jenkins Redeploy Rancher2.x Workload插件实现CI/CD

喜欢ヅ旅行 2023-02-19 10:24 12阅读 0赞

# 一、概述 #

在上一篇文章，链接如下：

[https://www.cnblogs.com/xiao987334176/p/13074198.html][https_www.cnblogs.com_xiao987334176_p_13074198.html]

已经实现了基于Jenkins+Gitlab+Harbor+Rancher+k8s CI/CD，但是有一个问题，需要jenkins ssh登录到k8s master节点执行kubectl修改镜像地址。

但是由于安全问题，不允许jenkins  ssh登录到k8s master节点。这个时候，可以通过Redeploy Rancher2.x Workload插件来完成修改镜像地址。

这样就避免了ssh登录问题。

# 二、Rancher创建api key #

这个是给Jenkins来使用的。

点击用户右上角-->API & Keys

![format_png][]

添加key

![format_png 1][]

输入描述，选择永不过期，这里不指定作用范围。

请根据实际情况来原则

![format_png 2][]

创建成功后，一定要保存。它只会显示一次

![format_png 3][]

对于Redeploy Rancher2.x Workload Plugin而言，它只需要用到2个参数。

API访问地址:
    https://10.212.82.86/v3
    
    Bearer Token:
    token-96p7n:d8sw4vlff68kqspcwnflbwpptt565c5cszltwbhgb4wcz9w6k5fxmj

下面会重点介绍

# 三、jenkins配置 #

## 插件安装 ##

### Redeploy Rancher2.x Workload ###

**这个插件是专门针对Rancher2.x版本的**，1.x版本的插件为Rancher

![format_png 4][]

## Environment Injector ##

这个插件是用来修改jenkins 环境变量用的。

![format_png 5][]

## 添加凭据 ##

点击凭据

![format_png 6][]

点击进去

![format_png 7][]

再点击

![format_png 8][]

添加凭据

![format_png 9][]

类型选择rancher2.x API Keys

![format_png 10][]

说明：

ID：  这个是唯一的，随便填写。

描述： 随便填写

Endpoint：Rancher api地址，上面Rancher api keys里面的信息

Trust certification：信任证书，这里一定要勾选。

Bearer Token：不记名token，，上面Rancher api keys里面的信息

填写完成后，点击Test Connection按钮，出现Connect Succeed!，表示连接成功。

最后点击保存。

## 新建job ##

名称为：test\_admin\_rancher，选择自由风格。

![format_png 11][]

通用配置

![format_png 12][]

参数化构建

![format_png 13][]

源码管理

![format_png 14][]

执行shell脚本

![format_png 15][]

完整代码如下：

export HARBOR_PROJECT='10.212.82.86:1180/java/admin-master'
    
    case $Status  in
      Deploy)
        echo "Status:$Status"
        cd ${WORKSPACE}
        mvn -f pom.xml clean package
        cp dockerfile target
        cd target
        docker build -t ${HARBOR_PROJECT}:${BUILD_NUMBER} .
        docker push ${HARBOR_PROJECT}:${BUILD_NUMBER}
        docker rmi ${HARBOR_PROJECT}:${BUILD_NUMBER}
        echo "BUILD_ID=${BUILD_NUMBER}" > ${WORKSPACE}/env.txt
        echo "Completing!"
        ;;
      Rollback)
          echo "Status:$Status"
          echo "Version:${BUILD_ID}"
          echo "BUILD_ID=${BUILD_ID}" > ${WORKSPACE}/env.txt
          ;;
      *)
      exit
          ;;
    esac

这里有2个步骤，分别是发布和回滚。在最后一步时，写入了一个env.txt，它就是用来修改jenkins环境的。

注入环境变量

![format_png 16][]

写入路径 $\{WORKSPACE\}/env.txt

![format_png 17][]

重新部署Rancher2.x工作负载

![format_png 18][]

内容如下：

![format_png 19][]

说明：

第一行显示乱码的，就是上面jenkins创建的凭证

Workload API Path：工作api路径，注意：必须是以/project开头的。先来登录Rancher后台，查看工作负载

先找到我需要发布的应用admin-master-->api查看

![format_png 20][]

