def serviceModules = [ 'gateway', 'auth', 'iam', 'firstleg', 'order', 'warehouse', 'file', 'print', 'integration-service', 'event-bridge-service', 'audit-service' ] def serviceJars = [ 'gateway': 'gateway/target/gateway-1.0.0-SNAPSHOT.jar', 'auth': 'auth/target/auth-service-1.0.0-SNAPSHOT.jar', 'iam': 'iam/target/iam-service-1.0.0-SNAPSHOT.jar', 'firstleg': 'firstleg/target/firstleg-service-1.0.0-SNAPSHOT.jar', 'order': 'order/target/order-service-1.0.0-SNAPSHOT.jar', 'warehouse': 'warehouse/target/warehouse-service-1.0.0-SNAPSHOT.jar', 'file': 'file/target/file-service-1.0.0-SNAPSHOT.jar', 'print': 'print/target/print-service-1.0.0-SNAPSHOT.jar', 'integration-service': 'integration-service/target/integration-service-1.0.0-SNAPSHOT.jar', 'event-bridge-service': 'event-bridge-service/target/event-bridge-service-1.0.0-SNAPSHOT.jar', 'audit-service': 'audit-service/target/audit-service-1.0.0-SNAPSHOT.jar' ] def serviceCheckboxes = [ 'gateway': 'SERVICE_GATEWAY', 'auth': 'SERVICE_AUTH', 'iam': 'SERVICE_IAM', 'firstleg': 'SERVICE_FIRSTLEG', 'order': 'SERVICE_ORDER', 'warehouse': 'SERVICE_WAREHOUSE', 'file': 'SERVICE_FILE', 'print': 'SERVICE_PRINT', 'integration-service': 'SERVICE_INTEGRATION', 'event-bridge-service': 'SERVICE_EVENT_BRIDGE', 'audit-service': 'SERVICE_AUDIT' ] def commonPaths = [ 'pom.xml', 'platform-bom/', 'common-core/', 'common-web/', 'common-security/', 'common-openapi/', 'common-audit/', 'common-event-contract/', 'Jenkinsfile', 'deploy/' ] pipeline { // 测试阶段使用当前任意可用节点，避免因节点未配置 docker-java17 标签而一直排队。 // 正式环境配置好专用构建节点后，可恢复为：agent { label 'docker-java17' } agent any tools { maven 'maven-3.8.8' } options { disableConcurrentBuilds() timestamps() buildDiscarder(logRotator(numToKeepStr: '30')) } parameters { choice(name: 'BUILD_MODE', choices: ['AUTO', 'SELECT', 'ALL'], description: 'AUTO 按 Git 变更识别；SELECT 勾选服务；ALL 构建全部服务') booleanParam(name: 'SERVICE_GATEWAY', defaultValue: false, description: 'Gateway 网关服务（gateway）') booleanParam(name: 'SERVICE_AUTH', defaultValue: false, description: '统一认证服务（auth）') booleanParam(name: 'SERVICE_IAM', defaultValue: false, description: '租户与权限服务（iam）') booleanParam(name: 'SERVICE_FIRSTLEG', defaultValue: false, description: '头程履约服务（firstleg）') booleanParam(name: 'SERVICE_ORDER', defaultValue: false, description: '订单服务（order）') booleanParam(name: 'SERVICE_WAREHOUSE', defaultValue: false, description: '仓库与往来单位服务（warehouse）') booleanParam(name: 'SERVICE_FILE', defaultValue: false, description: '文件中心（file）') booleanParam(name: 'SERVICE_PRINT', defaultValue: false, description: '打印服务（print）') booleanParam(name: 'SERVICE_INTEGRATION', defaultValue: false, description: '第三方集成服务（integration-service）') booleanParam(name: 'SERVICE_EVENT_BRIDGE', defaultValue: false, description: '跨区域事件桥（event-bridge-service）') booleanParam(name: 'SERVICE_AUDIT', defaultValue: false, description: '审计服务（audit-service）') choice(name: 'ENVIRONMENT', choices: ['test', 'staging', 'production'], description: '部署环境') booleanParam(name: 'DEPLOY', defaultValue: false, description: '构建成功后是否部署') booleanParam(name: 'SKIP_TESTS', defaultValue: false, description: '是否跳过测试；生产构建不建议勾选') string(name: 'IMAGE_REPOSITORY', defaultValue: '8.163.30.128:10082/java-project/baiyue-firstleg', description: '预发布/生产镜像仓库地址；test 环境自动使用本机镜像，无需修改') string(name: 'DOCKER_BASE_IMAGE', defaultValue: 'docker.m.daocloud.io/library/eclipse-temurin:17-jre-alpine', description: 'Java 17 基础镜像；默认使用国内镜像代理') } environment { REGISTRY_CREDENTIALS = 'gitea-test-token' MAVEN_SETTINGS = 'deploy/maven/settings-cn.xml' MAVEN_OPTS = '-Dfile.encoding=UTF-8 -Dmaven.wagon.http.retryHandler.count=3' } stages { stage('确定构建范围') { steps { script { String requestedRepository if (params.ENVIRONMENT == 'test') { requestedRepository = 'baiyue-firstleg-test' echo '测试环境使用 Jenkins 节点本机镜像，不登录、不推送远程 Registry' } else { requestedRepository = params.IMAGE_REPOSITORY?.trim() if (!requestedRepository || requestedRepository == 'registry.example.com/your-group/baiyue-firstleg') { error('预发布/生产环境必须填写真实的 HTTPS 镜像仓库地址') } if (requestedRepository.contains('://') || !requestedRepository.contains('/')) { error('IMAGE_REPOSITORY 格式错误：请填写 host[:port]/owner/image，不要包含 http:// 或 https://') } } env.RESOLVED_IMAGE_REPOSITORY = requestedRepository List selected = [] if (params.BUILD_MODE == 'ALL') { selected = serviceModules } else if (params.BUILD_MODE == 'SELECT') { selected = serviceModules.findAll { service -> params[serviceCheckboxes[service]] == true } if (!selected) { error('SELECT 模式至少需要勾选一个服务') } } else { String base = env.GIT_PREVIOUS_SUCCESSFUL_COMMIT?.trim() if (!base || sh(script: "git cat-file -e ${base}^{commit} 2>/dev/null", returnStatus: true) != 0) { selected = serviceModules } else { List changed = sh(script: "git diff --name-only ${base} HEAD", returnStdout: true) .trim().split('\\n').collect { it.trim() }.findAll { it } boolean commonChanged = changed.any { path -> commonPaths.any { prefix -> path == prefix || path.startsWith(prefix) } } selected = commonChanged ? serviceModules : serviceModules.findAll { module -> changed.any { it == module || it.startsWith("${module}/") } } } } List invalid = selected.findAll { !serviceModules.contains(it) } if (invalid) { error("未知服务: ${invalid.join(', ')}；允许值: ${serviceModules.join(', ')}") } selected = selected.unique() if (!selected) { currentBuild.description = '没有需要构建的业务服务' env.NO_SERVICE_CHANGE = 'true' env.SELECTED_SERVICES = '' } else { env.NO_SERVICE_CHANGE = 'false' env.SELECTED_SERVICES = selected.join(',') env.IMAGE_TAG = sh(script: 'git rev-parse --short=12 HEAD', returnStdout: true).trim() currentBuild.description = "${env.SELECTED_SERVICES} | ${env.IMAGE_TAG}" echo "本次构建服务: ${env.SELECTED_SERVICES}" } } } } stage('Maven 测试与打包') { when { expression { env.NO_SERVICE_CHANGE != 'true' } } steps { script { String testOption = params.SKIP_TESTS ? '-DskipTests' : '' sh "mvn --settings ${env.MAVEN_SETTINGS} --batch-mode --errors --fail-at-end -pl ${env.SELECTED_SERVICES} -am clean package ${testOption}" } } post { always { junit allowEmptyResults: true, testResults: '**/target/surefire-reports/TEST-*.xml' } } } stage('构建镜像并按环境发布') { when { expression { env.NO_SERVICE_CHANGE != 'true' } } steps { script { env.SELECTED_SERVICES.split(',').each { service -> String image = "${env.RESOLVED_IMAGE_REPOSITORY}/${service}:${env.IMAGE_TAG}" String contextDir = ".docker-context/${service}" sh "mkdir -p '${contextDir}' && cp -f '${serviceJars[service]}' '${contextDir}/app.jar'" sh "docker build -f deploy/docker/Dockerfile --build-arg BASE_IMAGE=${params.DOCKER_BASE_IMAGE} --build-arg JAR_FILE=app.jar -t ${image} '${contextDir}'" } if (params.ENVIRONMENT == 'test') { echo "测试镜像已保存在当前 Docker 节点：${env.RESOLVED_IMAGE_REPOSITORY}/*:${env.IMAGE_TAG}" } else { String registryHost = env.RESOLVED_IMAGE_REPOSITORY.tokenize('/')[0] withCredentials([usernamePassword(credentialsId: env.REGISTRY_CREDENTIALS, usernameVariable: 'REGISTRY_USER', passwordVariable: 'REGISTRY_PASSWORD')]) { sh 'printf %s "$REGISTRY_PASSWORD" | docker login -u "$REGISTRY_USER" --password-stdin "' + registryHost + '"' env.SELECTED_SERVICES.split(',').each { service -> String image = "${env.RESOLVED_IMAGE_REPOSITORY}/${service}:${env.IMAGE_TAG}" sh "docker push ${image}" } sh "docker logout ${registryHost} || true" } } } } } stage('生产环境部署确认（仅 production 执行）') { when { allOf { expression { params.DEPLOY && params.ENVIRONMENT == 'production' && env.NO_SERVICE_CHANGE != 'true' } } } steps { input message: "确认将 ${env.SELECTED_SERVICES} 的镜像 ${env.IMAGE_TAG} 部署到生产环境？", ok: '确认部署' } } stage('部署') { when { allOf { expression { params.DEPLOY && env.NO_SERVICE_CHANGE != 'true' } } } steps { script { String credentialId = "firstleg-${params.ENVIRONMENT}-env" withCredentials([file(credentialsId: credentialId, variable: 'DEPLOY_ENV_FILE')]) { sh "sh deploy/scripts/deploy-services.sh '${params.ENVIRONMENT}' '${env.RESOLVED_IMAGE_REPOSITORY}' '${env.IMAGE_TAG}' '${env.SELECTED_SERVICES}' \"\$DEPLOY_ENV_FILE\"" } } } } } post { always { cleanWs(deleteDirs: true, notFailBuild: true) } } }