-
Notifications
You must be signed in to change notification settings - Fork 22
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
8 changed files
with
248 additions
and
10 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
84 changes: 84 additions & 0 deletions
84
_k8s/letsencrypt/backup/cert-manager-ingress-lanneng-fitness.yaml
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,84 @@ | ||
| # Author: 潘维吉 | ||
| # Description: 云原生K8S中使用cert-manager基于 ACME 协议与 Let's Encrypt 自动签发与续签免费的SSL证书 | ||
|
|
||
| # 创建一个集群级的签发机构 仅需一次 如果删除执行 kubectl delete clusterissuer issuerName | ||
| apiVersion: cert-manager.io/v1 | ||
| kind: ClusterIssuer | ||
| metadata: | ||
| name: letsencrypt-prod-lanneng-fitness-yuedong | ||
| namespace: cert-manager | ||
| spec: | ||
| acme: | ||
| server: https://acme-v02.api.letsencrypt.org/directory # ACME 协议的服务端 acme-staging-v02测试证书没有限制 | ||
| email: 406798106@qq.com # 证书快过期的时候会有邮件提醒 | ||
| privateKeySecretRef: | ||
| name: letsencrypt-prod-key-lanneng-fitness-yuedong # 私钥秘密必须与cert-manager服务在同一个命名空间中才能工作 kubectl delete Secret letsencrypt-prod-key --namespace cert-manager | ||
| solvers: | ||
| - http01: # 签发机构使用 HTTP-01 的方式进行 acme 协议 (还可用 DNS 方式，acme 协议的目的是证明机器和域名都是属于你的，然后才准许颁发证书) | ||
| ingress: | ||
| #serviceType: ClusterIP | ||
| name: pengbocloud-k8s-ingress-lanneng-fitness-yuedong # 这个匹配是关键！！！ 1. class是指定自动创建的 Ingress 的 ingress class 2. name是指定被自动修改的 Ingress 名称 | ||
|
|
||
| --- | ||
|
|
||
| apiVersion: networking.k8s.io/v1 | ||
| kind: Ingress | ||
| metadata: | ||
| name: pengbocloud-k8s-ingress-lanneng-fitness-yuedong | ||
| namespace: default | ||
| annotations: | ||
| # 指定使用nginx做代理 | ||
| #kubernetes.io/ingress.class: lanneng-park # 已弃用 使用 spec.ingressClassName代替 | ||
| # add an annotation indicating the issuer to use | ||
| cert-manager.io/cluster-issuer: letsencrypt-prod-lanneng-fitness-yuedong | ||
| acme.cert-manager.io/http01-edit-in-place: "true" | ||
|
|
||
| # 后端大文件上传大小 | ||
| nginx.ingress.kubernetes.io/client-body-buffer-size: 1024m | ||
| nginx.ingress.kubernetes.io/proxy-max-temp-file-size: 2048m | ||
| # 数据传输大小 | ||
| nginx.ingress.kubernetes.io/proxy-body-size: 1024m | ||
|
|
||
| # 开启CORS跨域请求 | ||
| nginx.ingress.kubernetes.io/enable-cors: "true" | ||
| nginx.ingress.kubernetes.io/cors-allow-origin: "*" | ||
| nginx.ingress.kubernetes.io/cors-max-age: "64800" | ||
| nginx.ingress.kubernetes.io/cors-allow-methods: "PUT, GET, POST, DELETE, PATCH, OPTIONS" | ||
| nginx.ingress.kubernetes.io/cors-allow-credentials: "true" | ||
|
|
||
| spec: | ||
| ingressClassName: lanneng-k8s-ingress | ||
| tls: | ||
| - hosts: | ||
| - fitness-api.pengbocloud.com | ||
| secretName: fitness-api.pengbocloud.com-tls | ||
| - hosts: | ||
| - fitness-admin.pengbocloud.com | ||
| secretName: fitness-admin.pengbocloud.com-tls | ||
|
|
||
| rules: | ||
| #自定义域名 | ||
| - host: fitness-api.pengbocloud.com | ||
| http: | ||
| paths: | ||
| - path: / | ||
| backend: | ||
| #服务名称 | ||
| service: | ||
| name: lanneng-fitness-app-service | ||
