kubernetes集群jenkins安裝檔案
專案請參與github專案
https://github.com/JustCoWorker/kubernetes-cicd
1.jenkins 鏡像構建
1.1cat Dockerfile
FROM jenkins/jenkins:lts
USER root
ARG dockerGid=978
WORKDIR /usr/local
#RUN wget http://80.68.250.216/pub/apache/maven/maven-3/3.3.9/binaries/apache-maven-3.3.9-bin.tar.gz
COPY apache-maven-3.3.9-bin.tar.gz ./
RUN tar xzvf apache-maven-3.3.9-bin.tar.gzls
RUN cp -R apache-maven-3.3.9 /usr/local/bin
RUN export PATH=apache-maven-3.3.9/bin:$PATH
RUN export PATH=/usr/local/bin/apache-maven-3.3.9/bin:$PATH
RUN ln -s /usr/local/bin/apache-maven-3.3.9/bin/mvn /usr/local/bin/mvn
#RUN ls -l /usr/local/bin
RUN echo $PATH
RUN echo "docker:x:${dockerGid}:jenkins" >> /etc/group \
USER jenkins
1.2構建鏡像
git clone https://github.com/JustCoWorker/kubernetes-cicd.git
cd /usr/local/kubernetes-cicd/jenkins
docker build -t harbor.demo.com/private/demo-jenkins:lts .
docker push harbor.demo.com/private/demo-jenkins:lts
2.部署jenkins
2.1CentOS7 安裝NFS
下載軟體
yum install -y nfs-utils
新建掛在檔案夾
mkdir -p /usr/local/nfs
修改檔案夾權限
chmod a+rw /usr/local/nfs
配置NFS服務目錄
vi /etc/exports
/usr/local/nfs *(rw,sync,no_subtree_check,no_root_squash)
rpcbind和nfs做開機啟動
systemctl enable rpcbind.service
systemctl enable nfs-server.service
啟動服務
systemctl start rpcbind.service
systemctl start nfs-server.service
查看共享狀態
showmount -e
showmount -e 192.168.1.157
2.2部署jenkins
namespace-ci.yml
apiVersion: v1
kind: Namespace
metadata:
name: ci
pv.yml
apiVersion: v1
kind: PersistentVolume
metadata:
name: jenkins
namespace: ci
spec:
capacity:
storage: 50Gi
accessModes:
- ReadWriteMany
persistentVolumeReclaimPolicy: Retain
nfs:
path: /usr/local/nfs
server: 127.0.0.1
jenkins.yml
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
name: jenkins
namespace: ci
spec:
accessModes:
- ReadWriteMany
resources:
requests:
storage: 50Gi
---
apiVersion: v1
kind: ServiceAccount
metadata:
name: jenkins
namespace: ci
---
apiVersion: rbac.authorization.k8s.io/v1beta1
kind: ClusterRoleBinding
metadata:
name: jenkins
roleRef:
apiGroup: rbac.authorization.k8s.io
kind: ClusterRole
name: cluster-admin
subjects:
- kind: ServiceAccount
name: jenkins
namespace: ci
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
name: jenkins
namespace: ci
spec:
replicas: 1
template:
metadata:
labels:
k8s-app: jenkins
spec:
serviceAccount: jenkins
containers:
- name: jenkins
image: harbor.demo.com/private/demo-jenkins:lts
imagePullPolicy: IfNotPresent
volumeMounts:
- mountPath: /var/jenkins_home
name: home
volumes:
- name: home
persistentVolumeClaim:
claimName: jenkins
---
apiVersion: v1
kind: Service
metadata:
name: jenkins-svc
namespace: ci
spec:
ports:
- port: 8077
targetPort: 8080
name: web
- port: 50000
targetPort: 50000
name: slave
selector:
k8s-app: jenkins
type: LoadBalancer
ingress 檔案 jenkins-ingress.yaml
#ingress
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
name: jenkins-ingress
namespace: ci
annotations:
nginx.ingress.kubernetes.io/ssl-redirect: "true"
nginx.ingress.kubernetes.io/rewrite-target: /
nginx.ingress.kubernetes.io/secure-backends: "true"
spec:
rules:
- host: jenkins.demo.com
http:
paths:
- path: /
backend:
serviceName: jenkins-svc
servicePort: 8077
部署
cd jenkins-yml/
kubectl create -f namespace-ci.yml
kubectl create -f pv.yml
kubectl create -f jenkins.yml
kubectl create -f jenkins-ingress.yaml
3.Jenkins 訪問并安裝插件
修改host檔案，講域名決議到157 訪問 http://jenkins.demo.com/
安裝默認插件速度較慢，更換國內地址
cd /usr/local/nfs/updates
cp default.json default_back.json
$ sed -i 's/http:\/\/updates.jenkins-ci.org\/download/https:\/\/mirrors.tuna.tsinghua.edu.cn\/jenkins/g' default.json && sed -i 's/http:\/\/www.google.com/https:\/\/www.baidu.com/g' default.json
4.jenkins 插件安裝
需要安裝插件串列
1.kubernetes->配置k8s配置
2.Extended Choice Parameter ->引數化構建
3.Git Parameter->git 獲取tag
4.Kubernetes Continuous Deploy->k8s部署
5.Parameterized Remote Trigger Configuration ->遠程觸發構建
6.user build vars->獲取用戶引數
7.SSHAgent->git 提交時使用
8.permissive script security ->健康檢查腳本
9.Pipeline Utility Steps ->獲取版本號
本文由博客群發一文多發等運營工具平臺 OpenWrite 發布
轉載請註明出處，本文鏈接：https://www.uj5u.com/houduan/199992.html
標籤：Java