跳转的url为：

https://10.212.82.86/v3/project/c-l5nxb:p-dghs7/workloads/statefulset:default:admin-master

![format_png 21][]

那么Workload API Path的值，就是：以/project/开头，一直到后面部分。也就是上面我截图显示的。

Always Pull Image：这里表示总是拉取镜像

Update Images：更新的镜像地址。10.212.82.86:1180/java/admin-master:$\{BUILD\_ID\}，注意：这里有一个变量BUILD\_ID。发布和回滚时，都会用到此变量。

表示镜像的版本！

最后点击保存

![format_png 22][]

# 四、测试发布和回滚 #

## 发布 ##

先来看目录运行的镜像版本，显示是32

![format_png 23][]

登录jenkins，发布一下。

点击Build with Parameters

![format_png 24][]

点击开始构建

![format_png 25][]

查看控制台输出：

+ export HARBOR_PROJECT=10.212.82.86:1180/java/admin-master
    + HARBOR_PROJECT=10.212.82.86:1180/java/admin-master
    + case $Status in
    + echo Status:Deploy
    Status:Deploy
    + cd /var/lib/jenkins/workspace/test_admin_rancher
    + mvn -f pom.xml clean package
    ...
    + echo BUILD_ID=1
    + echo 'Completing!'
    Completing!
    [EnvInject] - Injecting environment variables from a build step.
    [EnvInject] - Injecting as environment variables the properties file path '/var/lib/jenkins/workspace/test_admin_rancher/env.txt'
    [EnvInject] - Variables injected successfully.
    set image tag from "10.212.82.86:1180/java/admin-master:32" to "10.212.82.86:1180/java/admin-master:1"
    redeploy Rancher2.x workload succeed!
    Finished: SUCCESS

可以看到镜像更新为：10.212.82.86:1180/java/admin-master:1

登录jenkins服务器，查看环境变量文件

# cat /var/lib/jenkins/workspace/test_admin_rancher/env.txt
    BUILD_ID=1

**注意：此文件定义的环境会覆盖jenkins的环境变量，因此镜像版本为1。**

刷新Rancher页面，发现地址已经更改过来了。

![format_png 26][]

## 回滚 ##

假设我需要回滚版本到32，请确保harbor仓库中，此镜像存在。

选择回滚，输入32

![format_png 27][]

查看控制台输出：

+ export HARBOR_PROJECT=10.212.82.86:1180/java/admin-master
    + HARBOR_PROJECT=10.212.82.86:1180/java/admin-master
    + case $Status in
    + echo Status:Rollback
    Status:Rollback
    + echo Version:32
    Version:32
    + echo BUILD_ID=32
    [EnvInject] - Injecting environment variables from a build step.
    [EnvInject] - Injecting as environment variables the properties file path '/var/lib/jenkins/workspace/test_admin_rancher/env.txt'
    [EnvInject] - Variables injected successfully.
    set image tag from "10.212.82.86:1180/java/admin-master:1" to "10.212.82.86:1180/java/admin-master:32"
    redeploy Rancher2.x workload succeed!
    Finished: SUCCESS

可以看到镜像更新为：10.212.82.86:1180/java/admin-master:32

登录jenkins服务器，查看环境变量文件

# cat /var/lib/jenkins/workspace/test_admin_rancher/env.txt
    BUILD_ID=32

**注意：此文件定义的环境会覆盖jenkins的环境变量，因此镜像版本为32。**

刷新Rancher页面，发现地址已经更改过来了。

![format_png 28][]