| #服务端口 | ||
| port: | ||
| number: 8102 | ||
| pathType: Prefix | ||
| - host: fitness-admin.pengbocloud.com | ||
| http: | ||
| paths: | ||
| - path: / | ||
| backend: | ||
| #服务名称 | ||
| service: | ||
| name: lanneng-fitness-admin-web-service | ||
| #服务端口 | ||
| port: | ||
| number: 9101 | ||
| pathType: Prefix |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,155 @@ | ||
| #!groovy | ||
| @Library('jenkins-shared-library@dev') _ | ||
|
|
||
| /** | ||
| * @author 潘维吉 | ||
| * @description 核心Pipeline代码 针对Web项目和JAVA项目CI/CD的脚本 | ||
| * 注意 本文件在Git位置和名称不能随便改动 配置在jenkins里 | ||
| */ | ||
|
|
||
| // 根据不同环境项目配置不同参数 | ||
| def map = [:] | ||
|
|
||
| // 远程服务器地址 k8s集群方式可填空或填公网代理负载IP | ||
| map.put('remote_ip', '120.92.140.41') | ||
| // 工作服务器地址 同时支持N个服务器自动化分布式部署 | ||
| map.put('remote_worker_ips', []) | ||
| // 远程服务器用户名 | ||
| map.put('remote_user_name', 'root') | ||
| // 代理机或跳板机外网ip用于透传部署到内网目标机器 选填 目标机器外部无法直接访问情况填写内网ip | ||
| map.put('proxy_jump_ip', ' ') | ||
| // 自定义跳板机ssh和scp访问用户名 可精细控制权限 默认root | ||
| map.put('proxy_jump_user_name', 'root') | ||
| // 自定义跳板机ssh和scp访问端口 默认22 | ||
| map.put('proxy_jump_port', ' ') | ||
|
|
||
| // 默认统一设置项目级别的分支 方便整体控制改变分支 将覆盖单独job内的设置 | ||
| map.put('default_git_branch', ' ') | ||
|
|
||
| // 保持构建的最大个数 | ||
| map.put('build_num_keep', 2) | ||
|
|
||
| // Docker相关参数 | ||
| // JVM内存设置 | ||
| map.put('docker_java_opts', '-Xmx2000m') | ||
| // docker内存限制 不支持小数点形式设置 | ||
| map.put('docker_memory', '2G') | ||
| // docker日志限制 | ||
| map.put('docker_log_opts', 'max-size=150m') // --log-opt max-size=50m --log-opt max-file=3 | ||
| // docker挂载映射 docker run -v 参数(格式 宿主机挂载路径:容器内目标路径) 多个用逗号,分割 | ||
| map.put('docker_volume_mount', '') | ||
| // Dockerfile多阶段构建 镜像名称 | ||
| map.put('docker_multistage_build_images', ' ') | ||
| // 是否上传镜像到docker容器仓库 | ||
| map.put('is_push_docker_repo', true) | ||
| // docker容器镜像仓库账号信任id | ||
| map.put('docker_repo_credentials_id', '73f6b3b0-4580-4acf-b04a-63892fcf9ba8') | ||
| // docker镜像仓库注册地址 | ||
| map.put('docker_repo_registry', 'hub-cn-shanghai-2.kce.ksyun.com') | ||
| // docker仓库命名空间名称 | ||
| map.put('docker_repo_namespace', 'lanneng') | ||
|
|
||
| // K8S集群相关参数 | ||
| // K8S集群访问授权账号kube.config配置信息信任ids 多集群,逗号分割 Jenkins系统管理的Manage Credentials，类型选择为“Secret file”配置 | ||
| map.put('k8s_credentials_ids', '74a3d376-cb4c-4a20-9bf7-7300a5eaa84d') | ||
| // K8S集群私有镜像仓库拉取密钥 在集群内使用kubectl create secret命令生成 | ||
| map.put('k8s_image_pull_secrets', 'lannengkeji2022') | ||
|
|
||
| // 项目标签或项目简称 | ||
| map.put('project_tag', '悦动时刻') | ||
|
|
||
| // 是否是生产环境 | ||
| map.put('is_prod', true) | ||
| // 是否在同一台服务器蓝绿部署或滚动部署 非k8s集群方式设置 | ||
| map.put('is_same_server', false) | ||
| // 是否进行优雅停机 | ||
| map.put('is_grace_shutdown', true) | ||
| // 是否进行服务启动健康探测 K8S集群类型设置false | ||
| map.put('is_health_check', false) | ||
| // 是否Pipeline内脚本钉钉通知 总开关 | ||
| map.put('is_ding_notice', true) | ||
| // 是否进行部署前通知 | ||
| map.put('is_before_deploy_notice', false) | ||
| // 是否通知变更记录 | ||
| map.put('is_notice_change_log', true) | ||
