Kubernetes SpringCloud持续集成 - 安装jenkins、配置模板pod（一）

古城微笑少年丶 2022-12-09 15:58 263阅读 0赞

# 1 k8s环境概述 #

192.168.38.50   master
    192.168.38.51   node1
    192.168.38.52   node2
    192.168.38.100  harbor/nfs

# 2 PV/PVC #

#创建命名空间
    kubectl create namespace jenkins-k8s

## 2.1 创建PV ##

vim jenkins-pv.yaml
     
    apiVersion: v1
    kind: PersistentVolume
    metadata:
      name: jenkins-pv
    spec:
      capacity:
        storage: 10Gi
      accessModes:
        - ReadWriteMany
      nfs:
        path: /usr/local/kubernetes/volumes/jenkins
        server: 192.168.38.100
    
    #应用
    kubectl apply -f jenkins-pv.yaml

![在这里插入图片描述][20200923010852659.png_pic_center]

## 2.2 创建PVC ##

vim jenkins-pvc.yaml
    
    kind: PersistentVolumeClaim
    apiVersion: v1
    metadata:
      name: jenkins-pvc
      namespace: jenkins-k8s
    spec:
      resources:
        requests:
          storage: 10Gi
      accessModes:
        - ReadWriteMany
    
    #应用
    kubectl apply -f jenkins-pvc.yaml

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center]

# 3 ServiceAccount #

#创建一个sa账号
    kubectl create sa jenkins-k8s-sa -n jenkins-k8s
    #授权，kubectl create clusterrolebinding 名称、名称空间、绑定clusterrole=cluster-admin 
    kubectl create clusterrolebinding jenkins-k8s-sa-cluster -n jenkins-k8s --clusterrole=cluster-admin --serviceaccount=jenkins-k8s:jenkins-k8s-sa

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 1]

# 4 整合Jenkins #

## 4.1 下载镜像 ##

#node1、node2
    docker pull jenkins/jenkins:latest
    cnych/jenkins:jnlp6

## 4.2 jenkins-deployment.yaml ##

vim jenkins-deployment.yaml
    
    apiVersion: apps/v1
    kind: Deployment
    metadata:
      name: jenkins
      namespace: jenkins-k8s
    spec:
      replicas: 1
      selector:
        matchLabels:
          app: jenkins
      template:
        metadata:
          labels:
            app: jenkins
        spec:
          serviceAccountName: jenkins-k8s-sa
          containers:
            - name: jenkins
              image: jenkins/jenkins:latest
              imagePullPolicy: IfNotPresent
              ports:
                - containerPort: 8080
                  name: web
                  protocol: TCP
                - containerPort: 50000
                  name: agent
                  protocol: TCP
              resources:
                limits:
                  cpu: 1000m
                  memory: 1Gi
                requests:
                  cpu: 500m
                  memory: 500Mi
              livenessProbe:
                httpGet:
                  port: 8080
                  path: /login
                initialDelaySeconds: 60
                timeoutSeconds: 5
                failureThreshold: 12
              readinessProbe:
                httpGet:
                  port: 8080
                  path: /login
                initialDelaySeconds: 60
              volumeMounts:
                - mountPath: /var/jenkins_home
                  name: jenkins-volume
                  subPath: jenkins-home
          volumes:
            - name: jenkins-volume
              persistentVolumeClaim:
                claimName: jenkins-pvc
    
    #应用
    kubectl apply -f jenkins-deployment.yaml
    #查看
    kubectl get pod -n jenkins-k8s
    #验证
    kubectl get pod -o wide -n jenkins-k8s
    curl 10.244.2.23:8080

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 2]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 3]

## 4.3 jenkins-svc.yaml ##

#创建
    vim jenkins-svc.yaml
    
    apiVersion: v1
    kind: Service
    metadata:
      name: jenkins-service
      namespace: jenkins-k8s
      labels:
        app: jenkins
    spec:
      selector:
        app: jenkins
      type: ClusterIP
      ports:
        - port: 8080
          name: web
          targetPort: web
        - name: agent
          port: 50000
          targetPort: agent
     
    #应用
    kubectl apply -f jenkins-svc.yaml
    #查看
    kubectl get svc -n jenkins-k8s

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 4]