## 总结 ##

通过jenkins Redeploy Rancher2.x Workload插件，调用Rancher api，修改镜像地址，完成了应用服务的发布和回滚。

在上篇文章中，用到了Pipeline。但是这篇文章中，用的是自由风格。

其实我也想用Pipeline，但是我不知道如何在Pipeline中调用Redeploy Rancher2.x Workload插件，所以只能用自由风格了。

[https_www.cnblogs.com_xiao987334176_p_13074198.html]: https://www.cnblogs.com/xiao987334176/p/13074198.html
[format_png]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTEwMzEwODk3NC05MDQyNjY2MjEucG5n?x-oss-process=image/format,png
[format_png 1]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTEwMzIxNTY4My04NDU0NDE5MzkucG5n?x-oss-process=image/format,png
[format_png 2]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTEwMzI1NjA3MS0xNzg2MTI0MTg5LnBuZw?x-oss-process=image/format,png
[format_png 3]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTEwMzQyNzMyOS0xNzE0MDQ1NTgyLnBuZw?x-oss-process=image/format,png
[format_png 4]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTEwMjU0NTY3MS0xNDgzNTkwMTk0LnBuZw?x-oss-process=image/format,png
[format_png 5]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTEzNTE1MzM3Mi0xMjA0MDM3NjMucG5n?x-oss-process=image/format,png
[format_png 6]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTEwMzcxMzUyNy03Njg5NTk4MTQucG5n?x-oss-process=image/format,png
[format_png 7]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTEwMzc0NjU0Mi0zNzAxNDMyNzEucG5n?x-oss-process=image/format,png
[format_png 8]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTEwMzgwODAwMC04MDM5OTg4MTgucG5n?x-oss-process=image/format,png
[format_png 9]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTEwMzgzOTMyMy01NjI0OTQ3OTkucG5n?x-oss-process=image/format,png
[format_png 10]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTEwNDAyODY0Ni0xNTA0NTg2MjY3LnBuZw?x-oss-process=image/format,png
[format_png 11]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTEzNTUxODU5NC04MTY1NDc3MDAucG5n?x-oss-process=image/format,png
[format_png 12]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTEzNTg0MzY4NS01OTg2MTgzNzIucG5n?x-oss-process=image/format,png
[format_png 13]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTEzNTg1OTMxMi0xOTQ5NjU4NTIucG5n?x-oss-process=image/format,png
[format_png 14]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTEzNTkxMzgxMS0yMTIzMjg5MDAyLnBuZw?x-oss-process=image/format,png
[format_png 15]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTEzNTk0MjkxMS0xMTUzMzExNDk4LnBuZw?x-oss-process=image/format,png
[format_png 16]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTE0MDQxMTg0NS01MTI0NTAzNTQucG5n?x-oss-process=image/format,png
[format_png 17]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTE0MDUwODIwNS01MTQ1MzgzMjEucG5n?x-oss-process=image/format,png
[format_png 18]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTE0MDU0NDE3NC00ODY1NDc1MzUucG5n?x-oss-process=image/format,png
[format_png 19]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTE0MDcyMjU0MS0xMzU3NDE1MjUzLnBuZw?x-oss-process=image/format,png
[format_png 20]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTE0MTI0MTczNS0xMDAyMTAxMjE4LnBuZw?x-oss-process=image/format,png
[format_png 21]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTE0MTMzNDkyMy0xOTE3MTYwMzk3LnBuZw?x-oss-process=image/format,png
[format_png 22]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTE0MTY0MjY0Mi05Mzk2NjUyMDYucG5n?x-oss-process=image/format,png
[format_png 23]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTE0MTg1NDY5MS00MDcxMTQyMDUucG5n?x-oss-process=image/format,png
[format_png 24]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTE0MTkzNTUzOC0xNzg0MzY3ODExLnBuZw?x-oss-process=image/format,png
[format_png 25]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTE0MTk0OTM5Ni02OTg1NTUwMTQucG5n?x-oss-process=image/format,png
[format_png 26]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTE0MjM1ODYxNS0xNjEwMDI0MTExLnBuZw?x-oss-process=image/format,png
[format_png 27]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTE0Mjc1MzI3Ny01MjY2OTkxNzQucG5n?x-oss-process=image/format,png
[format_png 28]: http://imgconvert.csdnimg.cn/aHR0cHM6Ly9pbWcyMDIwLmNuYmxvZ3MuY29tL2Jsb2cvMTM0MTA5MC8yMDIwMDYvMTM0MTA5MC0yMDIwMDYxOTE0Mjk0ODk5OS0xMDY4Mzg0ODQ5LnBuZw?x-oss-process=image/format,png