| // 是否在生产环境发布成功后自动给Git仓库打Tag版本和生成变更记录 | ||
| map.put('is_git_tag', true) | ||
| // 是否需要css预处理器sass | ||
| map.put('is_need_sass', false) | ||
|
|
||
| // jenkins分布式构建节点label名称 预配置在jenkins节点管理内 | ||
| map.put('jenkins_node', 'node-2') | ||
| map.put('jenkins_node_front_end', 'node-2') | ||
|
|
||
| // 构建环境变量 分别使用Node和Maven关键字加版本号方式 如Maven3.6 | ||
| map.put('nodejs', 'Node18') | ||
| map.put('maven', 'Maven3.8') | ||
| map.put('jdk', '17') | ||
|
|
||
| // 相关信任标识 | ||
| map.put('ci_git_credentials_id', '5379273a-f829-4091-ab19-46c184fcbeb2') | ||
| map.put('git_credentials_id', '5379273a-f829-4091-ab19-46c184fcbeb2') | ||
| map.put('ding_talk_credentials_id', 'd33ae0ba-e531-41c8-8983-d9734e53a25a') | ||
| // OSS对象存储访问凭据配置 Jenkins系统管理的Manage Credentials，类型选择为“Secret file”配置 | ||
| map.put('oss_credentials_id', ' ') | ||
| // 直连方式服务器集群自动SSH连接信息 实现CI构建机器和多台部署机之间的免密连接 | ||
| map.put('ssh_hosts_id', ' ') | ||
| // 跳板机方式服务器集群自动SSH连接信息 实现CI构建机器和多台部署机之间的免密连接 | ||
| map.put('proxy_jump_hosts_id', '47226244-73ca-48b9-be2d-f3413f62701a') | ||
|
|
||
| // 服务器上部署所在的文件夹名称 | ||
| map.put('deploy_folder', "my") | ||
| // Web项目NPM打包代码所在的文件夹名称 | ||
| map.put('npm_package_folder', "dist") | ||
| // Web项目解压到指定目录层级 | ||
| map.put('web_strip_components', 1) | ||
| // 如果Maven模块化存在二级模块目录 设置一级模块目录名称 | ||
| map.put('maven_one_level', ' ') | ||
| // Maven自定义指定settings.xml文件 如设置私有库或镜像源情况 | ||
| map.put('maven_setting_xml', ' ') | ||
|
|
||
| // 调用核心通用Pipeline | ||
| sharedLibrary(map) | ||
|
|
||
|
|
||
| // --------------------------------------------------------------------------------------------------------------------- | ||
| // https://git.pengbocloud.com/lanneng_develop/jenkins-shared-library.git pipelines/lanneng/Jenkinsfile.lanneng-fitness-k8s-prod | ||
|
|
||
| /* | ||
| lanneng-fitness-app-k8s-prod | ||
| 悦动时刻健身服务端-k8s集群 | ||
| JSON_PARAMS | ||
| { | ||
| "REPO_URL" : "https://git.pengbocloud.com/lanneng_develop/car_wash_api.git" , | ||
| "BRANCH_NAME" : "fitness" , | ||
| "PROJECT_TYPE" : "2" , | ||
| "PROJECT_NAME" : "lanneng-fitness-app" , | ||
| "SHELL_PARAMS" : "lanneng-fitness app 8102 8080 prod", | ||
| "IS_K8S_DEPLOY" : true, | ||
| "K8S_POD_REPLICAS" : "1", | ||
| "IS_MAVEN_SINGLE_MODULE" : true, | ||
| "CUSTOM_HEALTH_CHECK_PATH" : "/api/healthy-check", | ||
| "APPLICATION_DOMAIN" : "https://fitness-api.pengbocloud.com" | ||
| } | ||
| lanneng-fitness-admin-web-k8s-prod | ||
| 悦动时刻健身Admin Web前端 ❤️ | ||
| JSON_PARAMS | ||
| { | ||
| "REPO_URL" : "https://git.pengbocloud.com/lanneng_develop/fitness_web.git" , | ||
| "BRANCH_NAME" : "main" , | ||
| "PROJECT_TYPE" : "1" , | ||
| "PROJECT_NAME" : "lanneng-fitness-admin-web" , | ||
| "SHELL_PARAMS" : "lanneng-fitness admin-web 9101 80 prod", | ||
| "NPM_RUN_PARAMS" : "build", | ||
| "IS_K8S_DEPLOY" : true, | ||
| "K8S_POD_REPLICAS" : "1", | ||
| "APPLICATION_DOMAIN" : "https://fitness-admin.pengbocloud.com" | ||
| } | ||
| */ | ||
|
|
||
|
|
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters