GitLab CI/CD 自动化构建与发布实践

helm repo add minio https://helm.min.io/

helm install minio \--set accessKey=admin,secretKey=admin123456 \--namespace minio --create-namespace \minio/minio
#返回结果minio/minioNAME: minioLAST DEPLOYED: Wed Aug 18 13:23:45 2021NAMESPACE: minioSTATUS: deployedREVISION: 1TEST SUITE: NoneNOTES:Minio can be accessed via port 9000 on the following DNS name from within your cluster:minio.minio.svc.cluster.local
To access Minio from localhost, run the below commands:
  1. export POD_NAME=$(kubectl get pods --namespace minio -l "release=minio" -o jsonpath="{.items[0].metadata.name}")
  2. kubectl port-forward $POD_NAME 9000 --namespace minio
Read more about port forwarding here: http://kubernetes.io/docs/user-guide/kubectl/kubectl_port-forward/
You can now access Minio server on http://localhost:9000. Follow the below steps to connect to Minio server with mc client:
  1. Download the Minio mc client - https://docs.minio.io/docs/minio-client-quickstart-guide
  2. Get the ACCESS_KEY=$(kubectl get secret minio -o jsonpath="{.data.accesskey}" | base64 --decode) and the SECRET_KEY=$(kubectl get secret minio -o jsonpath="{.data.secretkey}" | base64 --decode)
  3. mc alias set minio-local http://localhost:9000 "$ACCESS_KEY" "$SECRET_KEY" --api s3v4
  4. mc ls minio-local
Alternately, you can use your browser or the Minio SDK to access the server - https://docs.minio.io/categories/17

export POD_NAME=$(kubectl get pods --namespace minio -l "release=minio" -o jsonpath="{.items[0].metadata.name}")kubectl port-forward $POD_NAME 9000 --namespace minio

kubectl create secret -n acp generic s3access \--from-literal=accesskey=admin \--from-literal=secretkey=admin123456

helm repo add gitlab https://charts.gitlab.iohelm pull gitlab/gitlab-runner --untar

# gitlab IP 地址gitlabUrl: http://gitlab ip地址/
# 注册 gitlab runner 的 tokenrunnerRegistrationToken: "o_4r2uvptQYmmr79e2uF"
runners:# 设置缓存  cache:    ## General settings    cacheType: s3    cachePath: "gitlab-runner-elasticsearch-api" # 缓存路径，gitlab runner 会自动在 bucket 下创建该目录    cacheShared: true
    ## S3 settings    s3ServerAddress: minio.minio.svc.cluster.local:9000 # kubernetes 集群 clusterip service 访问的地址    s3BucketName: gitlab-runner-cache-maven # bucket 名字    s3BucketLocation:    s3CacheInsecure: true # http 登录    secretName: s3access # 使用 Minio 用户名密码创建的 secert

helm install -n acp gitlab-runner-elasticsearch-api gitlab-runner

❯ kubectl get pod -n acp | grep runnergitlab-runner-elasticsearch-api-gitlab-runner-88f7b64fc-rdfch   1/1     Running     0          113s

stages:  - compile  - build  - deploy
variables:  KUBECONFIG: /tmp/config  CI_REGISTRY: 你的镜像仓库 IP  CI_REGISTRY_IMAGE: 你的镜像仓库项目路径
# maven 依赖缓存cache:  paths:    - cache 
# 编译项目compile:  stage: compile  image: openjdk:8-jdk-alpine  # 只有打 tag 时才会触发任务  only:    - tags  # 编译项目，跳过单元测试，指定本地依赖目录  script:    - ./mvnw package -Dmaven.test.skip=true -Dmaven.repo.local=cache  # 将编译好的 jar 包传递给下一个阶段，用于 kaniko 构建 docker 镜像  artifacts:    paths:      - target
# 构建镜像build:  image: gcr.io/kaniko-project/executor:debug # 可能需要手动提前下载  stage: build  only:    - tags  script:   # 使用 kaniko 构建 docker 镜像    - mkdir -p /kaniko/.docker    - echo "{\"auths\":{\"$CI_REGISTRY\":{\"username\":\"$REGISTRY_USER\",\"password\":\"$REGISTRY_PASS\"}}}" > /kaniko/.docker/config.json    - /kaniko/executor --context $CI_PROJECT_DIR --dockerfile $CI_PROJECT_DIR/Dockerfile --destination $CI_REGISTRY_IMAGE:$CI_COMMIT_TAG
#部署到 kubernetes 环境中deploy:  image: bitnami/kubectl:1.19  stage: deploy  only:    - tags  script:    # 设置 kubectl 容器的 kubeconfig 文件，使 kubectl 容器有在 Kubernetes 中部署应用的权限    - echo $kube_config | base64 -id > $KUBECONFIG    - sed -i "s/CI_COMMIT_TAG/$CI_COMMIT_TAG/g" manifests/deployment.yaml    - cat manifests/*.yaml    - kubectl apply -f manifests/

FROM openjdk:8-jdk-alpine  # 设置工作目录  WORKDIR /app    # 语言，时区设置  ENV TZ=Asia/Shanghai  ENV LANG=en_US.UTF-8  ENV LANGUAGE=en_US:en  ENV iC_ALL=en_US.UTF-8    EXPOSE 8080  # 拷贝 compile 阶段编译好的 jar 包  COPY target/*.jar elasticsearch-api.jar  CMD ["java","-jar","elasticsearch-api.jar"]

git add .git commit -m "首次触发任务"git push

git tag 3.0.4git push origin 3.0.4

❯ kubectl get pod -n acp | grep elasticsearchelasticsearch-api-7d9656cf5d-5sngv                               2/2     Running     0          30selasticsearch-api-7d9656cf5d-9zgzt                               2/2     Running     0          30selasticsearch-api-7d9656cf5d-tthx5                               2/2     Running     0          30s

git add .git commit -m "第二次触发任务"git push
git tag 3.0.5git push origin 3.0.5