pod 名称 ===" + NEW_POD = sh ( + script: "kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}'", + returnStdout: true + ).trim() + + echo "=== 新 Pod 启动日志(最近20行) ===" + sh "kubectl logs ${NEW_POD} -n ${K8s_namespace} --tail=20 || true" + + echo "部署成功：${NEW_POD} 已正常运行" + } + } + } + stage('变更说明') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + env.CHANGE_MSG = """ +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} +旧镜像: ${OLD_IMAGE_NAME} +新镜像: ${IMAGE_FULL_NAME} +部署对象: ${Deployment_name} +镜像标签: ${env.IMAGE_LABEL} + """.stripIndent().trim() + echo env.CHANGE_MSG + } + } + } + stage('提交变更') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + withCredentials([usernamePassword(credentialsId: 'fly_gitlab_auth', usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) { + sh """ + cd ${WORKSPACE} + git config user.name "jenkins" + git config user.email "jenkins@local" + + # 检查工作树是否有变化 + if ! git diff --exit-code ${Deployment_yaml} > /dev/null 2>&1; then + echo "检测到更改，正在提交..." + git add ${Deployment_yaml} + git commit -m "更新镜像 \${CHANGE_MSG}" + else + echo "${Deployment_yaml} 没有变化, 无需commit" + fi + + # 检查是否需要推送（是否有新的提交） + LOCAL=\$(git rev-parse @) + REMOTE=\$(git rev-parse @{u} 2>/dev/null || true) + BASE=\$(git merge-base @ @{u} 2>/dev/null || true) + + if [ "\$LOCAL" = "\$REMOTE" ]; then + echo "已与远程系统同步更新" + elif [ "\$LOCAL" = "\$BASE" ]; then + echo "需要从远程获取数据" + git pull http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + elif [ "\$REMOTE" = "\$BASE" ]; then + echo "将更改推送到远程服务器..." + # 生成临时 .netrc 文件 + echo "machine 172.24.16.20 login \$GIT_USER password \$GIT_PASS" > ~/.netrc + chmod 600 ~/.netrc + git push http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + else + echo "与远程模式不同，跳过推送操作" + fi + """ + } + } + } + } + } + + post { + success { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" + } + failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "有步骤失败，请检查！" + } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } + } +} \ No newline at end of file diff --git a/SCM/部署镜像/s1/v4/DM_s1_flymoon_email.groovy b/SCM/部署镜像/s1/v4/DM_s1_flymoon_email.groovy new file mode 100644 index 0000000..28247cc --- /dev/null +++ b/SCM/部署镜像/s1/v4/DM_s1_flymoon_email.groovy @@ -0,0 +1,345 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + +pipeline { + agent any + + parameters { + imageTag( + name: 'IMAGE_NAME', + description: 'sit 仓库镜像 (除非输入 CUSTOM_IMAGE, 否则使用这里的)', + registry: 'https://uswccr.ccs.tencentyun.com', + image: 'lessiesit/flymoon-email', + credentialId: 'dxin_img_hub_auth', + filter: '.*', + defaultTag: '', + tagOrder: 'DSC_VERSION', + verifySsl: true + ) + string( + name: 'CUSTOM_IMAGE', + defaultValue: '', + description: '手输完整镜像//:，例如: uswccr.ccs.tencentyun.com/lessiesit/flymoon-email:v0.0.1 (填充后，则忽略镜像仓库选择)' + ) + booleanParam( + name: 'ROLLBACK_VERSION', + defaultValue: false, + description: '是否快速回滚上一个版本?' + ) + choice( + name: 'BRANCH_NAME', + choices: ['dxin', 'opt'], + description: '选择资源清单Yaml的分支' + ) + } + environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 + KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/flymoon-email.yaml" + Deployment_name = "s1-flymoon-email" + K8s_namespace = "sit" + Pod_container_name = "flymoon-email" + } + stages { + stage('回滚上版') { + when { expression { return params.ROLLBACK_VERSION == true } } + steps { + script { + sh """ + echo "=== 开始回滚到上一个版本 ===" + kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace} + echo "=== 回滚中... ===" + kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s + echo "=== 查看所使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + echo "=== 回滚完成 ===" + """ + } + } + } + stage('决定镜像') { + steps { + script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ + + if (params.CUSTOM_IMAGE?.trim()) { + echo "检测手输镜像格式: ${params.CUSTOM_IMAGE}" + def customImage = params.CUSTOM_IMAGE.trim() + // 验证镜像格式 + def matcher = (customImage =~ imageRegex) + if (!matcher.matches()) { + error "CUSTOM_IMAGE 格式不正确，必须是 registry/namespace/repository:tag 格式\n" + + "示例: uswccr.ccs.tencentyun.com/lessiesit/flymoon-payment:v1.0.0\n" + + "当前输入: ${customImage}" + } + + echo "使用手输镜像: ${customImage}" + env.IMAGE_FULL_NAME = customImage + + } else { + def img = "uswccr.ccs.tencentyun.com/${params.IMAGE_NAME}" + echo "使用 imageTag 插件镜像: ${img}" + env.IMAGE_FULL_NAME = img + } + } + } + } + stage('查询镜像') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "查询镜像: ${IMAGE_FULL_NAME}" + + def result = sh(returnStdout: true, script: """ + /data/sh/get-image-labels-fast.sh \ + "${IMAGE_FULL_NAME}" \ + "100038894437" \ + 'h8H1o6Fd!HLXn' | awk '/^{/,/^}\$/' + """).trim() + + if (result == "" || result == null) { + error("查询镜像 label 失败，请检查镜像是否存在或凭证问题") + } + + echo "镜像 Label:\n${result}" + env.IMAGE_LABEL = result + } + } + } + stage('拉取yaml') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + git branch: "${params.BRANCH_NAME}", + credentialsId: 'fly_gitlab_auth', + url: 'http://172.24.16.20/opt/opt-config.git' + } + } + stage('修改YAML') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def oldImg = sh ( + script: """ + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' 2>/dev/null || echo "无（可能是首次部署）" + """, + returnStdout: true + ).trim() + env.OLD_IMAGE_NAME = oldImg + echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" + echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" + sh """ + sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} + """ + } + } + } + stage('部署k8s') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" + sh """ + echo "===Apply Deployment YAML ===" + kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} + + echo "=== 查看当前新使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + + echo "=== 添加注解 ===" + kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${ANNOTATION}" --overwrite -n ${K8s_namespace} + + echo "=== 查看历史版本 ===" + kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} + """ + } + } + } + stage('部署情况') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "=== 检测部署状态并验证新版本运行情况 ===" + echo "--- 检查 Deployment 更新状态 ---" + def rolloutStatus = sh( + script: "kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s", + returnStatus: true + ) + + if (rolloutStatus != 0){ + echo "Deployment ${Deployment_name} 发布 **超时或失败**，开始排查..." + sh """ + echo "--- Deployment 状态 ---" + kubectl describe deployment ${Deployment_name} -n ${K8s_namespace} || true + + echo '--- Pod 列表 ---' + kubectl get pods -n ${K8s_namespace} -l app=${Pod_container_name} -o wide || true + + echo "--- Pod 描述 (describe) ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l app=${Pod_container_name} -o jsonpath='{.items[*].metadata.name}'); do + echo "-- Pod 描述 \$pod --" + kubectl describe pod \$pod -n ${K8s_namespace} || true + done + + echo "--- 最近 200 行 Pod 日志 ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l app=${Pod_container_name} -o jsonpath='{.items[*].metadata.name}'); do + echo "-- logs \$pod --" + kubectl logs \$pod -n ${K8s_namespace} --tail=200 || true + done + """ + error("=== Deployment 发布失败，请检查以上输出定位问题 ===") + } + + echo "=== 检查 Pods 是否全部 Ready ===" + sh "kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} -o wide" + + echo "=== 获取最新 Pod 名称 ===" + NEW_POD = sh ( + script: "kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}'", + returnStdout: true + ).trim() + + echo "=== 新 Pod 启动日志(最近20行) ===" + sh "kubectl logs ${NEW_POD} -n ${K8s_namespace} --tail=20 || true" + + echo "部署成功：${NEW_POD} 已正常运行" + } + } + } + stage('变更说明') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + env.CHANGE_MSG = """ +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} +旧镜像: ${OLD_IMAGE_NAME} +新镜像: ${IMAGE_FULL_NAME} +部署对象: ${Deployment_name} +镜像标签: ${env.IMAGE_LABEL} + """.stripIndent().trim() + echo env.CHANGE_MSG + } + } + } + stage('提交变更') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + withCredentials([usernamePassword(credentialsId: 'fly_gitlab_auth', usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) { + sh """ + cd ${WORKSPACE} + git config user.name "jenkins" + git config user.email "jenkins@local" + + # 检查工作树是否有变化 + if ! git diff --exit-code ${Deployment_yaml} > /dev/null 2>&1; then + echo "检测到更改，正在提交..." + git add ${Deployment_yaml} + git commit -m "更新镜像 \${CHANGE_MSG}" + else + echo "${Deployment_yaml} 没有变化, 无需commit" + fi + + # 检查是否需要推送（是否有新的提交） + LOCAL=\$(git rev-parse @) + REMOTE=\$(git rev-parse @{u} 2>/dev/null || true) + BASE=\$(git merge-base @ @{u} 2>/dev/null || true) + + if [ "\$LOCAL" = "\$REMOTE" ]; then + echo "已与远程系统同步更新" + elif [ "\$LOCAL" = "\$BASE" ]; then + echo "需要从远程获取数据" + git pull http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + elif [ "\$REMOTE" = "\$BASE" ]; then + echo "将更改推送到远程服务器..." + # 生成临时 .netrc 文件 + echo "machine 172.24.16.20 login \$GIT_USER password \$GIT_PASS" > ~/.netrc + chmod 600 ~/.netrc + git push http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + else + echo "与远程模式不同，跳过推送操作" + fi + """ + } + } + } + } + } + + post { + success { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" + } + failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "有步骤失败，请检查！" + } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } + } +} \ No newline at end of file diff --git a/SCM/部署镜像/s1/v4/DM_s1_flymoon_payment.groovy b/SCM/部署镜像/s1/v4/DM_s1_flymoon_payment.groovy new file mode 100644 index 0000000..941a39b --- /dev/null +++ b/SCM/部署镜像/s1/v4/DM_s1_flymoon_payment.groovy @@ -0,0 +1,345 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + +pipeline { + agent any + + parameters { + imageTag( + name: 'IMAGE_NAME', + description: 'sit 仓库镜像 (除非输入 CUSTOM_IMAGE, 否则使用这里的)', + registry: 'https://uswccr.ccs.tencentyun.com', + image: 'lessiesit/flymoon-payment', + credentialId: 'dxin_img_hub_auth', + filter: '.*', + defaultTag: '', + tagOrder: 'DSC_VERSION', + verifySsl: true + ) + string( + name: 'CUSTOM_IMAGE', + defaultValue: '', + description: '手输完整镜像//:，例如: uswccr.ccs.tencentyun.com/lessiesit/flymoon-payment:v0.0.1 (填充后，则忽略镜像仓库选择)' + ) + booleanParam( + name: 'ROLLBACK_VERSION', + defaultValue: false, + description: '是否快速回滚上一个版本?' + ) + choice( + name: 'BRANCH_NAME', + choices: ['dxin', 'opt'], + description: '选择资源清单Yaml的分支' + ) + } + environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 + KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/flymoon-payment.yaml" + Deployment_name = "s1-flymoon-payment" + K8s_namespace = "sit" + Pod_container_name = "flymoon-payment" + } + stages { + stage('回滚上版') { + when { expression { return params.ROLLBACK_VERSION == true } } + steps { + script { + sh """ + echo "=== 开始回滚到上一个版本 ===" + kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace} + echo "=== 回滚中... ===" + kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s + echo "=== 查看所使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + echo "=== 回滚完成 ===" + """ + } + } + } + stage('决定镜像') { + steps { + script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ + + if (params.CUSTOM_IMAGE?.trim()) { + echo "检测手输镜像格式: ${params.CUSTOM_IMAGE}" + def customImage = params.CUSTOM_IMAGE.trim() + // 验证镜像格式 + def matcher = (customImage =~ imageRegex) + if (!matcher.matches()) { + error "CUSTOM_IMAGE 格式不正确，必须是 registry/namespace/repository:tag 格式\n" + + "示例: uswccr.ccs.tencentyun.com/lessiesit/flymoon-payment:v1.0.0\n" + + "当前输入: ${customImage}" + } + + echo "使用手输镜像: ${customImage}" + env.IMAGE_FULL_NAME = customImage + + } else { + def img = "uswccr.ccs.tencentyun.com/${params.IMAGE_NAME}" + echo "使用 imageTag 插件镜像: ${img}" + env.IMAGE_FULL_NAME = img + } + } + } + } + stage('查询镜像') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "查询镜像: ${IMAGE_FULL_NAME}" + + def result = sh(returnStdout: true, script: """ + /data/sh/get-image-labels-fast.sh \ + "${IMAGE_FULL_NAME}" \ + "100038894437" \ + 'h8H1o6Fd!HLXn' | awk '/^{/,/^}\$/' + """).trim() + + if (result == "" || result == null) { + error("查询镜像 label 失败，请检查镜像是否存在或凭证问题") + } + + echo "镜像 Label:\n${result}" + env.IMAGE_LABEL = result + } + } + } + stage('拉取yaml') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + git branch: "${params.BRANCH_NAME}", + credentialsId: 'fly_gitlab_auth', + url: 'http://172.24.16.20/opt/opt-config.git' + } + } + stage('修改YAML') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def oldImg = sh ( + script: """ + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' 2>/dev/null || echo "无（可能是首次部署）" + """, + returnStdout: true + ).trim() + env.OLD_IMAGE_NAME = oldImg + echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" + echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" + sh """ + sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} + """ + } + } + } + stage('部署k8s') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" + sh """ + echo "===Apply Deployment YAML ===" + kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} + + echo "=== 查看当前新使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + + echo "=== 添加注解 ===" + kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${ANNOTATION}" --overwrite -n ${K8s_namespace} + + echo "=== 查看历史版本 ===" + kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} + """ + } + } + } + stage('部署情况') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "=== 检测部署状态并验证新版本运行情况 ===" + echo "--- 检查 Deployment 更新状态 ---" + def rolloutStatus = sh( + script: "kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s", + returnStatus: true + ) + + if (rolloutStatus != 0){ + echo "Deployment ${Deployment_name} 发布 **超时或失败**，开始排查..." + sh """ + echo "--- Deployment 状态 ---" + kubectl describe deployment ${Deployment_name} -n ${K8s_namespace} || true + + echo '--- Pod 列表 ---' + kubectl get pods -n ${K8s_namespace} -l app=${Pod_container_name} -o wide || true + + echo "--- Pod 描述 (describe) ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l app=${Pod_container_name} -o jsonpath='{.items[*].metadata.name}'); do + echo "-- Pod 描述 \$pod --" + kubectl describe pod \$pod -n ${K8s_namespace} || true + done + + echo "--- 最近 200 行 Pod 日志 ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l