# 安装Jenkins
[root@fgedu-jenkins ~]# wget -O /etc/yum.repos.d/jenkins.repo https://pkg.jenkins.io/redhat-stable/jenkins.repo
[root@fgedu-jenkins ~]# rpm –import https://pkg.jenkins.io/redhat-stable/jenkins.io.key
[root@fgedu-jenkins ~]# yum install -y jenkins java-17-openjdk
[root@fgedu-jenkins ~]# systemctl enable jenkins –now

# 查看初始密码
[root@fgedu-jenkins ~]# cat /var/lib/jenkins/secrets/initialAdminPassword
abc123def456ghi789jkl012mno345pqr

# 配置Jenkins
[root@fgedu-jenkins ~]# cat > /etc/sysconfig/jenkins << 'EOF' JENKINS_HOME="/var/lib/jenkins" JENKINS_USER="jenkins" JENKINS_PORT="8080" JENKINS_ARGS="--webroot=/var/cache/jenkins/war --httpPort=$JENKINS_PORT" EOF # 安装必要插件 # 在Jenkins Web界面安装: Git, Pipeline, Docker, Kubernetes # 创建Pipeline项目 [root@fgedu-jenkins ~]# cat > /var/lib/jenkins/jobs/fgedu-app/config.xml << 'EOF'

FGEDU应用CI/CD流水线




http://git.fgedu.net.cn/fgedu/app.git




*/main



Jenkinsfile


EOF

# 创建Jenkinsfile
[root@fgedu-jenkins ~]# cat > /var/lib/jenkins/Jenkinsfile << 'EOF' pipeline { agent any environment { DOCKER_REGISTRY = '192.168.1.100:30002' IMAGE_NAME = 'fgedu/app' KUBE_NAMESPACE = 'fgedu-prod' } stages { stage('Checkout') { steps { checkout scm echo "代码检出完成" } } stage('Build') { steps { sh ''' echo "构建应用..." mvn clean package -DskipTests ''' } } stage('Test') { steps { sh ''' echo "运行测试..." mvn test ''' } post { always { junit '**/target/surefire-reports/*.xml' } } } stage('Docker Build') { steps { sh ''' echo "构建Docker镜像..." docker build -t ${DOCKER_REGISTRY}/${IMAGE_NAME}:${BUILD_NUMBER} . docker tag ${DOCKER_REGISTRY}/${IMAGE_NAME}:${BUILD_NUMBER} ${DOCKER_REGISTRY}/${IMAGE_NAME}:latest ''' } } stage('Docker Push') { steps { withCredentials([usernamePassword(credentialsId: 'harbor-credentials', usernameVariable: 'DOCKER_USER', passwordVariable: 'DOCKER_PASS')]) { sh ''' docker login -u ${DOCKER_USER} -p ${DOCKER_PASS} ${DOCKER_REGISTRY} docker push ${DOCKER_REGISTRY}/${IMAGE_NAME}:${BUILD_NUMBER} docker push ${DOCKER_REGISTRY}/${IMAGE_NAME}:latest ''' } } } stage('Deploy to K8s') { steps { sh ''' echo "部署到Kubernetes..." kubectl set image deployment/fgedu-app fgedu-app=${DOCKER_REGISTRY}/${IMAGE_NAME}:${BUILD_NUMBER} -n ${KUBE_NAMESPACE} kubectl rollout status deployment/fgedu-app -n ${KUBE_NAMESPACE} ''' } } } post { success { echo "部署成功!" mail to: 'devops@fgedu.net.cn', subject: "部署成功: ${env.JOB_NAME} #${env.BUILD_NUMBER}", body: "部署成功，请查看: ${env.BUILD_URL}" } failure { echo "部署失败!" mail to: 'devops@fgedu.net.cn', subject: "部署失败: ${env.JOB_NAME} #${env.BUILD_NUMBER}", body: "部署失败，请检查: ${env.BUILD_URL}" } } } EOF

# 创建测试脚本
[root@fgedu-jenkins ~]# cat > /var/lib/jenkins/scripts/integration-test.sh << 'EOF' #!/bin/bash # integration-test.sh # from:www.itpux.com.qq113257174.wx:itpux-com # web: http://www.fgedu.net.cn APP_URL="http://fgedu-app.fgedu-prod.svc.cluster.local:8080" TIMEOUT=60 echo "=== 集成测试开始 ===" # 等待服务就绪 echo "等待服务启动..." for i in $(seq 1 $TIMEOUT); do if curl -s -o /dev/null -w "%{http_code}" $APP_URL/health | grep -q "200"; then echo "服务已就绪" break fi sleep 1 done # 执行API测试 echo "执行API测试..." # 测试用户API response=$(curl -s -o /dev/null -w "%{http_code}" $APP_URL/api/users) if [ "$response" == "200" ]; then echo "用户API测试通过" else echo "用户API测试失败: HTTP $response" exit 1 fi # 测试健康检查 response=$(curl -s $APP_URL/health) if echo "$response" | grep -q "OK"; then echo "健康检查测试通过" else echo "健康检查测试失败" exit 1 fi echo "=== 集成测试完成 ===" EOF [root@fgedu-jenkins ~]# chmod +x /var/lib/jenkins/scripts/integration-test.sh

# 创建回滚脚本
[root@fgedu-jenkins ~]# cat > /var/lib/jenkins/scripts/rollback.sh << 'EOF' #!/bin/bash # rollback.sh # from:www.itpux.com.qq113257174.wx:itpux-com # web: http://www.fgedu.net.cn NAMESPACE="fgedu-prod" DEPLOYMENT="fgedu-app" echo "=== 部署回滚 ===" # 查看历史版本 echo "可用的历史版本:" kubectl rollout history deployment/$DEPLOYMENT -n $NAMESPACE # 获取上一个版本 PREVIOUS_REVISION=$(kubectl rollout history deployment/$DEPLOYMENT -n $NAMESPACE | tail -2 | head -1 | awk '{print $1}') echo "" echo "即将回滚到版本: $PREVIOUS_REVISION" read -p "确认回滚? (y/n): " confirm if [ "$confirm" == "y" ]; then echo "执行回滚..." kubectl rollout undo deployment/$DEPLOYMENT -n $NAMESPACE echo "等待回滚完成..." kubectl rollout status deployment/$DEPLOYMENT -n $NAMESPAC学习交流加群风哥微信: itpux-comE echo "回滚完成!" else echo "取消回滚" fi EOF [root@fgedu-jenkins ~]# chmod +x /var/lib/jenkins/scripts/rollback.sh # 查看部署历史 [root@fgedu-jenkins ~]# kubectl rollout history deployment/fgedu-app -n fgedu-prod deployment.apps/fgedu-app REVISION CHANGE-CAUSE 1
2 kubectl set image deployment/fgedu-app fgedu-app=192.168.1.100:30002/fgedu/app:10
3 kubectl set image deployment/fgedu-app fgedu-app=192.168.1.100:30002/fgedu/app:11

# 执行回滚
[root@fgedu-jenkins ~]# kubectl rollout undo deployment/fgedu-app -n fgedu-prod
deployment.apps/fgedu-app rolled back