Jenkins pipeline 避免使用明文密码的方法

“Jenkins” -> “Credentials”->可以添加domain也可以使用内置的“Global credentials (unrestricted)”。kind选择“username with password”，username填用户名，password填密码，ID是在pipeline中引用的标识。

docker login --username=root www.abc.com -p123456

pipeline中引用示例（注意Password和Username的大小写）

withCredentials([usernamePassword(credentialsId: 'dockerop', passwordVariable: 'Password', usernameVariable: 'Username')]) {
  sh 'docker login --u$Username -p$Uassword registry.cn-shanghai.aliyuncs.com'
}

一个动态slave测试

pipeline {
  agent {
    kubernetes {
      yaml """
apiVersion: v1
kind: Pod
metadata:
  labels:
    some-label: some-label-value
spec:
  containers:
  - name: alpine
    image: alpine:latest
    command:
    - cat
    tty: true
    volumeMounts:
      - name: docker
        mountPath: /var/run/docker.sock
      - name: ku
        mountPath: /usr/bin/kubectl
      - name: bui
        mountPath: /usr/bin/docker

  volumes:
  - name: docker
    hostPath:
      path: /var/run/docker.sock
  - name: ku
    hostPath:
      path: /usr/bin/kubectl
  - name: bui
    hostPath:
      path: /usr/bin/docker
"""
    }
  }
  
 environment {
   name="alpinevv"
   image="registry.cn-shanghai.aliyuncs.com/devobs/test:${name}$BUILD_ID"
}

  stages {
    stage('Get code ') {
           checkout([$class: 'GitSCM', branches: [[name: '*/master']], doGenerateSubmoduleConfigurations: false, extensions: [], submoduleCfg: [], userRemoteConfigs: [[url: 'http://172.19.0.53:13000/admins/tests.git']]])

      steps {
        container('alpine') {
            withCredentials([usernamePassword(credentialsId: 'dockerop', passwordVariable: 'Password', usernameVariable: 'Username')]) {
           sh 'docker login -u$Username -p$Password registry.cn-shanghai.aliyuncs.com '
          sh 'hostname'
	          sh '''
cat <<EOF> Dockerfile
FROM nginx:alpine
ENV TZ='Asia/Shanghai'
ENV TIMEZONE Asia/Shanghai
RUN echo "http://mirrors.aliyun.com/alpine/latest-stable/main/" > /etc/apk/repositories && \
    echo "http://mirrors.aliyun.com/alpine/latest-stable/community/" >> /etc/apk/repositories && \
    apk update && apk upgrade && \
    apk add tzdata bash-doc bash && \
    ln -snf /usr/share/zoneinfo/$TIMEZONE /etc/localtime && \
    echo $TIMEZONE > /etc/timezone && \
    mkdir /lib64  && \
    ln -s  /lib/libc.musl-x86_64.so.1 /lib64/ld-linux-x86-64.so.2
EOF

       docker build -t ${name}:${BUILD_ID} .
       docker tag  ${name}:$BUILD_ID ${image}
       
       docker push ${image}
       echo ${image}
       docker rmi ${image}
       docker rmi ${name}:${BUILD_ID}
       echo ${name}:${BUILD_ID}
          
          '''
        }  
     		 }
      			}
     				 }
    					}
							}