app=${Pod_container_name} -o jsonpath='{.items[*].metadata.name}'); do + echo "-- logs \$pod --" + kubectl logs \$pod -n ${K8s_namespace} --tail=200 || true + done + """ + error("=== Deployment 发布失败，请检查以上输出定位问题 ===") + } + + echo "=== 检查 Pods 是否全部 Ready ===" + sh "kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} -o wide" + + echo "=== 获取最新 Pod 名称 ===" + NEW_POD = sh ( + script: "kubectl get pods -l app=${Pod_container_name} -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}'", + returnStdout: true + ).trim() + + echo "=== 新 Pod 启动日志(最近20行) ===" + sh "kubectl logs ${NEW_POD} -n ${K8s_namespace} --tail=20 || true" + + echo "部署成功：${NEW_POD} 已正常运行" + } + } + } + stage('变更说明') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + env.CHANGE_MSG = """ +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} +旧镜像: ${OLD_IMAGE_NAME} +新镜像: ${IMAGE_FULL_NAME} +部署对象: ${Deployment_name} +镜像标签: ${env.IMAGE_LABEL} + """.stripIndent().trim() + echo env.CHANGE_MSG + } + } + } + stage('提交变更') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + withCredentials([usernamePassword(credentialsId: 'fly_gitlab_auth', usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) { + sh """ + cd ${WORKSPACE} + git config user.name "jenkins" + git config user.email "jenkins@local" + + # 检查工作树是否有变化 + if ! git diff --exit-code ${Deployment_yaml} > /dev/null 2>&1; then + echo "检测到更改，正在提交..." + git add ${Deployment_yaml} + git commit -m "更新镜像 \${CHANGE_MSG}" + else + echo "${Deployment_yaml} 没有变化, 无需commit" + fi + + # 检查是否需要推送（是否有新的提交） + LOCAL=\$(git rev-parse @) + REMOTE=\$(git rev-parse @{u} 2>/dev/null || true) + BASE=\$(git merge-base @ @{u} 2>/dev/null || true) + + if [ "\$LOCAL" = "\$REMOTE" ]; then + echo "已与远程系统同步更新" + elif [ "\$LOCAL" = "\$BASE" ]; then + echo "需要从远程获取数据" + git pull http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + elif [ "\$REMOTE" = "\$BASE" ]; then + echo "将更改推送到远程服务器..." + # 生成临时 .netrc 文件 + echo "machine 172.24.16.20 login \$GIT_USER password \$GIT_PASS" > ~/.netrc + chmod 600 ~/.netrc + git push http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + else + echo "与远程模式不同，跳过推送操作" + fi + """ + } + } + } + } + } + + post { + success { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" + } + failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "有步骤失败，请检查！" + } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } + } +} \ No newline at end of file diff --git a/SCM/部署镜像/s1/v4/DM_s1_lessie_agent.groovy b/SCM/部署镜像/s1/v4/DM_s1_lessie_agent.groovy new file mode 100644 index 0000000..e281b36 --- /dev/null +++ b/SCM/部署镜像/s1/v4/DM_s1_lessie_agent.groovy @@ -0,0 +1,346 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + +pipeline { + agent any + + parameters { + imageTag( + name: 'IMAGE_NAME', + description: 'sit 仓库镜像 (除非输入 CUSTOM_IMAGE, 否则使用这里的)', + registry: 'https://uswccr.ccs.tencentyun.com', + image: 'lessiesit/lessie-sourcing-agents', + credentialId: 'dxin_img_hub_auth', + filter: '.*', + defaultTag: '', + tagOrder: 'DSC_VERSION', + verifySsl: true + ) + string( + name: 'CUSTOM_IMAGE', + defaultValue: '', + description: '手输完整镜像//:，例如: uswccr.ccs.tencentyun.com/lessiesit/lessie-sourcing-agents:v0.0.1 (填充后，则忽略镜像仓库选择)' + ) + booleanParam( + name: 'ROLLBACK_VERSION', + defaultValue: false, + description: '是否快速回滚上一个版本?' + ) + choice( + name: 'BRANCH_NAME', + choices: ['dxin', 'opt'], + description: '选择资源清单Yaml的分支' + ) + } + environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 + KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/lessie-agents.yaml" + Deployment_name = "s1-lessie-agents" + K8s_namespace = "sit" + Pod_container_name = "lessie-agents" + Pod_environment = "s1" + } + stages { + stage('回滚上版') { + when { expression { return params.ROLLBACK_VERSION == true } } + steps { + script { + sh """ + echo "=== 开始回滚到上一个版本 ===" + kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace} + echo "=== 回滚中... ===" + kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s + echo "=== 查看所使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + echo "=== 回滚完成 ===" + """ + } + } + } + stage('决定镜像') { + steps { + script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ + + if (params.CUSTOM_IMAGE?.trim()) { + echo "检测手输镜像格式: ${params.CUSTOM_IMAGE}" + def customImage = params.CUSTOM_IMAGE.trim() + // 验证镜像格式 + def matcher = (customImage =~ imageRegex) + if (!matcher.matches()) { + error "CUSTOM_IMAGE 格式不正确，必须是 registry/namespace/repository:tag 格式\n" + + "示例: uswccr.ccs.tencentyun.com/lessiesit/lessie-sourcing-agents:v1.0.0\n" + + "当前输入: ${customImage}" + } + + echo "使用手输镜像: ${customImage}" + env.IMAGE_FULL_NAME = customImage + + } else { + def img = "uswccr.ccs.tencentyun.com/${params.IMAGE_NAME}" + echo "使用 imageTag 插件镜像: ${img}" + env.IMAGE_FULL_NAME = img + } + } + } + } + stage('查询镜像') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "查询镜像: ${IMAGE_FULL_NAME}" + + def result = sh(returnStdout: true, script: """ + /data/sh/get-image-labels-fast.sh \ + "${IMAGE_FULL_NAME}" \ + "100038894437" \ + 'h8H1o6Fd!HLXn' | awk '/^{/,/^}\$/' + """).trim() + + if (result == "" || result == null) { + error("查询镜像 label 失败，请检查镜像是否存在或凭证问题") + } + + echo "镜像 Label:\n${result}" + env.IMAGE_LABEL = result + } + } + } + stage('拉取yaml') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + git branch: "${params.BRANCH_NAME}", + credentialsId: 'fly_gitlab_auth', + url: 'http://172.24.16.20/opt/opt-config.git' + } + } + stage('修改YAML') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def oldImg = sh ( + script: """ + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' 2>/dev/null || echo "无（可能是首次部署）" + """, + returnStdout: true + ).trim() + env.OLD_IMAGE_NAME = oldImg + echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" + echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" + sh """ + sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} + """ + } + } + } + stage('部署k8s') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" + sh """ + echo "===Apply Deployment YAML ===" + kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} + + echo "=== 查看当前新使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + + echo "=== 添加注解 ===" + kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${ANNOTATION}" --overwrite -n ${K8s_namespace} + + echo "=== 查看历史版本 ===" + kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} + """ + } + } + } + stage('部署情况') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "=== 检测部署状态并验证新版本运行情况 ===" + echo "--- 检查 Deployment 更新状态 ---" + def rolloutStatus = sh( + script: "kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s", + returnStatus: true + ) + + if (rolloutStatus != 0){ + echo "Deployment ${Deployment_name} 发布 **超时或失败**，开始排查..." + sh """ + echo "--- Deployment 状态 ---" + kubectl describe deployment ${Deployment_name} -n ${K8s_namespace} || true + + echo '--- Pod 列表 ---' + kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o wide || true + + echo "--- Pod 描述 (describe) ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- Pod 描述 \$pod --" + kubectl describe pod \$pod -n ${K8s_namespace} || true + done + + echo "--- 最近 200 行 Pod 日志 ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- logs \$pod --" + kubectl logs \$pod -n ${K8s_namespace} --tail=200 || true + done + """ + error("=== Deployment 发布失败，请检查以上输出定位问题 ===") + } + + echo "=== 检查 Pods 是否全部 Ready ===" + sh "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} -o wide" + + echo "=== 获取最新 Pod 名称 ===" + NEW_POD = sh ( + script: "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}'", + returnStdout: true + ).trim() + + echo "=== 新 Pod 启动日志(最近20行) ===" + sh "kubectl logs ${NEW_POD} -n ${K8s_namespace} --tail=20 || true" + + echo "部署成功：${NEW_POD} 已正常运行" + } + } + } + stage('变更说明') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + env.CHANGE_MSG = """ +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} +旧镜像: ${OLD_IMAGE_NAME} +新镜像: ${IMAGE_FULL_NAME} +部署对象: ${Deployment_name} +镜像标签: ${env.IMAGE_LABEL} + """.stripIndent().trim() + echo env.CHANGE_MSG + } + } + } + stage('提交变更') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + withCredentials([usernamePassword(credentialsId: 'fly_gitlab_auth', usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) { + sh """ + cd ${WORKSPACE} + git config user.name "jenkins" + git config user.email "jenkins@local" + + # 检查工作树是否有变化 + if ! git diff --exit-code ${Deployment_yaml} > /dev/null 2>&1; then + echo "检测到更改，正在提交..." + git add ${Deployment_yaml} + git commit -m "更新镜像 \${CHANGE_MSG}" + else + echo "${Deployment_yaml} 没有变化, 无需commit" + fi + + # 检查是否需要推送（是否有新的提交） + LOCAL=\$(git rev-parse @) + REMOTE=\$(git rev-parse @{u} 2>/dev/null || true) + BASE=\$(git merge-base @ @{u} 2>/dev/null || true) + + if [ "\$LOCAL" = "\$REMOTE" ]; then + echo "已与远程系统同步更新" + elif [ "\$LOCAL" = "\$BASE" ]; then + echo "需要从远程获取数据" + git pull http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + elif [ "\$REMOTE" = "\$BASE" ]; then + echo "将更改推送到远程服务器..." + # 生成临时 .netrc 文件 + echo "machine 172.24.16.20 login \$GIT_USER password \$GIT_PASS" > ~/.netrc + chmod 600 ~/.netrc + git push http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + else + echo "与远程模式不同，跳过推送操作" + fi + """ + } + } + } + } + } + + post { + success { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" + } + failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "有步骤失败，请检查！" + } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } + } +} \ No newline at end of file diff --git a/SCM/部署镜像/s1/v4/DM_s1_lessie_ai_web.groovy b/SCM/部署镜像/s1/v4/DM_s1_lessie_ai_web.groovy new file mode 100644 index 0000000..bc20f8c --- /dev/null +++ b/SCM/部署镜像/s1/v4/DM_s1_lessie_ai_web.groovy @@ -0,0 +1,346 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + +pipeline { + agent any + + parameters { + imageTag( + name: 'IMAGE_NAME', + description: 'sit 仓库镜像 (除非输入 CUSTOM_IMAGE, 否则使用这里的)', + registry: 'https://uswccr.ccs.tencentyun.com', + image: 'lessiesit/lessie-ai-web', + credentialId: 'dxin_img_hub_auth', + filter: '.*', + defaultTag: '', + tagOrder: 'DSC_VERSION', + verifySsl: true + ) + string( + name: 'CUSTOM_IMAGE', + defaultValue: '', + description: '手输完整镜像//:，例如: uswccr.ccs.tencentyun.com/lessiesit/lessie-ai-web:v0.0.1 (填充后，则忽略镜像仓库选择)' + ) + booleanParam( + name: 'ROLLBACK_VERSION', + defaultValue: false, + description: '是否快速回滚上一个版本?' + ) + choice( + name: 'BRANCH_NAME', + choices: ['dxin', 'opt'], + description: '选择资源清单Yaml的分支' + ) + } + environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 + KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/lessie-ai-web.yaml" + Deployment_name = "s1-lessie-ai-web" + K8s_namespace = "sit" + Pod_container_name = "lessie-ai-web" + Pod_environment = "s1" + } + stages { + stage('回滚上版') { + when { expression { return params.ROLLBACK_VERSION == true } } + steps { + script { + sh """ + echo "=== 开始回滚到上一个版本 ===" + kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace} + echo "=== 回滚中... ===" + kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s + echo "=== 查看所使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + echo "=== 回滚完成 ===" + """ + } + } + } + stage('决定镜像') { + steps { + script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ + + if (params.CUSTOM_IMAGE?.trim()) { + echo "检测手输镜像格式: ${params.CUSTOM_IMAGE}" + def customImage = params.CUSTOM_IMAGE.trim() + // 验证镜像格式 + def matcher = (customImage =~ imageRegex) + if (!matcher.matches()) { + error "CUSTOM_IMAGE 格式不正确，必须是 registry/namespace/repository:tag 格式\n" + + "示例: uswccr.ccs.tencentyun.com/lessie-ai-web:v1.0.0\n" + + "当前输入: ${customImage}" + } + + echo "使用手输镜像: ${customImage}" + env.IMAGE_FULL_NAME = customImage + + } else { + def img = "uswccr.ccs.tencentyun.com/${params.IMAGE_NAME}" + echo "使用 imageTag 插件镜像: ${img}" + env.IMAGE_FULL_NAME = img + } + } + } + } + stage('查询镜像') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "查询镜像: ${IMAGE_FULL_NAME}" + + def result = sh(returnStdout: true, script: """ + /data/sh/get-image-labels-fast.sh \ + "${IMAGE_FULL_NAME}" \ + "100038894437" \ + 'h8H1o6Fd!HLXn' | awk '/^{/,/^}\$/' + """).trim() + + if (result == "" || result == null) { + error("查询镜像 label 失败，请检查镜像是否存在或凭证问题") + } + + echo "镜像 Label:\n${result}" + env.IMAGE_LABEL = result + } + } + } + stage('拉取yaml') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + git branch: "${params.BRANCH_NAME}", + credentialsId: 'fly_gitlab_auth', + url: 'http://172.24.16.20/opt/opt-config.git' + } + } + stage('修改YAML') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def oldImg = sh ( + script: """ + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' 2>/dev/null || echo "无（可能是首次部署）" + """, + returnStdout: true + ).trim() + env.OLD_IMAGE_NAME = oldImg + echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" + echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" + sh """ + sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} + """ + } + } + } + stage('部署k8s') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" + sh """ + echo "===Apply Deployment YAML ===" + kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} + + echo "=== 查看当前新使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + + echo "=== 添加注解 ===" + kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${ANNOTATION}" --overwrite -n ${K8s_namespace} + + echo "=== 查看历史版本 ===" + kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} + """ + } + } + } + stage('部署情况') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "=== 检测部署状态并验证新版本运行情况 ===" + echo "--- 检查 Deployment 更新状态 ---" + def rolloutStatus = sh( + script: "kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s", + returnStatus: true + ) + + if (rolloutStatus != 0){ + echo "Deployment ${Deployment_name} 发布 **超时或失败**，开始排查..." + sh """ + echo "--- Deployment 状态 ---" + kubectl describe deployment ${Deployment_name} -n ${K8s_namespace} || true + + echo '--- Pod 列表 ---' + kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o wide || true + + echo "--- Pod 描述 (describe) ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- Pod 描述 \$pod --" + kubectl describe pod \$pod -n ${K8s_namespace} || true + done + + echo "--- 最近 200 行 Pod 日志 ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- logs \$pod --" + kubectl logs \$pod -n ${K8s_namespace} --tail=200 || true + done + """ + error("=== Deployment 发布失败，请检查以上输出定位问题 ===") + } + + echo "=== 检查 Pods 是否全部 Ready ===" + sh "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} -o wide" + + echo "=== 获取最新 Pod 名称 ===" + NEW_POD = sh ( + script: "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}'", + returnStdout: true + ).trim() + + echo "=== 新 Pod 启动日志(最近20行) ===" + sh "kubectl logs ${NEW_POD} -n ${K8s_namespace} --tail=20 || true" + + echo "部署成功：${NEW_POD} 已正常运行" + } + } + } + stage('变更说明') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + env.CHANGE_MSG = """ +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} +旧镜像: ${OLD_IMAGE_NAME} +新镜像: ${IMAGE_FULL_NAME} +部署对象: ${Deployment_name} +镜像标签: ${env.IMAGE_LABEL} + """.stripIndent().trim() + echo env.CHANGE_MSG + } + } + } + stage('提交变更') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + withCredentials([usernamePassword(credentialsId: 'fly_gitlab_auth', usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) { + sh """ + cd ${WORKSPACE} + git config user.name "jenkins" + git config user.email "jenkins@local" + + # 检查工作树是否有变化 + if ! git diff --exit-code ${Deployment_yaml} > /dev/null 2>&1; then + echo "检测到更改，正在提交..." + git add ${Deployment_yaml} + git commit -m "更新镜像 \${CHANGE_MSG}" + else + echo "${Deployment_yaml} 没有变化, 无需commit" + fi + + # 检查是否需要推送（是否有新的提交） + LOCAL=\$(git rev-parse @) + REMOTE=\$(git rev-parse @{u} 2>/dev/null || true) + BASE=\$(git merge-base @ @{u} 2>/dev/null || true) + + if [ "\$LOCAL" = "\$REMOTE" ]; then + echo "已与远程系统同步更新" + elif [ "\$LOCAL" = "\$BASE" ]; then + echo "需要从远程获取数据" + git pull http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + elif [ "\$REMOTE" = "\$BASE" ]; then + echo "将更改推送到远程服务器..." + # 生成临时 .netrc 文件 + echo "machine 172.24.16.20 login \$GIT_USER password \$GIT_PASS" > ~/.netrc + chmod 600 ~/.netrc + git push http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + else + echo "与远程模式不同，跳过推送操作" + fi + """ + } + } + } + } + } + + post { + success { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" + } + failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "有步骤失败，请检查！" + } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } + } +} \ No newline at end of file diff --git a/SCM/部署镜像/s1/v4/DM_s1_lessie_email.groovy b/SCM/部署镜像/s1/v4/DM_s1_lessie_email.groovy new file mode 100644 index 0000000..a95429f --- /dev/null +++ b/SCM/部署镜像/s1/v4/DM_s1_lessie_email.groovy @@ -0,0 +1,350 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + +pipeline { + agent any + + parameters { + imageTag( + name: 'IMAGE_NAME', + description: 'sit 仓库镜像 (除非输入 CUSTOM_IMAGE, 否则使用这里的)', + registry: 'https://uswccr.ccs.tencentyun.com', + image: 'lessiesit/lessie-email', + credentialId: 'dxin_img_hub_auth', + filter: '.*', + defaultTag: '', + tagOrder: 'DSC_VERSION', + verifySsl: true + ) + string( + name: 'CUSTOM_IMAGE', + defaultValue: '', + description: '手输完整镜像//:，例如: uswccr.ccs.tencentyun.com/lessiesit/lessie-email:v0.0.1 (填充后，则忽略镜像仓库选择)' + ) + booleanParam( + name: 'ROLLBACK_VERSION', + defaultValue: false, + description: '是否快速回滚上一个版本?' + ) + choice( + name: 'BRANCH_NAME', + choices: ['dxin', 'opt'], + description: '选择资源清单Yaml的分支' + ) + } + environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 + KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/lessie-email.yaml" + Deployment_name = "s1-lessie-email" + K8s_namespace = "sit" + Pod_container_name = "lessie-email" + Pod_environment = "s1" + } + stages { + stage('回滚上版') { + when { expression { return params.ROLLBACK_VERSION == true } } + steps { + script { + sh """ + echo "=== 开始回滚到上一个版本 ===" + kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace} + echo "=== 回滚中... ===" + kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s + echo "=== 查看所使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + echo "=== 回滚完成 ===" + """ + } + } + } + stage('决定镜像') { + steps { + script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ + + if (params.CUSTOM_IMAGE?.trim()) { + echo "检测手输镜像格式: ${params.CUSTOM_IMAGE}" + def customImage = params.CUSTOM_IMAGE.trim() + // 验证镜像格式 + def matcher = (customImage =~ imageRegex) + if (!matcher.matches()) { + error "CUSTOM_IMAGE 格式不正确，必须是 registry/namespace/repository:tag 格式\n" + + "示例: uswccr.ccs.tencentyun.com/lessie-ai-web:v1.0.0\n" + + "当前输入: ${customImage}" + } + + echo "使用手输镜像: ${customImage}" + env.IMAGE_FULL_NAME = customImage + + } else { + def img = "uswccr.ccs.tencentyun.com/${params.IMAGE_NAME}" + echo "使用 imageTag 插件镜像: ${img}" + env.IMAGE_FULL_NAME = img + } + } + } + } + stage('查询镜像') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "查询镜像: ${IMAGE_FULL_NAME}" + + def result = sh(returnStdout: true, script: """ + /data/sh/get-image-labels-fast.sh \ + "${IMAGE_FULL_NAME}" \ + "100038894437" \ + 'h8H1o6Fd!HLXn' | awk '/^{/,/^}\$/' + """).trim() + + if (result == "" || result == null) { + error("查询镜像 label 失败，请检查镜像是否存在或凭证问题") + } + + echo "镜像 Label:\n${result}" + env.IMAGE_LABEL = result + } + } + } + stage('拉取yaml') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + git branch: "${params.BRANCH_NAME}", + credentialsId: 'fly_gitlab_auth', + url: 'http://172.24.16.20/opt/opt-config.git' + } + } + stage('修改YAML') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def oldImg = sh ( + script: """ + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' 2>/dev/null || echo "无（可能是首次部署）" + """, + returnStdout: true + ).trim() + env.OLD_IMAGE_NAME = oldImg + echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" + echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" + sh """ + sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} + """ + } + } + } + stage('部署k8s') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" + sh """ + echo "===Apply Deployment YAML ===" + kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} + + echo "=== 查看当前新使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + + echo "=== 添加注解 ===" + kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${ANNOTATION}" --overwrite -n ${K8s_namespace} + + echo "=== 查看历史版本 ===" + kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} + """ + } + } + } + stage('部署情况') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "=== 检测部署状态并验证新版本运行情况 ===" + echo "--- 检查 Deployment 更新状态 ---" + def rolloutStatus = sh( + script: "kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s", + returnStatus: true + ) + + if (rolloutStatus != 0){ + echo "Deployment ${Deployment_name} 发布 **超时或失败**，开始排查..." + sh """ + echo "--- Deployment 状态 ---" + kubectl describe deployment ${Deployment_name} -n ${K8s_namespace} || true + echo " " + + echo '--- Pod 列表 ---' + kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o wide || true + echo " " + + echo "--- Pod 描述 (describe) ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- Pod 描述 \$pod --" + kubectl describe pod \$pod -n ${K8s_namespace} || true + done + echo " " + + echo "--- 最近 200 行 Pod 日志 ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- logs \$pod --" + kubectl logs \$pod -n ${K8s_namespace} --tail=200 || true + done + echo " " + """ + error("=== Deployment 发布失败，请检查以上输出定位问题 ===") + } + + echo "=== 检查 Pods 是否全部 Ready ===" + sh "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} -o wide" + + echo "=== 获取最新 Pod 名称 ===" + NEW_POD = sh ( + script: "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}'", + returnStdout: true + ).trim() + + echo "=== 新 Pod 启动日志(最近20行) ===" + sh "kubectl logs ${NEW_POD} -n ${K8s_namespace} --tail=20 || true" + + echo "部署成功：${NEW_POD} 已正常运行" + } + } + } + stage('变更说明') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + env.CHANGE_MSG = """ +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} +旧镜像: ${OLD_IMAGE_NAME} +新镜像: ${IMAGE_FULL_NAME} +部署对象: ${Deployment_name} +镜像标签: ${env.IMAGE_LABEL} + """.stripIndent().trim() + echo env.CHANGE_MSG + } + } + } + stage('提交变更') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + withCredentials([usernamePassword(credentialsId: 'fly_gitlab_auth', usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) { + sh """ + cd ${WORKSPACE} + git config user.name "jenkins" + git config user.email "jenkins@local" + + # 检查工作树是否有变化 + if ! git diff --exit-code ${Deployment_yaml} > /dev/null 2>&1; then + echo "检测到更改，正在提交..." + git add ${Deployment_yaml} + git commit -m "更新镜像 \${CHANGE_MSG}" + else + echo "${Deployment_yaml} 没有变化, 无需commit" + fi + + # 检查是否需要推送（是否有新的提交） + LOCAL=\$(git rev-parse @) + REMOTE=\$(git rev-parse @{u} 2>/dev/null || true) + BASE=\$(git merge-base @ @{u} 2>/dev/null || true) + + if [ "\$LOCAL" = "\$REMOTE" ]; then + echo "已与远程系统同步更新" + elif [ "\$LOCAL" = "\$BASE" ]; then + echo "需要从远程获取数据" + git pull http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + elif [ "\$REMOTE" = "\$BASE" ]; then + echo "将更改推送到远程服务器..." + # 生成临时 .netrc 文件 + echo "machine 172.24.16.20 login \$GIT_USER password \$GIT_PASS" > ~/.netrc + chmod 600 ~/.netrc + git push http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + else + echo "与远程模式不同，跳过推送操作" + fi + """ + } + } + } + } + } + + post { + success { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" + } + failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "有步骤失败，请检查！" + } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } + } +} \ No newline at end of file diff --git a/SCM/部署镜像/s1/v4/DM_s1_lessie_go_api.groovy b/SCM/部署镜像/s1/v4/DM_s1_lessie_go_api.groovy new file mode 100644 index 0000000..1bfd4c9 --- /dev/null +++ b/SCM/部署镜像/s1/v4/DM_s1_lessie_go_api.groovy @@ -0,0 +1,346 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + +pipeline { + agent any + + parameters { + imageTag( + name: 'IMAGE_NAME', + description: 'sit 仓库镜像 (除非输入 CUSTOM_IMAGE, 否则使用这里的)', + registry: 'https://uswccr.ccs.tencentyun.com', + image: 'lessiesit/go_lessie-sourcing-api', + credentialId: 'dxin_img_hub_auth', + filter: '.*', + defaultTag: '', + tagOrder: 'DSC_VERSION', + verifySsl: true + ) + string( + name: 'CUSTOM_IMAGE', + defaultValue: '', + description: '手输完整镜像//:，例如: uswccr.ccs.tencentyun.com/lessiesit/go_lessie-sourcing-api:v0.0.1 (填充后，则忽略镜像仓库选择)' + ) + booleanParam( + name: 'ROLLBACK_VERSION', + defaultValue: false, + description: '是否快速回滚上一个版本?' + ) + choice( + name: 'BRANCH_NAME', + choices: ['dxin', 'opt'], + description: '选择资源清单Yaml的分支' + ) + } + environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 + KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/lessie-go-api.yaml" + Deployment_name = "s1-lessie-go-api" + K8s_namespace = "sit" + Pod_container_name = "lessie-go-api" + Pod_environment = "s1" + } + stages { + stage('回滚上版') { + when { expression { return params.ROLLBACK_VERSION == true } } + steps { + script { + sh """ + echo "=== 开始回滚到上一个版本 ===" + kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace} + echo "=== 回滚中... ===" + kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s + echo "=== 查看所使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + echo "=== 回滚完成 ===" + """ + } + } + } + stage('决定镜像') { + steps { + script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ + + if (params.CUSTOM_IMAGE?.trim()) { + echo "检测手输镜像格式: ${params.CUSTOM_IMAGE}" + def customImage = params.CUSTOM_IMAGE.trim() + // 验证镜像格式 + def matcher = (customImage =~ imageRegex) + if (!matcher.matches()) { + error "CUSTOM_IMAGE 格式不正确，必须是 registry/namespace/repository:tag 格式\n" + + "示例: uswccr.ccs.tencentyun.com/go_lessie-sourcing-api:v1.0.0\n" + + "当前输入: ${customImage}" + } + + echo "使用手输镜像: ${customImage}" + env.IMAGE_FULL_NAME = customImage + + } else { + def img = "uswccr.ccs.tencentyun.com/${params.IMAGE_NAME}" + echo "使用 imageTag 插件镜像: ${img}" + env.IMAGE_FULL_NAME = img + } + } + } + } + stage('查询镜像') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "查询镜像: ${IMAGE_FULL_NAME}" + + def result = sh(returnStdout: true, script: """ + /data/sh/get-image-labels-fast.sh \ + "${IMAGE_FULL_NAME}" \ + "100038894437" \ + 'h8H1o6Fd!HLXn' | awk '/^{/,/^}\$/' + """).trim() + + if (result == "" || result == null) { + error("查询镜像 label 失败，请检查镜像是否存在或凭证问题") + } + + echo "镜像 Label:\n${result}" + env.IMAGE_LABEL = result + } + } + } + stage('拉取yaml') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + git branch: "${params.BRANCH_NAME}", + credentialsId: 'fly_gitlab_auth', + url: 'http://172.24.16.20/opt/opt-config.git' + } + } + stage('修改YAML') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def oldImg = sh ( + script: """ + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' 2>/dev/null || echo "无（可能是首次部署）" + """, + returnStdout: true + ).trim() + env.OLD_IMAGE_NAME = oldImg + echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" + echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" + sh """ + sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} + """ + } + } + } + stage('部署k8s') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" + sh """ + echo "===Apply Deployment YAML ===" + kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} + + echo "=== 查看当前新使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + + echo "=== 添加注解 ===" + kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${ANNOTATION}" --overwrite -n ${K8s_namespace} + + echo "=== 查看历史版本 ===" + kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} + """ + } + } + } + stage('部署情况') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "=== 检测部署状态并验证新版本运行情况 ===" + echo "--- 检查 Deployment 更新状态 ---" + def rolloutStatus = sh( + script: "kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s", + returnStatus: true + ) + + if (rolloutStatus != 0){ + echo "Deployment ${Deployment_name} 发布 **超时或失败**，开始排查..." + sh """ + echo "--- Deployment 状态 ---" + kubectl describe deployment ${Deployment_name} -n ${K8s_namespace} || true + + echo '--- Pod 列表 ---' + kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o wide || true + + echo "--- Pod 描述 (describe) ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- Pod 描述 \$pod --" + kubectl describe pod \$pod -n ${K8s_namespace} || true + done + + echo "--- 最近 200 行 Pod 日志 ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- logs \$pod --" + kubectl logs \$pod -n ${K8s_namespace} --tail=200 || true + done + """ + error("=== Deployment 发布失败，请检查以上输出定位问题 ===") + } + + echo "=== 检查 Pods 是否全部 Ready ===" + sh "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} -o wide" + + echo "=== 获取最新 Pod 名称 ===" + NEW_POD = sh ( + script: "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}'", + returnStdout: true + ).trim() + + echo "=== 新 Pod 启动日志(最近20行) ===" + sh "kubectl logs ${NEW_POD} -n ${K8s_namespace} --tail=20 || true" + + echo "部署成功：${NEW_POD} 已正常运行" + } + } + } + stage('变更说明') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + env.CHANGE_MSG = """ +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} +旧镜像: ${OLD_IMAGE_NAME} +新镜像: ${IMAGE_FULL_NAME} +部署对象: ${Deployment_name} +镜像标签: ${env.IMAGE_LABEL} + """.stripIndent().trim() + echo env.CHANGE_MSG + } + } + } + stage('提交变更') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + withCredentials([usernamePassword(credentialsId: 'fly_gitlab_auth', usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) { + sh """ + cd ${WORKSPACE} + git config user.name "jenkins" + git config user.email "jenkins@local" + + # 检查工作树是否有变化 + if ! git diff --exit-code ${Deployment_yaml} > /dev/null 2>&1; then + echo "检测到更改，正在提交..." + git add ${Deployment_yaml} + git commit -m "更新镜像 \${CHANGE_MSG}" + else + echo "${Deployment_yaml} 没有变化, 无需commit" + fi + + # 检查是否需要推送（是否有新的提交） + LOCAL=\$(git rev-parse @) + REMOTE=\$(git rev-parse @{u} 2>/dev/null || true) + BASE=\$(git merge-base @ @{u} 2>/dev/null || true) + + if [ "\$LOCAL" = "\$REMOTE" ]; then + echo "已与远程系统同步更新" + elif [ "\$LOCAL" = "\$BASE" ]; then + echo "需要从远程获取数据" + git pull http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + elif [ "\$REMOTE" = "\$BASE" ]; then + echo "将更改推送到远程服务器..." + # 生成临时 .netrc 文件 + echo "machine 172.24.16.20 login \$GIT_USER password \$GIT_PASS" > ~/.netrc + chmod 600 ~/.netrc + git push http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + else + echo "与远程模式不同，跳过推送操作" + fi + """ + } + } + } + } + } + + post { + success { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" + } + failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "有步骤失败，请检查！" + } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } + } +} \ No newline at end of file diff --git a/SCM/部署镜像/s1/v4/DM_s1_lessie_review_service.groovy b/SCM/部署镜像/s1/v4/DM_s1_lessie_review_service.groovy new file mode 100644 index 0000000..6ffdbcd --- /dev/null +++ b/SCM/部署镜像/s1/v4/DM_s1_lessie_review_service.groovy @@ -0,0 +1,346 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + +pipeline { + agent any + + parameters { + imageTag( + name: 'IMAGE_NAME', + description: 'sit 仓库镜像 (除非输入 CUSTOM_IMAGE, 否则使用这里的)', + registry: 'https://uswccr.ccs.tencentyun.com', + image: 'lessiesit/lessie-review-service', + credentialId: 'dxin_img_hub_auth', + filter: '.*', + defaultTag: '', + tagOrder: 'DSC_VERSION', + verifySsl: true + ) + string( + name: 'CUSTOM_IMAGE', + defaultValue: '', + description: '手输完整镜像//:，例如: uswccr.ccs.tencentyun.com/lessiesit/lessie-sourcing-agents:v0.0.1 (填充后，则忽略镜像仓库选择)' + ) + booleanParam( + name: 'ROLLBACK_VERSION', + defaultValue: false, + description: '是否快速回滚上一个版本?' + ) + choice( + name: 'BRANCH_NAME', + choices: ['dxin', 'opt'], + description: '选择资源清单Yaml的分支' + ) + } + environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 + KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/lessie-review-service.yaml" + Deployment_name = "sit-lessie-review-service" + K8s_namespace = "sit" + Pod_container_name = "lessie-review-service" + Pod_environment = "sit" + } + stages { + stage('回滚上版') { + when { expression { return params.ROLLBACK_VERSION == true } } + steps { + script { + sh """ + echo "=== 开始回滚到上一个版本 ===" + kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace} + echo "=== 回滚中... ===" + kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s + echo "=== 查看所使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + echo "=== 回滚完成 ===" + """ + } + } + } + stage('决定镜像') { + steps { + script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ + + if (params.CUSTOM_IMAGE?.trim()) { + echo "检测手输镜像格式: ${params.CUSTOM_IMAGE}" + def customImage = params.CUSTOM_IMAGE.trim() + // 验证镜像格式 + def matcher = (customImage =~ imageRegex) + if (!matcher.matches()) { + error "CUSTOM_IMAGE 格式不正确，必须是 registry/namespace/repository:tag 格式\n" + + "示例: uswccr.ccs.tencentyun.com/lessiesit/lessie-sourcing-agents:v1.0.0\n" + + "当前输入: ${customImage}" + } + + echo "使用手输镜像: ${customImage}" + env.IMAGE_FULL_NAME = customImage + + } else { + def img = "uswccr.ccs.tencentyun.com/${params.IMAGE_NAME}" + echo "使用 imageTag 插件镜像: ${img}" + env.IMAGE_FULL_NAME = img + } + } + } + } + stage('查询镜像') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "查询镜像: ${IMAGE_FULL_NAME}" + + def result = sh(returnStdout: true, script: """ + /data/sh/get-image-labels-fast.sh \ + "${IMAGE_FULL_NAME}" \ + "100038894437" \ + 'h8H1o6Fd!HLXn' | awk '/^{/,/^}\$/' + """).trim() + + if (result == "" || result == null) { + error("查询镜像 label 失败，请检查镜像是否存在或凭证问题") + } + + echo "镜像 Label:\n${result}" + env.IMAGE_LABEL = result + } + } + } + stage('拉取yaml') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + git branch: "${params.BRANCH_NAME}", + credentialsId: 'fly_gitlab_auth', + url: 'http://172.24.16.20/opt/opt-config.git' + } + } + stage('修改YAML') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def oldImg = sh ( + script: """ + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' 2>/dev/null || echo "无（可能是首次部署）" + """, + returnStdout: true + ).trim() + env.OLD_IMAGE_NAME = oldImg + echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" + echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" + sh """ + sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} + """ + } + } + } + stage('部署k8s') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" + sh """ + echo "===Apply Deployment YAML ===" + kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} + + echo "=== 查看当前新使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + + echo "=== 添加注解 ===" + kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${ANNOTATION}" --overwrite -n ${K8s_namespace} + + echo "=== 查看历史版本 ===" + kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} + """ + } + } + } + stage('部署情况') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "=== 检测部署状态并验证新版本运行情况 ===" + echo "--- 检查 Deployment 更新状态 ---" + def rolloutStatus = sh( + script: "kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s", + returnStatus: true + ) + + if (rolloutStatus != 0){ + echo "Deployment ${Deployment_name} 发布 **超时或失败**，开始排查..." + sh """ + echo "--- Deployment 状态 ---" + kubectl describe deployment ${Deployment_name} -n ${K8s_namespace} || true + + echo '--- Pod 列表 ---' + kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o wide || true + + echo "--- Pod 描述 (describe) ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- Pod 描述 \$pod --" + kubectl describe pod \$pod -n ${K8s_namespace} || true + done + + echo "--- 最近 200 行 Pod 日志 ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- logs \$pod --" + kubectl logs \$pod -n ${K8s_namespace} --tail=200 || true + done + """ + error("=== Deployment 发布失败，请检查以上输出定位问题 ===") + } + + echo "=== 检查 Pods 是否全部 Ready ===" + sh "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} -o wide" + + echo "=== 获取最新 Pod 名称 ===" + NEW_POD = sh ( + script: "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}'", + returnStdout: true + ).trim() + + echo "=== 新 Pod 启动日志(最近20行) ===" + sh "kubectl logs ${NEW_POD} -n ${K8s_namespace} --tail=20 || true" + + echo "部署成功：${NEW_POD} 已正常运行" + } + } + } + stage('变更说明') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + env.CHANGE_MSG = """ +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} +旧镜像: ${OLD_IMAGE_NAME} +新镜像: ${IMAGE_FULL_NAME} +部署对象: ${Deployment_name} +镜像标签: ${env.IMAGE_LABEL} + """.stripIndent().trim() + echo env.CHANGE_MSG + } + } + } + stage('提交变更') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + withCredentials([usernamePassword(credentialsId: 'fly_gitlab_auth', usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) { + sh """ + cd ${WORKSPACE} + git config user.name "jenkins" + git config user.email "jenkins@local" + + # 检查工作树是否有变化 + if ! git diff --exit-code ${Deployment_yaml} > /dev/null 2>&1; then + echo "检测到更改，正在提交..." + git add ${Deployment_yaml} + git commit -m "更新镜像 \${CHANGE_MSG}" + else + echo "${Deployment_yaml} 没有变化, 无需commit" + fi + + # 检查是否需要推送（是否有新的提交） + LOCAL=\$(git rev-parse @) + REMOTE=\$(git rev-parse @{u} 2>/dev/null || true) + BASE=\$(git merge-base @ @{u} 2>/dev/null || true) + + if [ "\$LOCAL" = "\$REMOTE" ]; then + echo "已与远程系统同步更新" + elif [ "\$LOCAL" = "\$BASE" ]; then + echo "需要从远程获取数据" + git pull http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + elif [ "\$REMOTE" = "\$BASE" ]; then + echo "将更改推送到远程服务器..." + # 生成临时 .netrc 文件 + echo "machine 172.24.16.20 login \$GIT_USER password \$GIT_PASS" > ~/.netrc + chmod 600 ~/.netrc + git push http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + else + echo "与远程模式不同，跳过推送操作" + fi + """ + } + } + } + } + } + + post { + success { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" + } + failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "有步骤失败，请检查！" + } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } + } +} \ No newline at end of file diff --git a/SCM/部署镜像/s1/v4/DM_s1_lessie_search_service.groovy b/SCM/部署镜像/s1/v4/DM_s1_lessie_search_service.groovy new file mode 100644 index 0000000..d20fe93 --- /dev/null +++ b/SCM/部署镜像/s1/v4/DM_s1_lessie_search_service.groovy @@ -0,0 +1,311 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + +pipeline { + agent any + + parameters { + imageTag( + name: 'IMAGE_NAME', + description: 'sit 仓库镜像 (除非输入 CUSTOM_IMAGE, 否则使用这里的)', + registry: 'https://uswccr.ccs.tencentyun.com', + image: 'lessiesit/lessie-search-service', + credentialId: 'dxin_img_hub_auth', + filter: '.*', + defaultTag: '', + tagOrder: 'DSC_VERSION', + verifySsl: true + ) + string( + name: 'CUSTOM_IMAGE', + defaultValue: '', + description: '手输完整镜像//:，例如: uswccr.ccs.tencentyun.com/lessiesit/lessie-search-agents:v0.0.1 (填充后，则忽略镜像仓库选择)' + ) + booleanParam( + name: 'ROLLBACK_VERSION', + defaultValue: false, + description: '是否快速回滚上一个版本?' + ) + choice( + name: 'BRANCH_NAME', + choices: ['dxin', 'opt'], + description: '选择资源清单Yaml的分支' + ) + } + environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 + KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/lessie-search-service.yaml" + Deployment_name = "sit-lessie-search-service" + K8s_namespace = "sit" + Pod_container_name = "lessie-search-service" + Pod_environment = "sit" + } + stages { + stage('回滚上版') { + when { expression { return params.ROLLBACK_VERSION == true } } + steps { + script { + sh """ + echo "=== 开始回滚到上一个版本 ===" + kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace} + echo "=== 回滚中... ===" + kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s + echo "=== 查看所使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + echo "=== 回滚完成 ===" + """ + } + } + } + stage('决定镜像') { + steps { + script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ + + if (params.CUSTOM_IMAGE?.trim()) { + echo "检测手输镜像格式: ${params.CUSTOM_IMAGE}" + def customImage = params.CUSTOM_IMAGE.trim() + // 验证镜像格式 + def matcher = (customImage =~ imageRegex) + if (!matcher.matches()) { + error "CUSTOM_IMAGE 格式不正确，必须是 registry/namespace/repository:tag 格式\n" + + "示例: uswccr.ccs.tencentyun.com/lessiesit/lessie-sourcing-agents:v1.0.0\n" + + "当前输入: ${customImage}" + } + + echo "使用手输镜像: ${customImage}" + env.IMAGE_FULL_NAME = customImage + + } else { + def img = "uswccr.ccs.tencentyun.com/${params.IMAGE_NAME}" + echo "使用 imageTag 插件镜像: ${img}" + env.IMAGE_FULL_NAME = img + } + } + } + } + stage('查询镜像') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "查询镜像: ${IMAGE_FULL_NAME}" + + def result = sh(returnStdout: true, script: """ + /data/sh/get-image-labels-fast.sh \ + "${IMAGE_FULL_NAME}" \ + "100038894437" \ + 'h8H1o6Fd!HLXn' | awk '/^{/,/^}\$/' + """).trim() + + if (result == "" || result == null) { + error("查询镜像 label 失败，请检查镜像是否存在或凭证问题") + } + + echo "镜像 Label:\n${result}" + env.IMAGE_LABEL = result + } + } + } + stage('拉取yaml') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + git branch: "${params.BRANCH_NAME}", + credentialsId: 'fly_gitlab_auth', + url: 'http://172.24.16.20/opt/opt-config.git' + } + } + stage('修改YAML') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def oldImg = sh ( + script: """ + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' 2>/dev/null || echo "无（可能是首次部署）" + """, + returnStdout: true + ).trim() + env.OLD_IMAGE_NAME = oldImg + echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" + echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" + sh """ + sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} + """ + } + } + } + stage('部署k8s') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" + sh """ + echo "===Apply Deployment YAML ===" + kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} + + echo "=== 查看当前新使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + + echo "=== 添加注解 ===" + kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${ANNOTATION}" --overwrite -n ${K8s_namespace} + + echo "=== 查看历史版本 ===" + kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} + """ + } + } + } + stage('部署情况') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "=== 检测部署状态并验证新版本运行情况 ===" + echo "--- 检查 Deployment 更新状态 ---" + def rolloutStatus = sh( + script: "kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s", + returnStatus: true + ) + + if (rolloutStatus != 0){ + echo "Deployment ${Deployment_name} 发布 **超时或失败**，开始排查..." + sh """ + echo "--- Deployment 状态 ---" + kubectl describe deployment ${Deployment_name} -n ${K8s_namespace} || true + + echo '--- Pod 列表 ---' + kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o wide || true + + echo "--- Pod 描述 (describe) ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- Pod 描述 \$pod --" + kubectl describe pod \$pod -n ${K8s_namespace} || true + done + + echo "--- 最近 200 行 Pod 日志 ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- logs \$pod --" + kubectl logs \$pod -n ${K8s_namespace} --tail=200 || true + done + """ + error("=== Deployment 发布失败，请检查以上输出定位问题 ===") + } + + echo "=== 检查 Pods 是否全部 Ready ===" + sh "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} -o wide" + + echo "=== 获取最新 Pod 名称 ===" + NEW_POD = sh ( + script: "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}'", + returnStdout: true + ).trim() + + echo "=== 新 Pod 启动日志(最近20行) ===" + sh "kubectl logs ${NEW_POD} -n ${K8s_namespace} --tail=20 || true" + + echo "部署成功：${NEW_POD} 已正常运行" + } + } + } + stage('变更说明') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + env.CHANGE_MSG = """ +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} +旧镜像: ${OLD_IMAGE_NAME} +新镜像: ${IMAGE_FULL_NAME} +部署对象: ${Deployment_name} +镜像标签: ${env.IMAGE_LABEL} + """.stripIndent().trim() + echo env.CHANGE_MSG + } + } + } + stage('提交变更') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "略" + } + } + } + } + + post { + success { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" + } + failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "有步骤失败，请检查！" + } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } + } +} \ No newline at end of file diff --git a/SCM/部署镜像/s2/DM_s2_lessie_agent.groovy b/SCM/部署镜像/s2/v1/DM_s2_lessie_agent.groovy similarity index 100% rename from SCM/部署镜像/s2/DM_s2_lessie_agent.groovy rename to SCM/部署镜像/s2/v1/DM_s2_lessie_agent.groovy diff --git a/SCM/部署镜像/s2/DM_s2_lessie_ai_web.groovy b/SCM/部署镜像/s2/v1/DM_s2_lessie_ai_web.groovy similarity index 100% rename from SCM/部署镜像/s2/DM_s2_lessie_ai_web.groovy rename to SCM/部署镜像/s2/v1/DM_s2_lessie_ai_web.groovy diff --git a/SCM/部署镜像/s2/DM_s2_lessie_go_api.groovy b/SCM/部署镜像/s2/v1/DM_s2_lessie_go_api.groovy similarity index 100% rename from SCM/部署镜像/s2/DM_s2_lessie_go_api.groovy rename to SCM/部署镜像/s2/v1/DM_s2_lessie_go_api.groovy diff --git a/SCM/部署镜像/s2/v3/DM_s2_lessie_agent.groovy b/SCM/部署镜像/s2/v3/DM_s2_lessie_agent.groovy new file mode 100644 index 0000000..2e54e00 --- /dev/null +++ b/SCM/部署镜像/s2/v3/DM_s2_lessie_agent.groovy @@ -0,0 +1,346 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + +pipeline { + agent any + + parameters { + imageTag( + name: 'IMAGE_NAME', + description: 'sit 仓库镜像 (除非输入 CUSTOM_IMAGE, 否则使用这里的)', + registry: 'https://uswccr.ccs.tencentyun.com', + image: 'lessiesit/lessie-sourcing-agents', + credentialId: 'dxin_img_hub_auth', + filter: '.*', + defaultTag: '', + tagOrder: 'DSC_VERSION', + verifySsl: true + ) + string( + name: 'CUSTOM_IMAGE', + defaultValue: '', + description: '手输完整镜像//:，例如: uswccr.ccs.tencentyun.com/lessiesit/lessie-sourcing-agents:v0.0.1 (填充后，则忽略镜像仓库选择)' + ) + booleanParam( + name: 'ROLLBACK_VERSION', + defaultValue: false, + description: '是否快速回滚上一个版本?' + ) + choice( + name: 'BRANCH_NAME', + choices: ['dxin', 'opt'], + description: '选择资源清单Yaml的分支' + ) + } + environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 + KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s2/lessie-agents.yaml" + Deployment_name = "s2-lessie-agents" + K8s_namespace = "sit" + Pod_container_name = "lessie-agents" + Pod_environment = "s2" + } + stages { + stage('回滚上版') { + when { expression { return params.ROLLBACK_VERSION == true } } + steps { + script { + sh """ + echo "=== 开始回滚到上一个版本 ===" + kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace} + echo "=== 回滚中... ===" + kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s + echo "=== 查看所使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + echo "=== 回滚完成 ===" + """ + } + } + } + stage('决定镜像') { + steps { + script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ + + if (params.CUSTOM_IMAGE?.trim()) { + echo "检测手输镜像格式: ${params.CUSTOM_IMAGE}" + def customImage = params.CUSTOM_IMAGE.trim() + // 验证镜像格式 + def matcher = (customImage =~ imageRegex) + if (!matcher.matches()) { + error "CUSTOM_IMAGE 格式不正确，必须是 registry/namespace/repository:tag 格式\n" + + "示例: uswccr.ccs.tencentyun.com/lessiesit/lessie-sourcing-agents:v1.0.0\n" + + "当前输入: ${customImage}" + } + + echo "使用手输镜像: ${customImage}" + env.IMAGE_FULL_NAME = customImage + + } else { + def img = "uswccr.ccs.tencentyun.com/${params.IMAGE_NAME}" + echo "使用 imageTag 插件镜像: ${img}" + env.IMAGE_FULL_NAME = img + } + } + } + } + stage('查询镜像') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "查询镜像: ${IMAGE_FULL_NAME}" + + def result = sh(returnStdout: true, script: """ + /data/sh/get-image-labels-fast.sh \ + "${IMAGE_FULL_NAME}" \ + "100038894437" \ + 'h8H1o6Fd!HLXn' | awk '/^{/,/^}\$/' + """).trim() + + if (result == "" || result == null) { + error("查询镜像 label 失败，请检查镜像是否存在或凭证问题") + } + + echo "镜像 Label:\n${result}" + env.IMAGE_LABEL = result + } + } + } + stage('拉取yaml') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + git branch: "${params.BRANCH_NAME}", + credentialsId: 'fly_gitlab_auth', + url: 'http://172.24.16.20/opt/opt-config.git' + } + } + stage('修改YAML') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def oldImg = sh ( + script: """ + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' 2>/dev/null || echo "无（可能是首次部署）" + """, + returnStdout: true + ).trim() + env.OLD_IMAGE_NAME = oldImg + echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" + echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" + sh """ + sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} + """ + } + } + } + stage('部署k8s') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" + sh """ + echo "===Apply Deployment YAML ===" + kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} + + echo "=== 查看当前新使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + + echo "=== 添加注解 ===" + kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${ANNOTATION}" --overwrite -n ${K8s_namespace} + + echo "=== 查看历史版本 ===" + kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} + """ + } + } + } + stage('部署情况') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "=== 检测部署状态并验证新版本运行情况 ===" + echo "--- 检查 Deployment 更新状态 ---" + def rolloutStatus = sh( + script: "kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s", + returnStatus: true + ) + + if (rolloutStatus != 0){ + echo "Deployment ${Deployment_name} 发布 **超时或失败**，开始排查..." + sh """ + echo "--- Deployment 状态 ---" + kubectl describe deployment ${Deployment_name} -n ${K8s_namespace} || true + + echo '--- Pod 列表 ---' + kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o wide || true + + echo "--- Pod 描述 (describe) ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- Pod 描述 \$pod --" + kubectl describe pod \$pod -n ${K8s_namespace} || true + done + + echo "--- 最近 200 行 Pod 日志 ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- logs \$pod --" + kubectl logs \$pod -n ${K8s_namespace} --tail=200 || true + done + """ + error("=== Deployment 发布失败，请检查以上输出定位问题 ===") + } + + echo "=== 检查 Pods 是否全部 Ready ===" + sh "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} -o wide" + + echo "=== 获取最新 Pod 名称 ===" + NEW_POD = sh ( + script: "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}'", + returnStdout: true + ).trim() + + echo "=== 新 Pod 启动日志(最近20行) ===" + sh "kubectl logs ${NEW_POD} -n ${K8s_namespace} --tail=20 || true" + + echo "部署成功：${NEW_POD} 已正常运行" + } + } + } + stage('变更说明') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + env.CHANGE_MSG = """ +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} +旧镜像: ${OLD_IMAGE_NAME} +新镜像: ${IMAGE_FULL_NAME} +部署对象: ${Deployment_name} +镜像标签: ${env.IMAGE_LABEL} + """.stripIndent().trim() + echo env.CHANGE_MSG + } + } + } + stage('提交变更') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + withCredentials([usernamePassword(credentialsId: 'fly_gitlab_auth', usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) { + sh """ + cd ${WORKSPACE} + git config user.name "jenkins" + git config user.email "jenkins@local" + + # 检查工作树是否有变化 + if ! git diff --exit-code ${Deployment_yaml} > /dev/null 2>&1; then + echo "检测到更改，正在提交..." + git add ${Deployment_yaml} + git commit -m "更新镜像 \${CHANGE_MSG}" + else + echo "${Deployment_yaml} 没有变化, 无需commit" + fi + + # 检查是否需要推送（是否有新的提交） + LOCAL=\$(git rev-parse @) + REMOTE=\$(git rev-parse @{u} 2>/dev/null || true) + BASE=\$(git merge-base @ @{u} 2>/dev/null || true) + + if [ "\$LOCAL" = "\$REMOTE" ]; then + echo "已与远程系统同步更新" + elif [ "\$LOCAL" = "\$BASE" ]; then + echo "需要从远程获取数据" + git pull http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + elif [ "\$REMOTE" = "\$BASE" ]; then + echo "将更改推送到远程服务器..." + # 生成临时 .netrc 文件 + echo "machine 172.24.16.20 login \$GIT_USER password \$GIT_PASS" > ~/.netrc + chmod 600 ~/.netrc + git push http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + else + echo "与远程模式不同，跳过推送操作" + fi + """ + } + } + } + } + } + + post { + success { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" + } + failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "有步骤失败，请检查！" + } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } + } +} \ No newline at end of file diff --git a/SCM/部署镜像/s2/v3/DM_s2_lessie_ai_web.groovy b/SCM/部署镜像/s2/v3/DM_s2_lessie_ai_web.groovy new file mode 100644 index 0000000..4ab3dff --- /dev/null +++ b/SCM/部署镜像/s2/v3/DM_s2_lessie_ai_web.groovy @@ -0,0 +1,346 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + +pipeline { + agent any + + parameters { + imageTag( + name: 'IMAGE_NAME', + description: 'sit 仓库镜像 (除非输入 CUSTOM_IMAGE, 否则使用这里的)', + registry: 'https://uswccr.ccs.tencentyun.com', + image: 'lessiesit/lessie-ai-web', + credentialId: 'dxin_img_hub_auth', + filter: '.*', + defaultTag: '', + tagOrder: 'DSC_VERSION', + verifySsl: true + ) + string( + name: 'CUSTOM_IMAGE', + defaultValue: '', + description: '手输完整镜像//:，例如: uswccr.ccs.tencentyun.com/lessiesit/lessie-ai-web:v0.0.1 (填充后，则忽略镜像仓库选择)' + ) + booleanParam( + name: 'ROLLBACK_VERSION', + defaultValue: false, + description: '是否快速回滚上一个版本?' + ) + choice( + name: 'BRANCH_NAME', + choices: ['dxin', 'opt'], + description: '选择资源清单Yaml的分支' + ) + } + environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 + KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s2/lessie-ai-web.yaml" + Deployment_name = "s2-lessie-ai-web" + K8s_namespace = "sit" + Pod_container_name = "lessie-ai-web" + Pod_environment = "s2" + } + stages { + stage('回滚上版') { + when { expression { return params.ROLLBACK_VERSION == true } } + steps { + script { + sh """ + echo "=== 开始回滚到上一个版本 ===" + kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace} + echo "=== 回滚中... ===" + kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s + echo "=== 查看所使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + echo "=== 回滚完成 ===" + """ + } + } + } + stage('决定镜像') { + steps { + script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ + + if (params.CUSTOM_IMAGE?.trim()) { + echo "检测手输镜像格式: ${params.CUSTOM_IMAGE}" + def customImage = params.CUSTOM_IMAGE.trim() + // 验证镜像格式 + def matcher = (customImage =~ imageRegex) + if (!matcher.matches()) { + error "CUSTOM_IMAGE 格式不正确，必须是 registry/namespace/repository:tag 格式\n" + + "示例: uswccr.ccs.tencentyun.com/lessie-ai-web:v1.0.0\n" + + "当前输入: ${customImage}" + } + + echo "使用手输镜像: ${customImage}" + env.IMAGE_FULL_NAME = customImage + + } else { + def img = "uswccr.ccs.tencentyun.com/${params.IMAGE_NAME}" + echo "使用 imageTag 插件镜像: ${img}" + env.IMAGE_FULL_NAME = img + } + } + } + } + stage('查询镜像') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "查询镜像: ${IMAGE_FULL_NAME}" + + def result = sh(returnStdout: true, script: """ + /data/sh/get-image-labels-fast.sh \ + "${IMAGE_FULL_NAME}" \ + "100038894437" \ + 'h8H1o6Fd!HLXn' | awk '/^{/,/^}\$/' + """).trim() + + if (result == "" || result == null) { + error("查询镜像 label 失败，请检查镜像是否存在或凭证问题") + } + + echo "镜像 Label:\n${result}" + env.IMAGE_LABEL = result + } + } + } + stage('拉取yaml') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + git branch: "${params.BRANCH_NAME}", + credentialsId: 'fly_gitlab_auth', + url: 'http://172.24.16.20/opt/opt-config.git' + } + } + stage('修改YAML') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def oldImg = sh ( + script: """ + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' 2>/dev/null || echo "无（可能是首次部署）" + """, + returnStdout: true + ).trim() + env.OLD_IMAGE_NAME = oldImg + echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" + echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" + sh """ + sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} + """ + } + } + } + stage('部署k8s') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" + sh """ + echo "===Apply Deployment YAML ===" + kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} + + echo "=== 查看当前新使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + + echo "=== 添加注解 ===" + kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${ANNOTATION}" --overwrite -n ${K8s_namespace} + + echo "=== 查看历史版本 ===" + kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} + """ + } + } + } + stage('部署情况') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "=== 检测部署状态并验证新版本运行情况 ===" + echo "--- 检查 Deployment 更新状态 ---" + def rolloutStatus = sh( + script: "kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s", + returnStatus: true + ) + + if (rolloutStatus != 0){ + echo "Deployment ${Deployment_name} 发布 **超时或失败**，开始排查..." + sh """ + echo "--- Deployment 状态 ---" + kubectl describe deployment ${Deployment_name} -n ${K8s_namespace} || true + + echo '--- Pod 列表 ---' + kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o wide || true + + echo "--- Pod 描述 (describe) ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- Pod 描述 \$pod --" + kubectl describe