#可定制镜像
FROM jenkins/jenkins:lts
RUN jenkins-plugin-cli --plugins kubernetes workflow-aggregator git configuration-as-code

#helm 安装
helm repo add jenkinsci https://charts.jenkins.io/
helm pull jenkinsci/jenkins --version 3.3.18

controller:
  componentName: "jenkins-controller"
  image: "jenkinsci/blueocean"
  tag: "1.24.7"
  imagePullPolicy: "Always"
  adminSecret: true
adminUser: "admin"

adminPassword: "admin"
servicePort: 8080

targetPort: 8080

serviceType: ClusterIP
healthProbes: true

probes:

startupProbe:

httpGet:

path: '{{ default "" .Values.controller.jenkinsUriPrefix }}/login'

port: http

periodSeconds: 10

timeoutSeconds: 5

failureThreshold: 12

livenessProbe:

failureThreshold: 5

httpGet:

path: '{{ default "" .Values.controller.jenkinsUriPrefix }}/login'

port: http

periodSeconds: 10

timeoutSeconds: 5

readinessProbe:

failureThreshold: 3

httpGet:

path: '{{ default "" .Values.controller.jenkinsUriPrefix }}/login'

port: http

periodSeconds: 10

timeoutSeconds: 5

agentListenerServiceType: "ClusterIP"
installPlugins:

- kubernetes:1.29.4

- workflow-aggregator:2.6

- git:4.7.1

- configuration-as-code:1.51
initializeOnce: true
ingress:

enabled: true

paths:

- backend:

service:

name: jenkins

port:

number: 8080

path: "/"

pathType: Prefix

apiVersion: "networking.k8s.io/v1s"

kubernetes.io/ingress.class: nginx
hostName: jenkins.itlansonli.com
tls:
- secretName: itlansonli.com
  hosts:
    - jenkins.itlansonli.com

prometheus:

enabled: true

scrapeInterval: 60s

scrapeEndpoint: /prometheus
agent:

enabled: true

workspaceVolume:

type: PVC

claimName: jenkins-workspace-pvc

readOnly: false
additionalAgents:

maven:

podName: maven

customJenkinsLabels: maven

image: jenkins/jnlp-agent-maven
persistence:

enabled: true

storageClass: "rook-ceph-block"

accessMode: "ReadWriteOnce"

size: "8Gi"

 openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout tls.key -out tls.cert -subj "/CN=.itlansonli.com/O=.itlansonli.com"

kubectl create ns devops

kubectl create secret tls itlansonli.com --key tls.key --cert tls.cert -n devops

helm install -f values.yaml -f override.yaml jenkins ./ -n devops

1. Get your 'admin' user password by running:

kubectl exec --namespace devops -it svc/jenkins -c jenkins -- /bin/cat /run/secrets/chart-admin-password && echo



Visit http://jenkins.itlansonli.com


Login with the password from step 1 and the username: admin


Configure security realm and authorization strategy


Use Jenkins Configuration as Code by specifying configScripts in your values.yaml file, see documentation: http://jenkins.itlansonli.com/configuration-as-code and examples: https://github.com/jenkinsci/configuration-as-code-plugin/tree/master/demos


For more information on running Jenkins on Kubernetes, visit:

https://cloud.google.com/solutions/jenkins-on-container-engine
For more information about Jenkins Configuration as Code, visit:

https://jenkins.io/projects/jcasc/
NOTE: Consider using a custom image with pre-installed plugins

#创建证书，或者使用以前的证书

openssl req -x509 -nodes -days 365 -newkey rsa:2048 -keyout tls.key -out tls.crt -subj "/CN=.itlansonli.com/O=.itlansonli.com"

apiVersion: apps/v1

kind: StatefulSet

metadata:

name: jenkins

namespace: devops

spec:

selector:

matchLabels:

app: jenkins # has to match .spec.template.metadata.labels

serviceName: "jenkins"

replicas: 1

template:

metadata:

labels:

app: jenkins # has to match .spec.selector.matchLabels

spec:

serviceAccountName: "jenkins"

terminationGracePeriodSeconds: 10

containers:

