182 lines
8.9 KiB
Desktop File
182 lines
8.9 KiB
Desktop File
def serviceModules = [
|
|
'gateway', 'auth', 'iam', 'firstleg', 'finance', 'order', 'warehouse', 'file', 'print',
|
|
'integration-service', 'event-bridge-service', 'audit-service'
|
|
]
|
|
|
|
def serviceJars = [
|
|
'gateway': 'gateway/target/gateway-1.0.0-SNAPSHOT.jar',
|
|
'auth': 'auth/target/auth-service-1.0.0-SNAPSHOT.jar',
|
|
'iam': 'iam/target/iam-service-1.0.0-SNAPSHOT.jar',
|
|
'firstleg': 'firstleg/target/firstleg-service-1.0.0-SNAPSHOT.jar',
|
|
'finance': 'finance/target/finance-service-1.0.0-SNAPSHOT.jar',
|
|
'order': 'order/target/order-service-1.0.0-SNAPSHOT.jar',
|
|
'warehouse': 'warehouse/target/warehouse-service-1.0.0-SNAPSHOT.jar',
|
|
'file': 'file/target/file-service-1.0.0-SNAPSHOT.jar',
|
|
'print': 'print/target/print-service-1.0.0-SNAPSHOT.jar',
|
|
'integration-service': 'integration-service/target/integration-service-1.0.0-SNAPSHOT.jar',
|
|
'event-bridge-service': 'event-bridge-service/target/event-bridge-service-1.0.0-SNAPSHOT.jar',
|
|
'audit-service': 'audit-service/target/audit-service-1.0.0-SNAPSHOT.jar'
|
|
]
|
|
|
|
pipeline {
|
|
// 每个 Jenkins 子 Job 使用自己的 workspace，因此不同服务可以并行执行 mvn clean。
|
|
agent any
|
|
|
|
tools {
|
|
maven 'maven-3.8.8'
|
|
}
|
|
|
|
options {
|
|
skipDefaultCheckout(true)
|
|
disableConcurrentBuilds()
|
|
timestamps()
|
|
buildDiscarder(logRotator(numToKeepStr: '30'))
|
|
}
|
|
|
|
parameters {
|
|
string(name: 'SOURCE_COMMIT', defaultValue: '', description: '必须构建的 Git commit；通常由总控 Job 传入')
|
|
string(name: 'IMAGE_TAG', defaultValue: '', description: '不可变镜像标签；通常使用 Git commit 前 12 位')
|
|
choice(name: 'ENVIRONMENT', choices: ['test', 'development', 'staging', 'production'], description: '部署环境')
|
|
booleanParam(name: 'DEPLOY', defaultValue: false, description: '构建成功后是否部署本服务')
|
|
booleanParam(name: 'SKIP_TESTS', defaultValue: false, description: '是否跳过测试')
|
|
string(name: 'IMAGE_REPOSITORY', defaultValue: 'baiyue-firstleg-test', description: '镜像仓库基础路径，不包含服务名和标签')
|
|
string(name: 'DOCKER_BASE_IMAGE', defaultValue: 'docker.m.daocloud.io/library/eclipse-temurin:17-jre-alpine', description: 'Java 17 基础镜像')
|
|
}
|
|
|
|
environment {
|
|
REGISTRY_CREDENTIALS = 'gitea-test-token'
|
|
MAVEN_SETTINGS = 'deploy/maven/settings-cn.xml'
|
|
MAVEN_OPTS = '-Dfile.encoding=UTF-8 -Dmaven.wagon.http.retryHandler.count=3'
|
|
DEVELOPMENT_SSH_TARGET = 'deploy@172.31.198.8'
|
|
DEVELOPMENT_SSH_KEY = '/var/jenkins_home/.ssh/dev_deploy'
|
|
DEVELOPMENT_DEPLOY_DIR = '/opt/firstleg/application'
|
|
}
|
|
|
|
stages {
|
|
stage('校验参数并检出指定提交') {
|
|
steps {
|
|
checkout scm
|
|
|
|
script {
|
|
String service = serviceModules.find { candidate ->
|
|
env.JOB_BASE_NAME?.endsWith("-${candidate}")
|
|
}
|
|
String sourceCommit = params.SOURCE_COMMIT?.trim()
|
|
String imageTag = params.IMAGE_TAG?.trim()
|
|
String imageRepository = params.IMAGE_REPOSITORY?.trim()
|
|
|
|
if (!sourceCommit) {
|
|
sourceCommit = sh(script: 'git rev-parse HEAD', returnStdout: true).trim()
|
|
}
|
|
if (!imageTag) {
|
|
imageTag = sh(script: 'git rev-parse --short=12 HEAD', returnStdout: true).trim()
|
|
}
|
|
|
|
if (!serviceModules.contains(service)) {
|
|
error("无法从 Job 名称 ${env.JOB_BASE_NAME} 识别服务；名称必须以以下服务之一结尾: ${serviceModules.join(', ')}")
|
|
}
|
|
if (!sourceCommit || !(sourceCommit ==~ /(?i)[0-9a-f]{7,40}/)) {
|
|
error('SOURCE_COMMIT 必须是 7 到 40 位十六进制 Git commit')
|
|
}
|
|
if (!imageTag || !(imageTag ==~ /[A-Za-z0-9_][A-Za-z0-9_.-]{0,127}/)) {
|
|
error('IMAGE_TAG 不是合法的 Docker 镜像标签')