pod \$pod -n ${K8s_namespace} || true + done + + echo "--- 最近 200 行 Pod 日志 ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- logs \$pod --" + kubectl logs \$pod -n ${K8s_namespace} --tail=200 || true + done + """ + error("=== Deployment 发布失败，请检查以上输出定位问题 ===") + } + + echo "=== 检查 Pods 是否全部 Ready ===" + sh "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} -o wide" + + echo "=== 获取最新 Pod 名称 ===" + NEW_POD = sh ( + script: "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}'", + returnStdout: true + ).trim() + + echo "=== 新 Pod 启动日志(最近20行) ===" + sh "kubectl logs ${NEW_POD} -n ${K8s_namespace} --tail=20 || true" + + echo "部署成功：${NEW_POD} 已正常运行" + } + } + } + stage('变更说明') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + env.CHANGE_MSG = """ +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} +旧镜像: ${OLD_IMAGE_NAME} +新镜像: ${IMAGE_FULL_NAME} +部署对象: ${Deployment_name} +镜像标签: ${env.IMAGE_LABEL} + """.stripIndent().trim() + echo env.CHANGE_MSG + } + } + } + stage('提交变更') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + withCredentials([usernamePassword(credentialsId: 'fly_gitlab_auth', usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) { + sh """ + cd ${WORKSPACE} + git config user.name "jenkins" + git config user.email "jenkins@local" + + # 检查工作树是否有变化 + if ! git diff --exit-code ${Deployment_yaml} > /dev/null 2>&1; then + echo "检测到更改，正在提交..." + git add ${Deployment_yaml} + git commit -m "更新镜像 \${CHANGE_MSG}" + else + echo "${Deployment_yaml} 没有变化, 无需commit" + fi + + # 检查是否需要推送（是否有新的提交） + LOCAL=\$(git rev-parse @) + REMOTE=\$(git rev-parse @{u} 2>/dev/null || true) + BASE=\$(git merge-base @ @{u} 2>/dev/null || true) + + if [ "\$LOCAL" = "\$REMOTE" ]; then + echo "已与远程系统同步更新" + elif [ "\$LOCAL" = "\$BASE" ]; then + echo "需要从远程获取数据" + git pull http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + elif [ "\$REMOTE" = "\$BASE" ]; then + echo "将更改推送到远程服务器..." + # 生成临时 .netrc 文件 + echo "machine 172.24.16.20 login \$GIT_USER password \$GIT_PASS" > ~/.netrc + chmod 600 ~/.netrc + git push http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + else + echo "与远程模式不同，跳过推送操作" + fi + """ + } + } + } + } + } + + post { + success { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" + } + failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "有步骤失败，请检查！" + } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } + } +} \ No newline at end of file diff --git a/SCM/部署镜像/s2/v3/DM_s2_lessie_go_api.groovy b/SCM/部署镜像/s2/v3/DM_s2_lessie_go_api.groovy new file mode 100644 index 0000000..4177553 --- /dev/null +++ b/SCM/部署镜像/s2/v3/DM_s2_lessie_go_api.groovy @@ -0,0 +1,346 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + +pipeline { + agent any + + parameters { + imageTag( + name: 'IMAGE_NAME', + description: 'sit 仓库镜像 (除非输入 CUSTOM_IMAGE, 否则使用这里的)', + registry: 'https://uswccr.ccs.tencentyun.com', + image: 'lessiesit/go_lessie-sourcing-api', + credentialId: 'dxin_img_hub_auth', + filter: '.*', + defaultTag: '', + tagOrder: 'DSC_VERSION', + verifySsl: true + ) + string( + name: 'CUSTOM_IMAGE', + defaultValue: '', + description: '手输完整镜像//:，例如: uswccr.ccs.tencentyun.com/lessiesit/go_lessie-sourcing-api:v0.0.1 (填充后，则忽略镜像仓库选择)' + ) + booleanParam( + name: 'ROLLBACK_VERSION', + defaultValue: false, + description: '是否快速回滚上一个版本?' + ) + choice( + name: 'BRANCH_NAME', + choices: ['dxin', 'opt'], + description: '选择资源清单Yaml的分支' + ) + } + environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 + KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s2/lessie-go-api.yaml" + Deployment_name = "s2-lessie-go-api" + K8s_namespace = "sit" + Pod_container_name = "lessie-go-api" + Pod_environment = "s2" + } + stages { + stage('回滚上版') { + when { expression { return params.ROLLBACK_VERSION == true } } + steps { + script { + sh """ + echo "=== 开始回滚到上一个版本 ===" + kubectl rollout undo deployment/${Deployment_name} -n ${K8s_namespace} + echo "=== 回滚中... ===" + kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s + echo "=== 查看所使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + echo "=== 回滚完成 ===" + """ + } + } + } + stage('决定镜像') { + steps { + script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ + + if (params.CUSTOM_IMAGE?.trim()) { + echo "检测手输镜像格式: ${params.CUSTOM_IMAGE}" + def customImage = params.CUSTOM_IMAGE.trim() + // 验证镜像格式 + def matcher = (customImage =~ imageRegex) + if (!matcher.matches()) { + error "CUSTOM_IMAGE 格式不正确，必须是 registry/namespace/repository:tag 格式\n" + + "示例: uswccr.ccs.tencentyun.com/go_lessie-sourcing-api:v1.0.0\n" + + "当前输入: ${customImage}" + } + + echo "使用手输镜像: ${customImage}" + env.IMAGE_FULL_NAME = customImage + + } else { + def img = "uswccr.ccs.tencentyun.com/${params.IMAGE_NAME}" + echo "使用 imageTag 插件镜像: ${img}" + env.IMAGE_FULL_NAME = img + } + } + } + } + stage('查询镜像') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "查询镜像: ${IMAGE_FULL_NAME}" + + def result = sh(returnStdout: true, script: """ + /data/sh/get-image-labels-fast.sh \ + "${IMAGE_FULL_NAME}" \ + "100038894437" \ + 'h8H1o6Fd!HLXn' | awk '/^{/,/^}\$/' + """).trim() + + if (result == "" || result == null) { + error("查询镜像 label 失败，请检查镜像是否存在或凭证问题") + } + + echo "镜像 Label:\n${result}" + env.IMAGE_LABEL = result + } + } + } + stage('拉取yaml') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + git branch: "${params.BRANCH_NAME}", + credentialsId: 'fly_gitlab_auth', + url: 'http://172.24.16.20/opt/opt-config.git' + } + } + stage('修改YAML') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def oldImg = sh ( + script: """ + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' 2>/dev/null || echo "无（可能是首次部署）" + """, + returnStdout: true + ).trim() + env.OLD_IMAGE_NAME = oldImg + echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" + echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" + sh """ + sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} + """ + } + } + } + stage('部署k8s') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" + sh """ + echo "===Apply Deployment YAML ===" + kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} + + echo "=== 查看当前新使用的镜像 ===" + kubectl get deployment ${Deployment_name} -n ${K8s_namespace} -o=jsonpath='{.spec.template.spec.containers[*].image}' + + echo "=== 添加注解 ===" + kubectl annotate deployment/${Deployment_name} kubernetes.io/change-cause="${ANNOTATION}" --overwrite -n ${K8s_namespace} + + echo "=== 查看历史版本 ===" + kubectl rollout history deployment/${Deployment_name} -n ${K8s_namespace} + """ + } + } + } + stage('部署情况') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + echo "=== 检测部署状态并验证新版本运行情况 ===" + echo "--- 检查 Deployment 更新状态 ---" + def rolloutStatus = sh( + script: "kubectl rollout status deployment/${Deployment_name} -n ${K8s_namespace} --timeout=60s", + returnStatus: true + ) + + if (rolloutStatus != 0){ + echo "Deployment ${Deployment_name} 发布 **超时或失败**，开始排查..." + sh """ + echo "--- Deployment 状态 ---" + kubectl describe deployment ${Deployment_name} -n ${K8s_namespace} || true + + echo '--- Pod 列表 ---' + kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o wide || true + + echo "--- Pod 描述 (describe) ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- Pod 描述 \$pod --" + kubectl describe pod \$pod -n ${K8s_namespace} || true + done + + echo "--- 最近 200 行 Pod 日志 ---" + for pod in \$(kubectl get pods -n ${K8s_namespace} -l "app=${Pod_container_name},environment=${Pod_environment}" -o jsonpath='{.items[*].metadata.name}'); do + echo "-- logs \$pod --" + kubectl logs \$pod -n ${K8s_namespace} --tail=200 || true + done + """ + error("=== Deployment 发布失败，请检查以上输出定位问题 ===") + } + + echo "=== 检查 Pods 是否全部 Ready ===" + sh "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} -o wide" + + echo "=== 获取最新 Pod 名称 ===" + NEW_POD = sh ( + script: "kubectl get pods -l 'app=${Pod_container_name},environment=${Pod_environment}' -n ${K8s_namespace} --sort-by=.metadata.creationTimestamp -o jsonpath='{.items[-1].metadata.name}'", + returnStdout: true + ).trim() + + echo "=== 新 Pod 启动日志(最近20行) ===" + sh "kubectl logs ${NEW_POD} -n ${K8s_namespace} --tail=20 || true" + + echo "部署成功：${NEW_POD} 已正常运行" + } + } + } + stage('变更说明') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + env.CHANGE_MSG = """ +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} +旧镜像: ${OLD_IMAGE_NAME} +新镜像: ${IMAGE_FULL_NAME} +部署对象: ${Deployment_name} +镜像标签: ${env.IMAGE_LABEL} + """.stripIndent().trim() + echo env.CHANGE_MSG + } + } + } + stage('提交变更') { + when { expression { return params.ROLLBACK_VERSION == false } } + steps { + script { + withCredentials([usernamePassword(credentialsId: 'fly_gitlab_auth', usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) { + sh """ + cd ${WORKSPACE} + git config user.name "jenkins" + git config user.email "jenkins@local" + + # 检查工作树是否有变化 + if ! git diff --exit-code ${Deployment_yaml} > /dev/null 2>&1; then + echo "检测到更改，正在提交..." + git add ${Deployment_yaml} + git commit -m "更新镜像 \${CHANGE_MSG}" + else + echo "${Deployment_yaml} 没有变化, 无需commit" + fi + + # 检查是否需要推送（是否有新的提交） + LOCAL=\$(git rev-parse @) + REMOTE=\$(git rev-parse @{u} 2>/dev/null || true) + BASE=\$(git merge-base @ @{u} 2>/dev/null || true) + + if [ "\$LOCAL" = "\$REMOTE" ]; then + echo "已与远程系统同步更新" + elif [ "\$LOCAL" = "\$BASE" ]; then + echo "需要从远程获取数据" + git pull http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + elif [ "\$REMOTE" = "\$BASE" ]; then + echo "将更改推送到远程服务器..." + # 生成临时 .netrc 文件 + echo "machine 172.24.16.20 login \$GIT_USER password \$GIT_PASS" > ~/.netrc + chmod 600 ~/.netrc + git push http://172.24.16.20/opt/opt-config.git ${params.BRANCH_NAME} + else + echo "与远程模式不同，跳过推送操作" + fi + """ + } + } + } + } + } + + post { + success { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" + } + failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "有步骤失败，请检查！" + } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } + } +} \ No newline at end of file diff --git a/SCM/部署镜像/s3/DM_s3_lessie_agent.groovy b/SCM/部署镜像/s3/DM_s3_lessie_agent.groovy index f5a3e31..7eb807f 100644 --- a/SCM/部署镜像/s3/DM_s3_lessie_agent.groovy +++ b/SCM/部署镜像/s3/DM_s3_lessie_agent.groovy @@ -1,3 +1,13 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + pipeline { agent any @@ -30,6 +40,7 @@ pipeline { ) } environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s3/lessie-agents.yaml" Deployment_name = "s3-lessie-agents" @@ -57,6 +68,15 @@ pipeline { stage('决定镜像') { steps { script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ if (params.CUSTOM_IMAGE?.trim()) { @@ -123,7 +143,7 @@ pipeline { ).trim() env.OLD_IMAGE_NAME = oldImg echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" - echo "--- 所选择新的镜像: ${params.IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" sh """ sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} @@ -135,7 +155,7 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def ANNOTATION = "更新 image 为 ${params.IMAGE_NAME}" + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" sh """ echo "===Apply Deployment YAML ===" kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} @@ -207,11 +227,9 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def user = currentBuild.getBuildCauses()[0].userName ?: "SYSTEM" - def now = sh(script: "date '+%Y-%m-%d %H:%M:%S'", returnStdout: true).trim() env.CHANGE_MSG = """ -jenkins执行人: ${user} -修改时间: ${now} +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} 旧镜像: ${OLD_IMAGE_NAME} 新镜像: ${IMAGE_FULL_NAME} 部署对象: ${Deployment_name} @@ -268,11 +286,61 @@ jenkins执行人: ${user} post { success { - echo "成功！" - echo "=== 所选择镜像: ${params.IMAGE_NAME} ===" + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" } failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) echo "有步骤失败，请检查！" } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } } } \ No newline at end of file diff --git a/SCM/部署镜像/s3/DM_s3_lessie_ai_web.groovy b/SCM/部署镜像/s3/DM_s3_lessie_ai_web.groovy index 87102c0..4f09f88 100644 --- a/SCM/部署镜像/s3/DM_s3_lessie_ai_web.groovy +++ b/SCM/部署镜像/s3/DM_s3_lessie_ai_web.groovy @@ -1,3 +1,13 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + pipeline { agent any @@ -30,9 +40,10 @@ pipeline { ) } environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 - Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/lessie-ai-web.yaml" - Deployment_name = "s1-lessie-ai-web" + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s3/lessie-ai-web.yaml" + Deployment_name = "s3-lessie-ai-web" K8s_namespace = "sit" Pod_container_name = "lessie-ai-web" Pod_environment = "s3" @@ -57,6 +68,15 @@ pipeline { stage('决定镜像') { steps { script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ if (params.CUSTOM_IMAGE?.trim()) { @@ -123,7 +143,7 @@ pipeline { ).trim() env.OLD_IMAGE_NAME = oldImg echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" - echo "--- 所选择新的镜像: ${params.IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" sh """ sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} @@ -135,7 +155,7 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def ANNOTATION = "更新 image 为 ${params.IMAGE_NAME}" + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" sh """ echo "===Apply Deployment YAML ===" kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} @@ -207,11 +227,9 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def user = currentBuild.getBuildCauses()[0].userName ?: "SYSTEM" - def now = sh(script: "date '+%Y-%m-%d %H:%M:%S'", returnStdout: true).trim() env.CHANGE_MSG = """ -jenkins执行人: ${user} -修改时间: ${now} +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} 旧镜像: ${OLD_IMAGE_NAME} 新镜像: ${IMAGE_FULL_NAME} 部署对象: ${Deployment_name} @@ -268,11 +286,61 @@ jenkins执行人: ${user} post { success { - echo "成功！" - echo "=== 所选择镜像: ${params.IMAGE_NAME} ===" + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" } failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) echo "有步骤失败，请检查！" } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } } } \ No newline at end of file diff --git a/SCM/部署镜像/s3/DM_s3_lessie_go_api.groovy