Kubernetes部署配置jenkins(CI/CD)实践

# pv文件(jenkins-pv.yaml)
---
kind: PersistentVolumeClaim
apiVersion: v1
metadata:
  name: jenkins-pvc
  annotations:
    volume.beta.kubernetes.io/storage-class: "managed-nfs-storage"
spec:
  accessModes:
    - ReadWriteMany
  resources:
    requests:
      storage: 200Gi
# 主程序文件（jenkins-master.yaml）
---
apiVersion: extensions/v1beta1
kind: Deployment
metadata:
  name: pro-jenkins
spec:
  replicas: 1
  template:
    metadata:
      labels:
        run: pro-jenkins
    spec:
      containers:
      - name: jenkins
        image: jenkins/jenkins
        imagePullPolicy: IfNotPresent
        env:
        - name: JAVA_OPTS
          value: '-Duser.timezone=Asia/Shanghai'
        ports:
        - containerPort: 8080
          name: web
        - containerPort: 50000
          name: agent
        volumeMounts:
        - name: workspace
          mountPath: /var/jenkins_home
      volumes:
        - name: workspace
          persistentVolumeClaim:
            claimName: jenkins-pvc
      dnsConfig:
        options:
         - name: ndots
           value: "1"
​
---
apiVersion: v1
kind: Service
metadata:
  name: pro-jenkins
  labels:
    run: pro-jenkins
spec:
  type: NodePort
  selector:
    run: pro-jenkins
  ports:
  - name: web
    port: 8080
    nodePort: 31080
  - name: agent
    port: 50000
    nodePort: 31050
​
---
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
  name: ingress-jenkins
spec:
  rules:
  - host: jenkins.ingress.com
    http:
      paths:
      - path: /
        backend:
          serviceName: pro-jenkins
          servicePort: 8080

# 启动
kubectl create -f jenkins-pv.yaml
kubectl create -f jenkins-master.yaml

# 在之前定义的共享存储目录下获取
cat secrets/initialAdminPassword
d777b3a282szks2bfd28a16c8dd61ds

echo “kubeconfig下certificate-authority-data” | base64 -d > /tmp/ca.crt
echo “kubeconfig下client-certificate-data” | base64 -d > /tmp/client.crt
echo “kubeconfig下client-key-data” | base64 -d > /tmp/client.key
# 生成client p12认证文件并下载到本地，执行下面命令时会让输入密码，需要输入后面使用
openssl pkcs12 -export -out ./cert.pfx -inkey ./client.key -in ./client.crt -certfile ./ca.crt