- name: jenkins

image: jenkinsci/blueocean:1.24.7

securityContext:

runAsUser: 0                      #设置以ROOT用户运行容器

privileged: true                  #拥有特权

ports:

- containerPort: 8080

name: web

- name: jnlp                        #jenkins slave与集群的通信口

containerPort: 50000

resources:

limits:

memory: 2Gi

cpu: "2000m"

requests:

memory: 700Mi

cpu: "500m"

env:

- name: LIMITS_MEMORY

valueFrom:

resourceFieldRef:

resource: limits.memory

divisor: 1Mi

- name: "JAVA_OPTS" #设置变量，指定时区和 jenkins slave 执行者设置

value: "

-Xmx$(LIMITS_MEMORY)m

-XshowSettings:vm

-Dhudson.slaves.NodeProvisioner.initialDelay=0

-Dhudson.slaves.NodeProvisioner.MARGIN=50

-Dhudson.slaves.NodeProvisioner.MARGIN0=0.75

-Duser.timezone=Asia/Shanghai

"

volumeMounts:

- name: home

mountPath: /var/jenkins_home

volumeClaimTemplates:


metadata:

name: home

spec:

accessModes: [ "ReadWriteOnce" ]

storageClassName: "rook-ceph-block"

resources:

requests:

storage: 5Gi


apiVersion: v1

kind: Service

metadata:

name: jenkins

namespace: devops

spec:

selector:

app: jenkins

type: ClusterIP

ports:

name: web

port: 8080

targetPort: 8080

protocol: TCP
name: jnlp

port: 50000

targetPort: 50000

protocol: TCP


apiVersion: networking.k8s.io/v1

kind: Ingress

metadata:

name: jenkins

namespace: devops

spec:

tls:

hosts:

jenkins.itlansonli.com

secretName: itlansonli.com

rules:


host: jenkins.itlansonli.com

http:

paths:

path: /

pathType: Prefix

backend:

service:

name: jenkins

port:

number: 8080




apiVersion: v1

kind: ServiceAccount

metadata:

name: jenkins

namespace: devops

apiVersion: rbac.authorization.k8s.io/v1

kind: ClusterRole

metadata:

name: jenkins

rules:

apiGroups: ["extensions", "apps"]

resources: ["deployments"]

verbs: ["create", "delete", "get", "list", "watch", "patch", "update"]
apiGroups: [""]

resources: ["services"]

verbs: ["create", "delete", "get", "list", "watch", "patch", "update"]
apiGroups: [""]

resources: ["pods"]

verbs: ["create","delete","get","list","patch","update","watch"]
apiGroups: [""]

resources: ["pods/exec"]

verbs: ["create","delete","get","list","patch","update","watch"]
apiGroups: [""]

resources: ["pods/log"]

verbs: ["get","list","watch"]
apiGroups: [""]

resources: ["secrets"]

verbs: ["get"]


apiVersion: rbac.authorization.k8s.io/v1

kind: ClusterRoleBinding

metadata:

name: jenkins

roleRef:

kind: ClusterRole

name: jenkins

apiGroup: rbac.authorization.k8s.io

subjects:

kind: ServiceAccount

name: jenkins

namespace: devops

- kubernetes
docker

#以上插件可能无法下载，可以手动去jenkins-plugins下载并上传.

kubectl cp /root/other/kubernetes-client-api.hpi devops/jenkins-0:/var/jenkins_home/plugins/

#配置镜像源

https://updates.jenkins.io/update-center.json   默认的

http://updates.jenkins-ci.org/update-center.json

#或者国内源

https://mirrors.tuna.tsinghua.edu.cn/jenkins/updates/update-center.json

pipeline {
    agent {
      label 'maven-jnlp-slave'
    }
stages {
    stage('Hello') {
        steps {
            echo 'Hello World'
        }
    }
}

}

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
name: maven-jar-pvc
namespace: devops
labels:
  app: maven-jar-pvc
spec:
storageClassName: rook-cephfs
accessModes:
- ReadWriteMany
resources:
requests:
storage: 5Gi