b/SCM/部署镜像/s3/DM_s3_lessie_go_api.groovy index efc738e..bf8ea57 100644 --- a/SCM/部署镜像/s3/DM_s3_lessie_go_api.groovy +++ b/SCM/部署镜像/s3/DM_s3_lessie_go_api.groovy @@ -1,3 +1,13 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + pipeline { agent any @@ -30,9 +40,10 @@ pipeline { ) } environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 - Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/lessie-go-api.yaml" - Deployment_name = "s1-lessie-go-api" + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s3/lessie-go-api.yaml" + Deployment_name = "s3-lessie-go-api" K8s_namespace = "sit" Pod_container_name = "lessie-go-api" Pod_environment = "s3" @@ -57,6 +68,15 @@ pipeline { stage('决定镜像') { steps { script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ if (params.CUSTOM_IMAGE?.trim()) { @@ -123,7 +143,7 @@ pipeline { ).trim() env.OLD_IMAGE_NAME = oldImg echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" - echo "--- 所选择新的镜像: ${params.IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" sh """ sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} @@ -135,7 +155,7 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def ANNOTATION = "更新 image 为 ${params.IMAGE_NAME}" + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" sh """ echo "===Apply Deployment YAML ===" kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} @@ -207,11 +227,9 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def user = currentBuild.getBuildCauses()[0].userName ?: "SYSTEM" - def now = sh(script: "date '+%Y-%m-%d %H:%M:%S'", returnStdout: true).trim() env.CHANGE_MSG = """ -jenkins执行人: ${user} -修改时间: ${now} +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} 旧镜像: ${OLD_IMAGE_NAME} 新镜像: ${IMAGE_FULL_NAME} 部署对象: ${Deployment_name} @@ -268,11 +286,61 @@ jenkins执行人: ${user} post { success { - echo "成功！" - echo "=== 所选择镜像: ${params.IMAGE_NAME} ===" + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" } failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) echo "有步骤失败，请检查！" } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } } } \ No newline at end of file diff --git a/SCM/部署镜像/s4/DM_s4_lessie_agent.groovy b/SCM/部署镜像/s4/DM_s4_lessie_agent.groovy index 1896273..9e35280 100644 --- a/SCM/部署镜像/s4/DM_s4_lessie_agent.groovy +++ b/SCM/部署镜像/s4/DM_s4_lessie_agent.groovy @@ -1,3 +1,13 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + pipeline { agent any @@ -30,6 +40,7 @@ pipeline { ) } environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s4/lessie-agents.yaml" Deployment_name = "s4-lessie-agents" @@ -57,6 +68,15 @@ pipeline { stage('决定镜像') { steps { script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ if (params.CUSTOM_IMAGE?.trim()) { @@ -123,7 +143,7 @@ pipeline { ).trim() env.OLD_IMAGE_NAME = oldImg echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" - echo "--- 所选择新的镜像: ${params.IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" sh """ sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} @@ -135,7 +155,7 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def ANNOTATION = "更新 image 为 ${params.IMAGE_NAME}" + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" sh """ echo "===Apply Deployment YAML ===" kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} @@ -207,11 +227,9 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def user = currentBuild.getBuildCauses()[0].userName ?: "SYSTEM" - def now = sh(script: "date '+%Y-%m-%d %H:%M:%S'", returnStdout: true).trim() env.CHANGE_MSG = """ -jenkins执行人: ${user} -修改时间: ${now} +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} 旧镜像: ${OLD_IMAGE_NAME} 新镜像: ${IMAGE_FULL_NAME} 部署对象: ${Deployment_name} @@ -268,11 +286,61 @@ jenkins执行人: ${user} post { success { - echo "成功！" - echo "=== 所选择镜像: ${params.IMAGE_NAME} ===" + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" } failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) echo "有步骤失败，请检查！" } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } } } \ No newline at end of file diff --git a/SCM/部署镜像/s4/DM_s4_lessie_ai_web.groovy b/SCM/部署镜像/s4/DM_s4_lessie_ai_web.groovy index 92cb5a6..2e904f6 100644 --- a/SCM/部署镜像/s4/DM_s4_lessie_ai_web.groovy +++ b/SCM/部署镜像/s4/DM_s4_lessie_ai_web.groovy @@ -1,3 +1,13 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + pipeline { agent any @@ -30,9 +40,10 @@ pipeline { ) } environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 - Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/lessie-ai-web.yaml" - Deployment_name = "s1-lessie-ai-web" + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s4/lessie-ai-web.yaml" + Deployment_name = "s4-lessie-ai-web" K8s_namespace = "sit" Pod_container_name = "lessie-ai-web" Pod_environment = "s4" @@ -57,6 +68,15 @@ pipeline { stage('决定镜像') { steps { script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ if (params.CUSTOM_IMAGE?.trim()) { @@ -123,7 +143,7 @@ pipeline { ).trim() env.OLD_IMAGE_NAME = oldImg echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" - echo "--- 所选择新的镜像: ${params.IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" sh """ sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} @@ -135,7 +155,7 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def ANNOTATION = "更新 image 为 ${params.IMAGE_NAME}" + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" sh """ echo "===Apply Deployment YAML ===" kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} @@ -207,11 +227,9 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def user = currentBuild.getBuildCauses()[0].userName ?: "SYSTEM" - def now = sh(script: "date '+%Y-%m-%d %H:%M:%S'", returnStdout: true).trim() env.CHANGE_MSG = """ -jenkins执行人: ${user} -修改时间: ${now} +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} 旧镜像: ${OLD_IMAGE_NAME} 新镜像: ${IMAGE_FULL_NAME} 部署对象: ${Deployment_name} @@ -268,11 +286,61 @@ jenkins执行人: ${user} post { success { - echo "成功！" - echo "=== 所选择镜像: ${params.IMAGE_NAME} ===" + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" } failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) echo "有步骤失败，请检查！" } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } } } \ No newline at end of file diff --git a/SCM/部署镜像/s4/DM_s4_lessie_go_api.groovy b/SCM/部署镜像/s4/DM_s4_lessie_go_api.groovy index 5e2d6fe..53e7e1e 100644 --- a/SCM/部署镜像/s4/DM_s4_lessie_go_api.groovy +++ b/SCM/部署镜像/s4/DM_s4_lessie_go_api.groovy @@ -1,3 +1,13 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + pipeline { agent any @@ -30,9 +40,10 @@ pipeline { ) } environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 - Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/lessie-go-api.yaml" - Deployment_name = "s1-lessie-go-api" + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s4/lessie-go-api.yaml" + Deployment_name = "s4-lessie-go-api" K8s_namespace = "sit" Pod_container_name = "lessie-go-api" Pod_environment = "s4" @@ -57,6 +68,15 @@ pipeline { stage('决定镜像') { steps { script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ if (params.CUSTOM_IMAGE?.trim()) { @@ -123,7 +143,7 @@ pipeline { ).trim() env.OLD_IMAGE_NAME = oldImg echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" - echo "--- 所选择新的镜像: ${params.IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" sh """ sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} @@ -135,7 +155,7 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def ANNOTATION = "更新 image 为 ${params.IMAGE_NAME}" + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" sh """ echo "===Apply Deployment YAML ===" kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} @@ -207,11 +227,9 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def user = currentBuild.getBuildCauses()[0].userName ?: "SYSTEM" - def now = sh(script: "date '+%Y-%m-%d %H:%M:%S'", returnStdout: true).trim() env.CHANGE_MSG = """ -jenkins执行人: ${user} -修改时间: ${now} +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} 旧镜像: ${OLD_IMAGE_NAME} 新镜像: ${IMAGE_FULL_NAME} 部署对象: ${Deployment_name} @@ -268,11 +286,61 @@ jenkins执行人: ${user} post { success { - echo "成功！" - echo "=== 所选择镜像: ${params.IMAGE_NAME} ===" + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" } failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) echo "有步骤失败，请检查！" } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } } } \ No newline at end of file diff --git a/SCM/部署镜像/s5/DM_s5_lessie_agent.groovy b/SCM/部署镜像/s5/DM_s5_lessie_agent.groovy index 96cbea2..2f4b9fc 100644 --- a/SCM/部署镜像/s5/DM_s5_lessie_agent.groovy +++ b/SCM/部署镜像/s5/DM_s5_lessie_agent.groovy @@ -1,3 +1,13 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + pipeline { agent any @@ -30,6 +40,7 @@ pipeline { ) } environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s5/lessie-agents.yaml" Deployment_name = "s5-lessie-agents" @@ -57,6 +68,15 @@ pipeline { stage('决定镜像') { steps { script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ if (params.CUSTOM_IMAGE?.trim()) { @@ -123,7 +143,7 @@ pipeline { ).trim() env.OLD_IMAGE_NAME = oldImg echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" - echo "--- 所选择新的镜像: ${params.IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" sh """ sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} @@ -135,7 +155,7 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def ANNOTATION = "更新 image 为 ${params.IMAGE_NAME}" + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" sh """ echo "===Apply Deployment YAML ===" kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} @@ -207,11 +227,9 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def user = currentBuild.getBuildCauses()[0].userName ?: "SYSTEM" - def now = sh(script: "date '+%Y-%m-%d %H:%M:%S'", returnStdout: true).trim() env.CHANGE_MSG = """ -jenkins执行人: ${user} -修改时间: ${now} +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} 旧镜像: ${OLD_IMAGE_NAME} 新镜像: ${IMAGE_FULL_NAME} 部署对象: ${Deployment_name} @@ -268,11 +286,61 @@ jenkins执行人: ${user} post { success { - echo "成功！" - echo "=== 所选择镜像: ${params.IMAGE_NAME} ===" + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" } failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) echo "有步骤失败，请检查！" } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } } } \ No newline at end of file diff --git a/SCM/部署镜像/s5/DM_s5_lessie_ai_web.groovy b/SCM/部署镜像/s5/DM_s5_lessie_ai_web.groovy index 5f8927c..35d056f 100644 --- a/SCM/部署镜像/s5/DM_s5_lessie_ai_web.groovy +++ b/SCM/部署镜像/s5/DM_s5_lessie_ai_web.groovy @@ -1,3 +1,13 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + pipeline { agent any @@ -30,9 +40,10 @@ pipeline { ) } environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 - Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/lessie-ai-web.yaml" - Deployment_name = "s1-lessie-ai-web" + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s5/lessie-ai-web.yaml" + Deployment_name = "s5-lessie-ai-web" K8s_namespace = "sit" Pod_container_name = "lessie-ai-web" Pod_environment = "s5" @@ -57,6 +68,15 @@ pipeline { stage('决定镜像') { steps { script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ if (params.CUSTOM_IMAGE?.trim()) { @@ -123,7 +143,7 @@ pipeline { ).trim() env.OLD_IMAGE_NAME = oldImg echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" - echo "--- 所选择新的镜像: ${params.IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" sh """ sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} @@ -135,7 +155,7 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def ANNOTATION = "更新 image 为 ${params.IMAGE_NAME}" + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" sh """ echo "===Apply Deployment YAML ===" kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} @@ -207,11 +227,9 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def user = currentBuild.getBuildCauses()[0].userName ?: "SYSTEM" - def now = sh(script: "date '+%Y-%m-%d %H:%M:%S'", returnStdout: true).trim() env.CHANGE_MSG = """ -jenkins执行人: ${user} -修改时间: ${now} +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} 旧镜像: ${OLD_IMAGE_NAME} 新镜像: ${IMAGE_FULL_NAME} 部署对象: ${Deployment_name} @@ -268,11 +286,61 @@ jenkins执行人: ${user} post { success { - echo "成功！" - echo "=== 所选择镜像: ${params.IMAGE_NAME} ===" + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" } failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) echo "有步骤失败，请检查！" } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } } } \ No newline at end of file diff --git a/SCM/部署镜像/s5/DM_s5_lessie_go_api.groovy b/SCM/部署镜像/s5/DM_s5_lessie_go_api.groovy index 2782083..6b6f4c5 100644 --- a/SCM/部署镜像/s5/DM_s5_lessie_go_api.groovy +++ b/SCM/部署镜像/s5/DM_s5_lessie_go_api.groovy @@ -1,3 +1,13 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + pipeline { agent any @@ -30,9 +40,10 @@ pipeline { ) } environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 - Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/lessie-go-api.yaml" - Deployment_name = "s1-lessie-go-api" + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s5/lessie-go-api.yaml" + Deployment_name = "s5-lessie-go-api" K8s_namespace = "sit" Pod_container_name = "lessie-go-api" Pod_environment = "s5" @@ -57,6 +68,15 @@ pipeline { stage('决定镜像') { steps { script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ if (params.CUSTOM_IMAGE?.trim()) { @@ -123,7 +143,7 @@ pipeline { ).trim() env.OLD_IMAGE_NAME = oldImg echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" - echo "--- 所选择新的镜像: ${params.IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" sh """ sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} @@ -135,7 +155,7 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def ANNOTATION = "更新 image 为 ${params.IMAGE_NAME}" + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" sh """ echo "===Apply Deployment YAML ===" kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} @@ -207,11 +227,9 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def user = currentBuild.getBuildCauses()[0].userName ?: "SYSTEM" - def now = sh(script: "date '+%Y-%m-%d %H:%M:%S'", returnStdout: true).trim() env.CHANGE_MSG = """ -jenkins执行人: ${user} -修改时间: ${now} +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} 旧镜像: ${OLD_IMAGE_NAME} 新镜像: ${IMAGE_FULL_NAME} 部署对象: ${Deployment_name} @@ -268,11 +286,61 @@ jenkins执行人: ${user} post { success { - echo "成功！" - echo "=== 所选择镜像: ${params.IMAGE_NAME} ===" + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" } failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) echo "有步骤失败，请检查！" } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } } } \ No newline at end of file diff --git a/SCM/部署镜像/s6/DM_s6_lessie_agent.groovy b/SCM/部署镜像/s6/DM_s6_lessie_agent.groovy index 0887197..c40874c 100644 --- a/SCM/部署镜像/s6/DM_s6_lessie_agent.groovy +++ b/SCM/部署镜像/s6/DM_s6_lessie_agent.groovy @@ -1,3 +1,13 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + pipeline { agent any @@ -30,6 +40,7 @@ pipeline { ) } environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s6/lessie-agents.yaml" Deployment_name = "s6-lessie-agents" @@ -57,6 +68,15 @@ pipeline { stage('决定镜像') { steps { script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ if (params.CUSTOM_IMAGE?.trim()) { @@ -123,7 +143,7 @@ pipeline { ).trim() env.OLD_IMAGE_NAME = oldImg echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" - echo "--- 所选择新的镜像: ${params.IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" sh """ sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} @@ -135,7 +155,7 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def ANNOTATION = "更新 image 为 ${params.IMAGE_NAME}" + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" sh """ echo "===Apply Deployment YAML ===" kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} @@ -207,11 +227,9 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def user = currentBuild.getBuildCauses()[0].userName ?: "SYSTEM" - def now = sh(script: "date '+%Y-%m-%d %H:%M:%S'", returnStdout: true).trim() env.CHANGE_MSG = """ -jenkins执行人: ${user} -修改时间: ${now} +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} 旧镜像: ${OLD_IMAGE_NAME} 新镜像: ${IMAGE_FULL_NAME} 部署对象: ${Deployment_name} @@ -268,11 +286,61 @@ jenkins执行人: ${user} post { success { - echo "成功！" - echo "=== 所选择镜像: ${params.IMAGE_NAME} ===" + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" } failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) echo "有步骤失败，请检查！" } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } } } \ No newline at end of file diff --git a/SCM/部署镜像/s6/DM_s6_lessie_ai_web.groovy b/SCM/部署镜像/s6/DM_s6_lessie_ai_web.groovy index 78e34b0..b148bf2 100644 --- a/SCM/部署镜像/s6/DM_s6_lessie_ai_web.groovy +++ b/SCM/部署镜像/s6/DM_s6_lessie_ai_web.groovy @@ -1,3 +1,13 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + pipeline { agent any @@ -30,9 +40,10 @@ pipeline { ) } environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 - Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/lessie-ai-web.yaml" - Deployment_name = "s1-lessie-ai-web" + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s6/lessie-ai-web.yaml" + Deployment_name = "s6-lessie-ai-web" K8s_namespace = "sit" Pod_container_name = "lessie-ai-web" Pod_environment = "s6" @@ -57,6 +68,15 @@ pipeline { stage('决定镜像') { steps { script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ if (params.CUSTOM_IMAGE?.trim()) { @@ -123,7 +143,7 @@ pipeline { ).trim() env.OLD_IMAGE_NAME = oldImg echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" - echo "--- 所选择新的镜像: ${params.IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" sh """ sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} @@ -135,7 +155,7 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def ANNOTATION = "更新 image 为 ${params.IMAGE_NAME}" + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" sh """ echo "===Apply Deployment YAML ===" kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} @@ -207,11 +227,9 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def user = currentBuild.getBuildCauses()[0].userName ?: "SYSTEM" - def now = sh(script: "date '+%Y-%m-%d %H:%M:%S'", returnStdout: true).trim() env.CHANGE_MSG = """ -jenkins执行人: ${user} -修改时间: ${now} +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} 旧镜像: ${OLD_IMAGE_NAME} 新镜像: ${IMAGE_FULL_NAME} 部署对象: ${Deployment_name} @@ -268,11 +286,61 @@ jenkins执行人: ${user} post { success { - echo "成功！" - echo "=== 所选择镜像: ${params.IMAGE_NAME} ===" + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" } failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) echo "有步骤失败，请检查！" } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } } } \ No newline at end of file diff --git a/SCM/部署镜像/s6/DM_s6_lessie_go_api.groovy b/SCM/部署镜像/s6/DM_s6_lessie_go_api.groovy index c3fa6c0..ad1915d 100644 --- a/SCM/部署镜像/s6/DM_s6_lessie_go_api.groovy +++ b/SCM/部署镜像/s6/DM_s6_lessie_go_api.groovy @@ -1,3 +1,13 @@ +@NonCPS +def getHiddenParams() { + def results = [:] + def action = currentBuild.rawBuild.getAction(hudson.model.ParametersAction.class) + if (action) { + results.user = action.getParameter("ACTUAL_USER")?.getValue() + } + return results +} + pipeline { agent any @@ -30,9 +40,10 @@ pipeline { ) } environment { + LARK_ROBOT = "4b8d66d0-c0f0-4587-b0e5-cff772cb3046" // 飞书机器人ID，用于发送部署通知 KUBECONFIG = credentials('k8s-test-config-admin') // k8s 凭证 ID, Jenkins 中配置的凭证名称 - Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s1/lessie-go-api.yaml" - Deployment_name = "s1-lessie-go-api" + Deployment_yaml = "${WORKSPACE}/lessie-ai/sit/s6/lessie-go-api.yaml" + Deployment_name = "s6-lessie-go-api" K8s_namespace = "sit" Pod_container_name = "lessie-go-api" Pod_environment = "s6" @@ -57,6 +68,15 @@ pipeline { stage('决定镜像') { steps { script { + // 调用上面的非 CPS 方法，安全拿值 + def hidden = getHiddenParams() + env.ACTUAL_USER = hidden.user ?: (currentBuild.getBuildCauses('hudson.model.Cause$UserIdCause')[0]?.userName ?: "系统触发") + env.ACTUAL_BRANCH = hidden.branch ?: "未知" + echo "触发用户: ${env.ACTUAL_USER}" + + // 当前时间（格式：YYYY-MM-DD HH:MM:SS） + env.currentTime = sh(script: 'date "+%Y-%m-%d %H:%M:%S"', returnStdout: true).trim() + def imageRegex = /^([a-zA-Z0-9.-]+)(:[0-9]+)?\/([a-zA-Z0-9._-]+)\/([a-zA-Z0-9._-]+):([a-zA-Z0-9._-]+)$/ if (params.CUSTOM_IMAGE?.trim()) { @@ -123,7 +143,7 @@ pipeline { ).trim() env.OLD_IMAGE_NAME = oldImg echo "--- 目前正常运行的旧镜像: ${OLD_IMAGE_NAME} ---" - echo "--- 所选择新的镜像: ${params.IMAGE_NAME} ---" + echo "--- 所选择新的镜像: ${env.IMAGE_FULL_NAME} ---" echo "--- 修改 Deployment YAML 中的镜像为新镜像版本 ---" sh """ sed -i 's#image:.*#image: ${IMAGE_FULL_NAME}#' ${Deployment_yaml} @@ -135,7 +155,7 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def ANNOTATION = "更新 image 为 ${params.IMAGE_NAME}" + def ANNOTATION = "更新 image 为 ${IMAGE_FULL_NAME}" sh """ echo "===Apply Deployment YAML ===" kubectl apply -f ${Deployment_yaml} -n ${K8s_namespace} @@ -207,11 +227,9 @@ pipeline { when { expression { return params.ROLLBACK_VERSION == false } } steps { script { - def user = currentBuild.getBuildCauses()[0].userName ?: "SYSTEM" - def now = sh(script: "date '+%Y-%m-%d %H:%M:%S'", returnStdout: true).trim() env.CHANGE_MSG = """ -jenkins执行人: ${user} -修改时间: ${now} +jenkins执行人: ${env.ACTUAL_USER} +修改时间: ${env.currentTime} 旧镜像: ${OLD_IMAGE_NAME} 新镜像: ${IMAGE_FULL_NAME} 部署对象: ${Deployment_name} @@ -268,11 +286,61 @@ jenkins执行人: ${user} post { success { - echo "成功！" - echo "=== 所选择镜像: ${params.IMAGE_NAME} ===" + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署成功", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署成功", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "=== 部署成功，所选择镜像: ${IMAGE_FULL_NAME} ===" } failure { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署失败", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署失败", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) echo "有步骤失败，请检查！" } + aborted { + lark ( + robot: "${LARK_ROBOT}", + type: "CARD", + title: "${Deployment_name}部署取消", + text: [ + "📅 **部署时间**: ${currentTime}", + "📋 **任务名称**: [${JOB_NAME}](${JOB_URL})", + "🔢 **任务编号**: [${BUILD_DISPLAY_NAME}](${BUILD_URL})", + "🌟 **部署状态**: 部署取消", + "⏱️ **部署用时**: ${currentBuild.duration.intdiv(1000)} 秒", + "📦 **部署镜像**: ${env.IMAGE_FULL_NAME}", + "📝 **镜像摘要**: ${env.IMAGE_LABEL}", + "📦 **上次镜像**: ${OLD_IMAGE_NAME}", + "👤 **执行账号**: ${env.ACTUAL_USER}", + ] + ) + echo "部署被中止！" + } } } \ No newline at end of file diff --git a/k8s_yaml/ELK/filebast/02-filebeat-configmap.yaml b/k8s_yaml/ELK/filebast/02-filebeat-configmap.yaml index 6ea96f4..a88dc31 100644 --- a/k8s_yaml/ELK/filebast/02-filebeat-configmap.yaml +++ b/k8s_yaml/ELK/filebast/02-filebeat-configmap.yaml @@ -18,7 +18,7 @@ data: - regexp: kubernetes.namespace: "^(sit|apex-evaluation)$" - regexp: - kubernetes.labels.app: "^(lessie-go-api|apex)$" + kubernetes.labels.app: "^(lessie-go-api|apex|lessie-review-service|lessie-search-service)$" config: - type: filestream id: "container-${data.kubernetes.container.id}" @@ -222,7 +222,7 @@ data: - index: "k8s-%{[kubernetes.labels.environment]}-%{[kubernetes.labels.app]}-%{+yyyy.MM}" when: regexp: - kubernetes.labels.app: "(lessie-go-api|flymoon-admin|flymoon-agent|flymoon-payment|flymoon-email|lessie-agents|apex)" + kubernetes.labels.app: "(lessie-go-api|flymoon-admin|flymoon-agent|flymoon-payment|flymoon-email|lessie-agents|apex|lessie-review-service|lessie-search-service)" - index: "apex-python-%{+yyyy.MM}" when: diff --git a/k8s_yaml/ELK/filebast/filebeat.yaml b/k8s_yaml/ELK/filebast/filebeat.yaml index 52360fe..4e38ef7 100644 --- a/k8s_yaml/ELK/filebast/filebeat.yaml +++ b/k8s_yaml/ELK/filebast/filebeat.yaml @@ -11,7 +11,7 @@ filebeat.autodiscover: - regexp: kubernetes.namespace: "^(sit|apex-evaluation)$" - regexp: - kubernetes.labels.app: "^(lessie-go-api|apex)$" + kubernetes.labels.app: "^(lessie-go-api|apex|lessie-review-service)$" config: - type: filestream id: "container-${data.kubernetes.container.id}" diff --git a/k8s_yaml/config/apex-user/apex-user-kubeconfig.yaml b/k8s_yaml/config/apex-user/apex-user-kubeconfig.yaml index 596c66a..e7a3913 100644 --- a/k8s_yaml/config/apex-user/apex-user-kubeconfig.yaml +++ b/k8s_yaml/config/apex-user/apex-user-kubeconfig.yaml @@ -16,7 +16,7 @@ contexts: namespace: sit user: apex-user name: apex-user-sit # 给上下文起的名字 -current-context: apex-user-apex-evaluation # 默认使用的上下文 +current-context: apex-user-apex-evaluation # 默认使用的上下文 users: - name: apex-user # 给用户起的名字 user: # kubectl get secret apex-user-longtoken -n apex-evaluation -o jsonpath='{.data.token}' | base64 --decode 查看创建的长token diff --git a/k8s_yaml/config/sit-user/sit-user-kubeconfig.yaml b/k8s_yaml/config/sit-user/sit-user-kubeconfig.yaml new file mode 100644 index 0000000..b2dd73b --- /dev/null +++ b/k8s_yaml/config/sit-user/sit-user-kubeconfig.yaml @@ -0,0 +1,19 @@ +apiVersion: v1 +kind: Config +clusters: +- cluster: # kubectl config view --raw -o jsonpath='{.clusters[0].cluster.server}' 获取集群ca + certificate-authority-data: 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 + server: https://10.0.10.125 + name: cls-pl1yhr34 # 给集群起的名字 +contexts: +- context: + cluster: cls-pl1yhr34 + namespace: sit + user: sit-user + name: sit-user-sit # 给上下文起的名字 +current-context: sit-user-sit # 默认使用的上下文 +users: +- name: sit-user # 给用户起的名字 + user: # kubectl get secret sit-user-longtoken -n sit -o jsonpath='{.data.token}' | base64 --decode 查看创建的长token + token: eyJhbGciOiJSUzI1NiIsImtpZCI6IjF5MjNtcUNOVzhsZTlFRUNfQ2NDQ3hjbi1TRV9wS09LYTBzUTA4UU1Yc00ifQ.eyJpc3MiOiJrdWJlcm5ldGVzL3NlcnZpY2VhY2NvdW50Iiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9uYW1lc3BhY2UiOiJzaXQiLCJrdWJlcm5ldGVzLmlvL3NlcnZpY2VhY2NvdW50L3NlY3JldC5uYW1lIjoic2l0LXVzZXItbG9uZ3Rva2VuIiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZXJ2aWNlLWFjY291bnQubmFtZSI6InNpdC11c2VyIiwia3ViZXJuZXRlcy5pby9zZXJ2aWNlYWNjb3VudC9zZXJ2aWNlLWFjY291bnQudWlkIjoiMzQ3OWQ5ZGYtYmRiYS00YmIxLTgyM2MtMTA0NjE0MTViZjI5Iiwic3ViIjoic3lzdGVtOnNlcnZpY2VhY2NvdW50OnNpdDpzaXQtdXNlciJ9.hFvvz9PjsKygYbMhzba0p4MUyPpSgjcAvv1ZByyx9z4-q_oXGDhfBLOv9dDvwxWqQfuyWNsoo7TKnKENipSnDcZvy7-0c3jMlhIB2DycjirlFcBFgABROckR2E0N3I1X0qF0QWS_jMGxpEZNFxbCaRbvkvcEKwfs5rJV6SCsNvho-_yS1_du_-YO5YqjfAcoHKomigP4BToNw7aSuqUJt4kdDNOwARe_Rfz46h2ETzxrKVL9MMk_VrPexQvkcJEUTgoE2H_JjhgMzTm3_xqmcSPLc_lKvfn5vKxO753UwkYYR5_2NTsZxrotadqq-BmUH5l5RcKjCWl0w_8L9yRprg + diff --git a/k8s_yaml/config/sit-user/sit-user-longtoken.yaml b/k8s_yaml/config/sit-user/sit-user-longtoken.yaml new file mode 100644 index 0000000..ed418fb --- /dev/null +++ b/k8s_yaml/config/sit-user/sit-user-longtoken.yaml @@ -0,0 +1,16 @@ +apiVersion: v1 +kind: Secret +metadata: + name: sit-user-longtoken + namespace: sit + annotations: + kubernetes.io/service-account.name: sit-user +type: kubernetes.io/service-account-token + + +# 创建完成后： +# kubectl get secret sit-user-longtoken -n sit -o yaml + +# kubectl get secret apex-user-longtoken -n apex-evaluation -o yaml + +# kubectl get secret sit-user-longtoken -n sit -o jsonpath='{.data.token}' | base64 --decode diff --git a/k8s_yaml/config/sit-user/sit-user-rbac-sit.yaml b/k8s_yaml/config/sit-user/sit-user-rbac-sit.yaml new file mode 100644 index 0000000..ccd8eb3 --- /dev/null +++ b/k8s_yaml/config/sit-user/sit-user-rbac-sit.yaml @@ -0,0 +1,37 @@ +# 1、创建 ServiceAccount（放在 sit 命名空间） +apiVersion: v1 +kind: ServiceAccount +metadata: + name: sit-user + namespace: sit # 明确 ServiceAccount 所在的命名空间（必填） +--- + +# 2、为 sit 命名空间创建 Role +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: sit-user-role + namespace: sit +rules: +- apiGroups: ["", "apps", "extensions", "batch", "networking.k8s.io"] + resources: ["pods", "pods/log", "pods/exec", "statefulsets", "deployments", "daemonsets", "services", "configmaps", "secrets", "events", "replicasets"] + verbs: ["get", "list", "watch", "create", "update", "patch", "delete"] +- apiGroups: ["metrics.k8s.io"] + resources: ["pods","nodes"] + verbs: ["get","list","watch"] + +--- +# 3、将 apex-evaluation 命名空间的 Role 绑定到 ServiceAccount +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: sit-user-binding + namespace: sit +subjects: +- kind: ServiceAccount + name: sit-user + namespace: sit +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: sit-user-role