想开发个网站,网上代写文章一般多少钱,腾冲网站建设的公司,叮当app制作文章目录 构建带maven环境的jenkins 镜像安装jenkinsjenkins yaml 文件安装插件jenkins 配置k8s创建用户凭证 构建带maven环境的jenkins 镜像
# 构建带 maven 环境的 jenkins 镜像
docker build -t 192.168.113.122:8858/library/jenkins-maven:jdk-11 .# 登录 harbor
docker … 文章目录 构建带maven环境的jenkins 镜像安装jenkinsjenkins yaml 文件安装插件jenkins 配置k8s创建用户凭证 构建带maven环境的jenkins 镜像
# 构建带 maven 环境的 jenkins 镜像
docker build -t 192.168.113.122:8858/library/jenkins-maven:jdk-11 .# 登录 harbor
docker login -uadmin 192.168.113.122:8858# 推送镜像到 harbor
docker push 192.168.113.122:8858/library/jenkins-maven:jdk-11ps: docker build -t 108.1.1.1:8858/wolfcode/jenkin-maven:v1 .# 查看images
[rootkubeadm-master1 jenkins-maven]# docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
108.1.1.1:8858/wolfcode/jenkin-maven v1 33bdff943baf About a minute ago 783MB# 推送到harbor
[rootkubeadm-master1 jenkins-maven]# docker login 108.1.1.12:8858
Authenticating with existing credentials...
WARNING! Your password will be stored unencrypted in /root/.docker/config.json.
Configure a credential helper to remove this warning. See
https://docs.docker.com/engine/reference/commandline/login/#credentials-storeLogin Succeeded
[rootkubeadm-master1 jenkins-maven]# docker push 108.1.1.12:8858/wolfcode/jenkin-maven:v1安装jenkins
创建pvc,pv
[rootkubeadm-master2 jenkins]# cat pv.yaml
apiVersion: v1
kind: PersistentVolume
metadata:name: pv6
spec:capacity:storage: 5GiaccessModes:- ReadWriteManystorageClassName: managed-nfs-storage6persistentVolumeReclaimPolicy: Retainnfs:path: /root/data/pv6server: 192.168.1.209
[rootkubeadm-master2 jenkins]# cat pvc.yaml
apiVersion: v1
kind: PersistentVolumeClaim
metadata:name: jenkins-data6namespace: kube-devops
spec:accessModes:- ReadWriteManystorageClassName: managed-nfs-storage6resources:requests:storage: 5Gi# 进入 jenkins 目录安装 jenkins
kubectl apply -f manifests/# 查看是否运行成功
kubectl get po -n kube-devops# 查看 service 端口通过浏览器访问
kubectl get svc -n kube-devops# 查看容器日志获取默认密码
kubectl logs -f pod名称 -n kube-devops[rootkubeadm-master2 jenkins]# kubectl logs -f jenkins-7c558dd78b-bsp9x -n kube-devops
里面写了密码jenkins yaml 文件 [rootkubeadm-master2 manifests]# cat jenkins-configmap.yaml
apiVersion: v1
kind: ConfigMap
metadata:name: mvn-settingsnamespace: kube-devopslabels:app: jenkins-server
data:settings.xml: |-?xml version1.0 encodingUTF-8?settings xmlnshttp://maven.apache.org/SETTINGS/1.0.0xmlns:xsihttp://www.w3.org/2001/XMLSchema-instancexsi:schemaLocationhttp://maven.apache.org/SETTINGS/1.0.0 http://maven.apache.org/xsd/settings-1.0.0.xsdlocalRepository/var/jenkins_home/repository/localRepositoryserversserveridreleases/idusernameadmin/usernamepasswordwolfcode/password/serverserveridsnapshots/idusernameadmin/usernamepasswordwolfcode/password/server/serversmirrorsmirroridreleases/idnamenexus maven/namemirrorOf*/mirrorOfurlhttp://192.168.113.121:8868/repository/maven-public//url/mirror/mirrorspluginGroupspluginGrouporg.sonarsource.scanner.maven/pluginGroup/pluginGroupsprofilesprofileidreleases/idactivationactiveByDefaulttrue/activeByDefaultjdk1.8/jdk/activationpropertiessonar.host.urlhttp://sonarqube:9000/sonar.host.url/propertiesrepositoriesrepositoryidrepository/idnameNexus Repository/nameurlhttp://192.168.113.121:8868/repository/maven-public//urlreleasesenabletrue/enable/releasessnapshotsenabletrue/enable/snapshots/repository/repositories/profile/profiles/settings
[rootkubeadm-master2 manifests]# cat jenkins-
jenkins-configmap.yaml jenkins-deployment.yaml jenkins-pvc.yaml jenkins-serviceAccount.yaml jenkins-service.yaml
