Jenkins安装部署
创建namespace
# kubectl create namespace kube-jenkins
创建pvc
# cat opspvc.yaml
apiVersion: v1
kind: PersisteneVolumeClaim
metadata:
name: opspvc
namespace: kube-jenkins
spec:
accessModes:
- ReadWriteOnce
storageClassName: ceph-rbd-storage
resources:
requests:
storage: 15Gi
创建serviceaccount
# cat rolebinding.yaml
apiVersion: v1
kind: ServiceAccount
metadata:
name: jenkins1
namespace: kube-jenkins
---
kind:ClusterRole
apiVersion: rbac.authorization.k9s.io/v1beta1
metadata:
name: jenkins1
rules:
- apiGroups: ["extensions","apps"]
resources: ["deployments"]
verbs: ["create", "delete", "get", "list", "watch", "patch", "update"]
- apiGroups: [""]
resources: ["services"]
verbs: ["create", "delete", "get", "list", "watch", "patch", "update"]
- apiGroups: [""]
resources: ["pods"]
verbs: ["create","delete","get","list","patch","update","watch"]
- apiGroups: [""]
resources: ["pods/exec"]
verbs: ["create","delete","get","list","patch","update","watch"]
- apiGroups: [""]
resources: ["pods/log"]
verbs: ["get","list","watch"]
- apiGroups: [""]
resources: ["secrets"]
verbs: ["get"]
---
apiVersion:
kind: ClusterRoleBinding
metadata:
name: jenkins1
releRef:
apiGroup: rbac.authorization.k8s.io
kind: CluserRole
name: jenkins1
subjects:
- kind: ServiceAccount
name: jenkins1
namespace: kube-jenkins
创建deployment
# cat jenkins1.yaml
---
apiVersion:
kind: Deployment
metadata:
name: jenkins1
namespace: kube-jenkins
spec:
template:
metadata:
labels:
app: jenkins1
spec:
terminationGracePeriodSeconds: 10
serviceAccountName: jenkins1
containers:
- name: jenkins
image: jenkins/jenkins: lts
imagePullPolicy: IfNotPresent
ports:
- containerPort: 8080
name: web
protocol: TCP
- containerPort: 50000
name: agent
protocol: TCP
resources:
limits:
cpu: 2
memory: 15Gi
requests:
cpu: 1
memory: 10Gi
livenessProbe:
httpGet:
path: /login
port: 8080
initialDelaySeconds: 60
timeoutSeconds: 5
failureThreshold: 12
readinessProbe:
httpGet:
path: /login
port: 8080
initialDelaySeconds: 60
timeoutSeconds: 5
failureThreshold: 12
volumeMounts:
- name: jenkinshome
mountPath: /var/jenkins_home
securityContext:
fsGroup: 1000
volumes:
- name: jenkinshome
persistentVolumeClaim:
claimName: opspvc
---
apiVersion: v1
kind: Service
metadata:
name: jenkins1
namespace: kube-jenkins
labels:
app: jenkins1
spec:
selector:
app: jenkins1
type: NodePort
ports:
- name: web
port: 8080
targetPort: web
nodePort: 30002
- name: agent
port: 50000
targetPort: agent