## 4.4 jenkins-ingress.yaml ##

vim jenkins-ingress.yaml
    
    apiVersion: networking.k8s.io/v1beta1
    kind: Ingress
    metadata:
      name: jenkins
      namespace: jenkins-k8s
    spec:
      rules:
        - host: rosh.jenkins.com
          http:
            paths:
              - backend:
                  serviceName: jenkins-service
                  servicePort: 8080
                  
    #应用
    kubectl apply -f jenkins-ingress.yaml
    #查看
    kubectl get ingress -n jenkins-k8s

![在这里插入图片描述][20200923011151591.png_pic_center]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 5]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 6]

# 5 Jenkins 初始化 #

## 5.1 初始化密码 ##

#查看挂载日志,记录初始化密码，填入初始化页面
    84f98993d6594792b7e420c74934eb89

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 7]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 8]

## 5.2 初始化插件 ##

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 9]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 10]

## 5.3 初始化用户 ##

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 11]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 12]

# 6 中文插件 #

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 13]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 14]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 15]

# 7 配置模板pod #

Jenkins 的 kubernetes-plugin 在执行构建时会在 kubernetes 集群中自动创建一个 Pod，并在 Pod 内部创建一个名为 jnlp 的容器，该容器会连接 Jenkins 并运行 Agent 程序，形成一个 Jenkins 的 Master 和 Slave 架构，然后 Slave 会执行构建脚本进行构建。

## 7.1 安装插件 ##

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 16]

## 7.2 配置pod模板 ##

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 17]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 18]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 19]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 20]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 21]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 22]

## 7.3 测试 ##

创建pipeline项目：

node('test-rosh')  { 
    
         stage('拉取代码') { 
            echo "拉取代码完成"
        }
    
        stage('制作镜像,上传harbor'){ 
            
            echo "制作镜像 完成"
        }
    
        stage('代码审查'){ 
            echo "代码审查 完成"
        }
     
       stage('远程部署'){ 
          echo "远程部署 完成"
        }      
    }

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 23]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 24]

[20200923010852659.png_pic_center]: /images/20221123/2fa3dc207ff444dbae027f45afffca5f.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center]: /images/20221123/c5d3031c9fbf4c458a2938139b341202.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 1]: /images/20221123/4ed67068e8114201a36de661188efcf3.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 2]: /images/20221123/867ff55ce5d542c99fc53638e23848ba.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 3]: /images/20221123/472124c1ba1c46c690e860677c048244.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 4]: /images/20221123/d8533ae120e547809f404ad82d24cfa0.png
[20200923011151591.png_pic_center]: /images/20221123/08c413081a134caaa3505b670192e272.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 5]: /images/20221123/237feb9c20cf4e37828456e92e9e3d24.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 6]: /images/20221123/232fffd617ce489b83380b4c909f3a2c.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 7]: /images/20221123/6035b05c03ee4972b08278db5c2bdb0a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 8]: /images/20221123/e45e1a59f5d24e6585a5ae528657330a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 9]: /images/20221123/f400fb5c1fe149dfa9c1574b4f01bd3f.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 10]: /images/20221123/bd87b11b20f749c89bc88b9911c779fb.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 11]: /images/20221123/f3a4a5e7c5324cadba2de7eef266c727.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 12]: /images/20221123/2765000d8c004edb9fce8352d54f6e3a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 13]: /images/20221123/cf371d62897a4de19e1371ea7607d95e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 14]: /images/20221123/e15909170b3f465498f9ed08a9f52b94.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 15]: /images/20221123/bd1f0f7b9628418f94053be81d52aa8f.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 16]: /images/20221123/9647ece7ea424686a22a11ff6c7e51ae.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 17]: /images/20221123/49cdc73de3ed4daaa796c8fe1a2cbc09.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 18]: /images/20221123/965a306d23da4682b7eb1bf7580d9c3b.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 19]: /images/20221123/6901b160c8af40fe8945920097738ee5.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 20]: /images/20221123/fea0a693ac0e482695e0a806fcf4651f.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 21]: /images/20221123/d217f70fdcfd41749dc200bca17a4545.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 22]: /images/20221123/386a7d0935f04d59a7796163258a3465.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 23]: /images/20221123/abdfb045dda143d6b757ed6c3a7c1a5b.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3FxXzM0MTI1OTk5_size_16_color_FFFFFF_t_70_pic_center 24]: /images/20221123/d7fdb3209f1f42a7900dd1696f5ef4b7.png