Jenkinsfile

def label = "slave-${UUID.randomUUID().toString()}"

podTemplate(
    label: label,
    yaml: """
apiVersion: v1
kind: Pod
metadata:
  labels:
    jenkins-cicd: cicd-jenkins
spec:
  securityContext:
    runAsUser: 0
    privileged: true
  containers:
  - name: "maven"
    image: "maven:3.6.3-openjdk-11-slim"
    imagePullPolicy: "IfNotPresent"
    command:
    - cat
    tty: true
    volumeMounts:
    - name: "volume-m2"
      mountPath: "/root/.m2/repository"
      readOnly: false
    - name: "maven-config"
      mountPath: "/root/.m2"
      readOnly: false
    - mountPath: "/home/jenkins/agent"
      name: "workspace-volume"
      readOnly: false
  - name: "docker"
    image: "docker:20.10.17-git"
    imagePullPolicy: "IfNotPresent"
    command:
    - cat
    tty: true
    volumeMounts:
    - name: "volume-docker"
      mountPath: "/var/run/docker.sock"
      readOnly: false
    - name: "workspace-volume"
      mountPath: "/home/jenkins/agent"
      readOnly: false
  - name: kubectl
    image: bitnami/kubectl:1.23.7
    imagePullPolicy: "IfNotPresent"
    command:
    - cat
    tty: true
    securityContext:
      allowPrivilegeEscalation: true
    volumeMounts:
      - name: "volume-kube"
        mountPath: "/home/jenkins/.kube"
        readOnly: false
      - name: "workspace-volume"
        mountPath: "/home/jenkins/agent"
        readOnly: false
  volumes:
  - name: "volume-m2"
    hostPath:
      path: "/root/.m2/repository"
  - name: "maven-config"
    configMap:
      name: maven-config
  - name: "volume-docker"
    hostPath:
      path: "/var/run/docker.sock"
  - name: "volume-kube"
    hostPath:
      path: "/root/.kube"
  - name: "workspace-volume"
    emptyDir:
      medium: ""
""",
    serviceAccount: 'jenkins-admin'
) {

  node(label) {

    def violin_parent_repo = checkout([
      $class: 'GitSCM',
      branches: [[name: "*/master"]],
      doGenerateSubmoduleConfigurations: false,
      extensions:  [[$class: 'CloneOption', noTags: false, reference: '', shallow: true, timeout: 1000]]+[[$class: 'CheckoutOption', timeout: 1000]],
      submoduleCfg: [],
      userRemoteConfigs: [[
        credentialsId: '2448e943-479f-4796-b5a0-fd3bf22a5d30',
        url: 'https://gitee.com/guan-xiangwei/violin-parent.git'
        ]]
      ])

    stage('violin-parent install') {
      container('maven') {
        sh 'mvn clean install'
      }
    }

    def violin_common_repo = checkout([
      $class: 'GitSCM',
      branches: [[name: "*/master"]],
      doGenerateSubmoduleConfigurations: false,
      extensions:  [[$class: 'CloneOption', noTags: false, reference: '', shallow: true, timeout: 1000]]+[[$class: 'CheckoutOption', timeout: 1000]],
      submoduleCfg: [],
      userRemoteConfigs: [[
        credentialsId: '2448e943-479f-4796-b5a0-fd3bf22a5d30',
        url: 'https://gitee.com/guan-xiangwei/violin-common.git'
        ]]
      ])

    stage('violin-common install') {
      container('maven') {
        sh 'mvn clean install'
      }
    }


    def violin_auth_repo = checkout([
      $class: 'GitSCM',
      branches: [[name: "*/master"]],
      doGenerateSubmoduleConfigurations: false,
      extensions:  [[$class: 'CloneOption', noTags: false, reference: '', shallow: true, timeout: 1000]]+[[$class: 'CheckoutOption', timeout: 1000]],
      submoduleCfg: [],
      userRemoteConfigs: [[
        credentialsId: '2448e943-479f-4796-b5a0-fd3bf22a5d30',
        url: 'https://gitee.com/guan-xiangwei/violin-auth.git'
        ]]
      ])

    def imageTag
    def localDateTime
    stage('obtain release tag') {
      imageTag = sh returnStdout: true, script: "git tag --sort=-creatordate | head -n 1"
      imageTag = imageTag.trim()
      localDateTime = sh returnStdout: true, script: "echo `date +%s`"
      localDateTime = localDateTime.trim()
    }

    stage('compile') {
      container('maven') {
        sh 'mvn clean package'
      }
    }

    def registryUrl = "ccr.ccs.tencentyun.com"
    def imageEndpoint = "violin/violin-auth"
    def image = "${registryUrl}/${imageEndpoint}:${imageTag}"

    stage('build image') {
      withCredentials([[$class: 'UsernamePasswordMultiBinding',
        credentialsId: '8eb5126b-6a2f-4644-add0-bc2a669e663d',
        usernameVariable: 'DOCKER_USER',
        passwordVariable: 'DOCKER_PASSWORD']]) {
          container('docker') {
            sh """
              docker login ${registryUrl} --username=${DOCKER_USER} -p ${DOCKER_PASSWORD}
              docker build -t ${image} .
              docker push ${image}
              """
          }
        }
    }

    def violin_cicd_repo = checkout([
      $class: 'GitSCM',
      branches: [[name: "*/master"]],
      doGenerateSubmoduleConfigurations: false,
      extensions:  [[$class: 'CloneOption', noTags: false, reference: '', shallow: true, timeout: 1000]]+[[$class: 'CheckoutOption', timeout: 1000]],
      submoduleCfg: [],
      userRemoteConfigs: [[
        credentialsId: '2448e943-479f-4796-b5a0-fd3bf22a5d30',
        url: 'https://gitee.com/guan-xiangwei/violin-cicd.git'
        ]]
      ])

    stage('update k8s deployment') {
      script{
        wrap([$class: 'BuildUser']) {
          withCredentials([usernamePassword(
              credentialsId: '2448e943-479f-4796-b5a0-fd3bf22a5d30',
              usernameVariable: 'GIT_USERNAME',
              passwordVariable: 'GIT_PASSWORD'
          )]) {
            sh """
                git config --global user.email "${env.BUILD_USER_EMAIL}"
                git config --global user.name "${env.BUILD_USER_ID}"
                git config --local credential.helper "!p() { echo username=\$GIT_USERNAME; echo password=\$GIT_PASSWORD;}; p"
                
            """
            sh "sed -i -e s/tagUpdateTime:.*/tagUpdateTime:' '${localDateTime}/g ./prod/violin-auth-deployment-prod.yaml"
            sh "sed -i -e s/violin-auth:.*/violin-auth:${imageTag}/g ./prod/violin-auth-deployment-prod.yaml"
            sh "git add ./prod/violin-auth-deployment-prod.yaml"
            sh "git commit -m 'update tag ${imageTag}'"
            sh "git push -u origin HEAD:master"
          }
        }
      }
    }
  }
}