<?xml version="1.0" encoding="UTF-8"?>
<settings xmlns="http://maven.apache.org/SETTINGS/1.0.0"

xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"

xsi:schemaLocation="http://maven.apache.org/SETTINGS/1.0.0 http://maven.apache.org/xsd/settings-1.0.0.xsd">

<!-- 这个目录是被maven打包机使用pvc挂载出去的

-->

<localRepository>/root/maven/.m2</localRepository>
<pluginGroups>
</pluginGroups>
<proxies>
</proxies>
<servers>
</servers>
<mirrors>

<mirror>

<id>nexus-aliyun</id>

<mirrorOf>central</mirrorOf>

<name>Nexus aliyun</name>

<url>http://maven.aliyun.com/nexus/content/groups/public</url>

</mirror>

</mirrors>

<profiles>

<profile>

<id>jdk-1.8</id>

<activation>

<activeByDefault>true</activeByDefault>

<jdk>1.8</jdk>

</activation>

<properties>

<maven.compiler.source>1.8</maven.compiler.source>

<maven.compiler.target>1.8</maven.compiler.target>

<maven.compiler.compilerVersion>1.8</maven.compiler.compilerVersion>

</properties>

</profile>

</profiles>

</settings>

apiVersion: v1

kind: PersistentVolumeClaim

metadata:

name: maven-jar-pvc

namespace: devops

labels:

app: maven-jar-pvc

spec:

storageClassName: rook-cephfs

accessModes:


ReadWriteMany

resources:

requests:

storage: 5Gi

apiVersion: v1
kind: PersistentVolumeClaim
metadata:
    name: npm-modules-pvc
    namespace: devops
    labels:
       app: npm-modules-pvc
spec:
    storageClassName: rook-cephfs
    accessModes:
    - ReadWriteMany
    resources:
       requests:
         storage: 5Gi

pipeline {
    //无代理，各阶段声明自己的代理
    agent none
    stages {
        stage('检查nodejs打包机') {
            //使用nodejs代理
            agent {
                label 'nodejs'
            }
            steps {
                echo "nodejs版本："
                sh 'node -v'
                echo "npm modules目录位置"
                sh 'npm config ls -l | grep prefix'
                echo "检查完成..."
            }
        }
    stage('检查maven打包机') {
        //使用nodejs代理
        agent {
            label 'maven'
        }
        steps {
            echo "maven版本："
            sh 'mvn -v'
            echo "maven配置文件"
            sh 'cat /app/maven/settings.xml'

            echo "maven目录位置信息"
            sh 'ls -al /app/maven/'
        }
    }
    stage('检查docker打包机') {
        //使用nodejs代理
        agent {
            label 'docker'
        }
        steps {
            echo "docker版本："
            sh 'docker version'
            sh 'docker images'
        }
    }

    stage('检查kubectl打包机') {
        //使用nodejs代理
        agent {
            label 'kubectl'
        }
        steps {
            echo "kubectl版本："
            sh ' kubectl version'
            echo "kubectl操作集群: 所有Pod"
            sh 'kubectl get pods'

            echo "kubectl操作集群: 所有nodes"
            sh 'kubectl get nodes'
        }
    }
}

}

#这个也得有

FROM openjdk:8-jre-alpine

LABEL maintainer="xxxxx@qq.com"

#复制打好的jar包

COPY target/*.jar /app.jar

RUN  apk add -U tzdata; 

ln -sf /usr/share/zoneinfo/Asia/Shanghai /etc/localtime; 

echo 'Asia/Shanghai' >/etc/timezone; 

touch /app.jar;

ENV JAVA_OPTS=""

ENV PARAMS=""
EXPOSE 8080
ENTRYPOINT [ "sh", "-c", "java -Djava.security.egd=file:/dev/./urandom JAVA_OPTS -jar /app.jar PARAMS" ]

FROM mysql:5.7

所有在 /docker-entrypoint-initdb.d 下的sql，数据库会自己初始化
COPY mall.sql /docker-entrypoint-initdb.d