[rootkubeadm-master2 manifests]# cat jenkins-deployment.yaml
apiVersion: apps/v1
kind: Deployment
metadata:name: jenkinsnamespace: kube-devops
spec:replicas: 1selector:matchLabels:app: jenkins-servertemplate:metadata:labels:app: jenkins-serverspec:serviceAccountName: jenkins-adminimagePullSecrets:- name: harbor-secret # harbor 访问 secretcontainers:- name: jenkinsimage: 192.168.113.122:8858/library/jenkins-maven:jdk-11imagePullPolicy: IfNotPresentsecurityContext:privileged: truerunAsUser: 0 # 使用 root 用户运行容器resources:limits:memory: 2Gicpu: 1000mrequests:memory: 500Micpu: 500mports:- name: httpportcontainerPort: 8080- name: jnlpportcontainerPort: 50000livenessProbe:httpGet:path: /loginport: 8080initialDelaySeconds: 90periodSeconds: 10timeoutSeconds: 5failureThreshold: 5readinessProbe:httpGet:path: /loginport: 8080initialDelaySeconds: 60periodSeconds: 10timeoutSeconds: 5failureThreshold: 3volumeMounts:- name: jenkins-datamountPath: /var/jenkins_home- name: dockermountPath: /run/docker.sock- name: docker-homemountPath: /usr/bin/docker- name: mvn-settingmountPath: /usr/local/apache-maven-3.9.0/conf/settings.xmlsubPath: settings.xml- name: daemonmountPath: /etc/docker/daemon.jsonsubPath: daemon.json- name: kubectlmountPath: /usr/bin/kubectlvolumes:- name: kubectlhostPath:path: /usr/bin/kubectl- name: jenkins-datapersistentVolumeClaim:claimName: jenkins-pvc- name: dockerhostPath:path: /run/docker.sock # 将主机的 docker 映射到容器中- name: docker-homehostPath:path: /usr/bin/docker- name: mvn-settingconfigMap:name: mvn-settingsitems:- key: settings.xmlpath: settings.xml- name: daemonhostPath:path: /etc/docker/
[rootkubeadm-master2 manifests]# cat jenkins-service.yaml
apiVersion: v1
kind: Service
metadata:name: jenkins-servicenamespace: kube-devopsannotations:prometheus.io/scrape: trueprometheus.io/path: /prometheus.io/port: 8080
spec:selector:app: jenkins-servertype: NodePortports:- port: 8080targetPort: 8080
[rootkubeadm-master2 manifests]# cat jenkins-
jenkins-configmap.yaml jenkins-deployment.yaml jenkins-pvc.yaml jenkins-serviceAccount.yaml jenkins-service.yaml
[rootkubeadm-master2 manifests]# cat jenkins-serviceAccount.yaml
apiVersion: v1
kind: ServiceAccount
metadata:name: jenkins-adminnamespace: kube-devops
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:name: jenkins-admin
roleRef:apiGroup: rbac.authorization.k8s.iokind: ClusterRolename: cluster-admin
subjects:
- kind: ServiceAccountname: jenkins-adminnamespace: kube-devops
安装插件
Build Authorization Token Root
Gitlab
SonarQube Scanner
代码质量审查工具在 Dashboard 系统管理 Configure System 下面配置 SonarQube serversNamesonarqube # 注意这个名字要在 Jenkinsfile 中用到
Server URLhttp://sonarqube:9000
Server authentication token创建 credentials 配置为从 sonarqube 中得到的 token进入系统管理 全局工具配置 SonarQube Scanner Add SonarQube Scanner
Namesonarqube-scanner
自动安装取消勾选
SONAR_RUNNER_HOME/usr/local/sonar-scanner-cliNode and Label parameter
Kubernetesjenkins k8s 环境配置进入 Dashboard 系统管理 节点管理 Configure Clouds 页面配置 k8s 集群
名称kubernetes
点击 Kubernetes Cloud details 继续配置
Kubernetes 地址如果 jenkins 是运行在 k8s 容器中直接配置服务名即可https://kubernetes.default如果 jenkins 部署在外部那么则不仅要配置外部访问 ip 以及 apiserver 的端口6443还需要配置服务证书
Jenkins 地址如果部署在 k8s 集群内部http://jenkins-service.kube-devops如果在外部http://192.168.113.120:32479换成你们自己的配置完成后保存即可Config File ProviderGit Parameterjenkins 配置k8s https://kubernetes.default
添加标签
创建用户凭证
系统管理 安全 Manage Credentials System 全局凭据unrestricted Add Credentials范围全局
用户名root
密码wolfcode
IDgitlab-user-pass