|
|
}
|
|
if (!imageRepository || imageRepository.contains('://')) {
|
|
error('IMAGE_REPOSITORY 不能为空且不能包含 http:// 或 https://')
|
|
}
|
|
if (!['development', 'test'].contains(params.ENVIRONMENT) && !imageRepository.contains('/')) {
|
|
error('预发布/生产环境 IMAGE_REPOSITORY 必须使用 host[:port]/owner/image 格式')
|
|
}
|
|
|
|
env.RESOLVED_SERVICE = service
|
|
env.RESOLVED_SOURCE_COMMIT = sourceCommit
|
|
env.RESOLVED_IMAGE_TAG = imageTag
|
|
env.RESOLVED_IMAGE_REPOSITORY = imageRepository
|
|
}
|
|
|
|
sh '''
|
|
if ! git cat-file -e "${RESOLVED_SOURCE_COMMIT}^{commit}" 2>/dev/null; then
|
|
git fetch --no-tags origin
|
|
fi
|
|
git cat-file -e "${RESOLVED_SOURCE_COMMIT}^{commit}"
|
|
git checkout --detach "${RESOLVED_SOURCE_COMMIT}"
|
|
test "$(git rev-parse HEAD)" = "$(git rev-parse "${RESOLVED_SOURCE_COMMIT}^{commit}")"
|
|
'''
|
|
|
|
script {
|
|
currentBuild.description = "${env.RESOLVED_SERVICE} | ${env.RESOLVED_IMAGE_TAG} | ${params.ENVIRONMENT}"
|
|
echo "独立构建服务: ${env.RESOLVED_SERVICE}，提交: ${env.RESOLVED_SOURCE_COMMIT}"
|
|
}
|
|
}
|
|
}
|
|
|
|
stage('Maven 测试与打包') {
|
|
steps {
|
|
script {
|
|
if (params.ENVIRONMENT == 'production' && params.SKIP_TESTS) {
|
|
error('生产环境禁止跳过测试')
|
|
}
|
|
boolean skipTestExecution = params.ENVIRONMENT == 'test' || params.SKIP_TESTS
|
|
String testOption = skipTestExecution ? '-DskipTests' : ''
|
|
if (params.ENVIRONMENT == 'test') {
|
|
echo '测试环境快速部署：编译主代码和测试代码，但不重复执行单元测试；完整测试由提交门禁和预发布执行'
|
|
}
|
|
sh "mvn --settings ${env.MAVEN_SETTINGS} --batch-mode --errors -pl ${env.RESOLVED_SERVICE} -am clean package ${testOption}"
|
|
}
|
|
}
|
|
post {
|
|
always {
|
|
junit allowEmptyResults: true, testResults: '**/target/surefire-reports/TEST-*.xml'
|
|
}
|
|
}
|
|
}
|
|
|
|
stage('构建并发布单服务镜像') {
|
|
steps {
|
|
script {
|
|
String image = "${env.RESOLVED_IMAGE_REPOSITORY}/${env.RESOLVED_SERVICE}:${env.RESOLVED_IMAGE_TAG}"
|
|
String contextDir = ".docker-context/${env.RESOLVED_SERVICE}"
|
|
String jar = serviceJars[env.RESOLVED_SERVICE]
|
|
sh "mkdir -p '${contextDir}' && cp -f '${jar}' '${contextDir}/app.jar'"
|
|
sh "docker build -f deploy/docker/Dockerfile --build-arg BASE_IMAGE=${params.DOCKER_BASE_IMAGE} --build-arg JAR_FILE=app.jar -t ${image} '${contextDir}'"
|
|
|
|
if (['development', 'test'].contains(params.ENVIRONMENT)) {
|
|
echo "${params.ENVIRONMENT} 镜像已保存在当前 Docker 节点：${image}"
|
|
} else {
|
|
String registryHost = env.RESOLVED_IMAGE_REPOSITORY.tokenize('/')[0]
|
|
withCredentials([usernamePassword(credentialsId: env.REGISTRY_CREDENTIALS, usernameVariable: 'REGISTRY_USER', passwordVariable: 'REGISTRY_PASSWORD')]) {
|
|
try {
|
|
sh 'printf %s "$REGISTRY_PASSWORD" | docker login -u "$REGISTRY_USER" --password-stdin "' + registryHost + '"'
|
|
sh "docker push ${image}"
|
|
} finally {
|
|
sh "docker logout ${registryHost} || true"
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
stage('部署单个服务') {
|
|
when { expression { params.DEPLOY } }
|
|
steps {
|
|
script {
|
|
String credentialId = "firstleg-${params.ENVIRONMENT}-env"
|
|
withCredentials([file(credentialsId: credentialId, variable: 'DEPLOY_ENV_FILE')]) {
|
|
sh "sh deploy/scripts/deploy-services.sh '${params.ENVIRONMENT}' '${env.RESOLVED_IMAGE_REPOSITORY}' '${env.RESOLVED_IMAGE_TAG}' '${env.RESOLVED_SERVICE}' \"\$DEPLOY_ENV_FILE\""
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
post {
|
|
success {
|
|
echo "${env.RESOLVED_SERVICE} 已独立完成构建${params.DEPLOY ? '和部署' : ''}"
|
|
}
|
|
always {
|
|
cleanWs(deleteDirs: true, notFailBuild: true)
|
|
}
|
|
}
|
|
}
|