【2】CICD持续集成-k8s集群中安装Jenkins

一、背景：

Jenkins是一款开源 CI&CD 系统，用于自动化各种任务，包括构建、测试和部署。
Jenkins官方提供了镜像：https://hub.docker.com/r/jenkins/jenkins
使用Deployment来部署这个镜像，会暴露两个端口：8080 Web访问端口，50000 Slave通
信端口，容器启动后Jenkins数据存储在/var/jenkins_home目录，所以需要将该目录使用
PV持久化存储。

二、配置PV持久化存储

1、部署NFS共享服务器
在所有节点安装NFS软件包：

yum install nfs-utils -y

2、找一个节点作为NFS共享存储服务器

# 选一个集群节点，创建pv目录
mkdir -p /ifs/kubernetes/jenkins-data
#修改配置
vi /etc/exports
/ifs/kubernetes 192.168.1.0/24(rw,no_root_squash)

# 启动并设置开机自启
systemctl start nfs
systemctl enable nfs

三、部署Jenkins

3.1 Jenkins部署yaml文件(jenkins.yaml)

apiVersion: apps/v1
kind: Deployment 
metadata:
  name: jenkins
  labels:
    name: jenkins
spec:
  replicas: 1
  selector:
    matchLabels:
      name: jenkins 
  template:
    metadata:
      name: jenkins
      labels:
        name: jenkins
    spec:
      terminationGracePeriodSeconds: 10
      serviceAccountName: jenkins
      containers:
        - name: jenkins
          image: jenkins/jenkins:lts
          imagePullPolicy: Always
          ports:
            - containerPort: 8080
            - containerPort: 50000
          resources:
            limits:
              cpu: 1
              memory: 1Gi
            requests:
              cpu: 0.2
              memory: 200Mi
          env:
            - name: JAVA_OPTS
              value: -Xmx1g 
          volumeMounts:
            - name: jenkins-home
              mountPath: /var/jenkins_home
      securityContext:
        fsGroup: 1000
        runAsUser: 0
      volumes:
        - name: jenkins-home
          persistentVolumeClaim:
            claimName: jenkins-home
---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: jenkins-home
spec:
  accessModes: ["ReadWriteOnce"]
  resources:
    requests:
      storage: 5Gi
---
apiVersion: v1
kind: Service
metadata:
  name: jenkins
spec:
  selector:
    name: jenkins
  type: NodePort
  ports:
    - name: http
      port: 80
      targetPort: 8080
      protocol: TCP
      nodePort: 30006
    - name: agent
      port: 50000
      protocol: TCP
---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: jenkins

---
kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: jenkins
rules:
- apiGroups: [""]
  resources: ["pods","events"]
  verbs: ["create","delete","get","list","patch","update","watch"]
- apiGroups: [""]
  resources: ["pods/exec"]
  verbs: ["create","delete","get","list","patch","update","watch"]
- apiGroups: [""]
  resources: ["pods/log"]
  verbs: ["get","list","watch"]
- apiGroups: [""]
  resources: ["secrets","events"]
  verbs: ["get","list","watch"]

---
apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: jenkins
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: jenkins
subjects:
- kind: ServiceAccount
  name: jenkins

---
apiVersion: v1
kind: PersistentVolume
metadata:
  name: pv0001
spec:
  capacity:
    storage: 5Gi
  accessModes: ["ReadWriteOnce"]
  nfs:
    path: /ifs/kubernetes/jenkins-data # 前面步骤选择的pv存储节点目录
    server: 192.168.1.20 # 前面步骤选择的pv存储节点ip

3.2 执行部署Jenkins

kubectl apply -f jenkins.yaml

3.3 验证部署效果

. 查看pod创建情况

kubectl get pods

状态为Running则表示成功

登录地址：
http://nodeIp:30006

. 从日志中找到初始登录token

# podId 通过 kubectl get pods 命令查询
kubectl logs -f <podId>

四、在Jenkins安装cicd相关插件

管理Jenkins->系统配置–>管理插件–>分别搜索Git Parameter/Git/Pipeline/kubernetes/Config File Provider，
选中点击安装。
• Git：拉取代码
• Git Parameter：Git参数化构建
• Pipeline：流水线
• kubernetes：连接Kubernetes动态创建Slave代理
• Config File Provider：存储配置文件
• Extended Choice Parameter：扩展选择框参数，支持多选