从0搭建CI/CD系统-CI/CD的流程和实现

pipeline {
    agent any
    environment {
        // 定义制品库地址，服务器地址，docker相关信息
        registry = 'dockerhub.xxx.com/demo-api'
        dev_server = 'deploy@api-service.dev.localdomain'
        prod_server = 'deploy@api-service.prod.localdomain'
        project = 'demo-api'
        docker_network = 'api-network'
        docker_network_range = '172.25.0.0/16'
        tag = env.GIT_COMMIT.take(7)
    }

    stages {
        stage('Build') {
            steps {
                script {
                    passedBuilds = []
                    lastSuccessfulBuild(passedBuilds, currentBuild);
                }
                //Slack通知开始构建
                slackSend(color: 'good', message: "${env.JOB_NAME} - ${env.BUILD_DISPLAY_NAME} Started <${env.RUN_DISPLAY_URL}|(Open)>")
                sh './build.sh'
            }
        }
        stage('Build Docker image') {
            when {
                // 只有Github的这两个分支，才会触发镜像构建，PR不触发
                expression { BRANCH_NAME ==~ /(master|release)/ }
            }
            steps {
                script {
                    // 推送镜像到特定私有仓库
                    docker.withRegistry('https://dockerhub.xxx.com', 'docker-xxx-private-id') {
                        def customImage = docker.build("${env.registry}:${env.tag}")
                        customImage.push("${env.tag}")
                        // 只有release分支才推latest tag
                        if (BRANCH_NAME == ~/(release)/) {
                            customImage.push("latest")
                        }
                    }
                }
            }
        }
        stage('Deploy - Test') {
            when { branch 'master' }
            steps {
                switchContainer(env.dev_server, env.project)
            }
        }
        stage('Deploy - Production') {
            when { branch 'release' }
            steps {
                script {
                    def deployToProduction = true
                    try {
                        // 需要人工确认部署到生产环境
                        slackSend(color: 'warning', message: "${env.JOB_NAME} - ${env.BUILD_DISPLAY_NAME} Do you want to approve the deploy in production? <${env.RUN_DISPLAY_URL}|(Open)>")
                        timeout(time: 10, unit: "MINUTES") {
                            input message: 'Do you want to approve the deploy in production?', ok: 'Yes'
                        }
                    } catch (e) {
                        deployToProduction = false
                    }
                    if (deployToProduction) {
                        slackSend(color: 'good', message: "${env.JOB_NAME} - ${env.BUILD_DISPLAY_NAME} Approved and Deploying to production. <${env.RUN_DISPLAY_URL}|(Open)>")
                        println "Deploying to production"
                        //切换配置 处理测试和生产配置不同的问题
                        sh "cat /config/$env.project/prod.env > .env"
                        switchContainer(env.prod_server, env.project)
                    } else {
                        slackSend(color: 'good', message: "${env.JOB_NAME} - ${env.BUILD_DISPLAY_NAME} Ignore Deploy to production. <${env.RUN_DISPLAY_URL}|(Open)>")
                        println "Ignore Deploy to production"
                    }
                }
            }
        }
        stage('Clean docker image') {
            when {
                expression { BRANCH_NAME ==~ /(master|release)/ }
            }
            steps {
                // 清理docker镜像
                sh "docker rmi ${env.registry}:${env.tag} || true"
                sh "docker rmi ${env.registry}:latest || true"
            }
        }
    }
    options {
        timeout(time: 1, unit: 'HOURS')
    }
    post {
        always {
            script {
                def changeLog = getChangeLog(passedBuilds)
                echo "changeLog ${changeLog}"
                slackSend(color: 'good', message: "${env.JOB_NAME} - ${env.BUILD_DISPLAY_NAME} Changes: ${changeLog}")
            }
            cleanWs()
        }
        aborted {
            slackSend(color: 'warning', message: "${env.JOB_NAME} - ${env.BUILD_DISPLAY_NAME} Aborted <${env.RUN_DISPLAY_URL}|(Open)>")
        }
        success {
            slackSend(color: 'good', message: "${env.JOB_NAME} - ${env.BUILD_DISPLAY_NAME} Success. Take ${currentBuild.durationString.replace(' and counting', '')} <${env.RUN_DISPLAY_URL}|(Open)>")
        }
        failure {
            slackSend(color: 'danger', message: "${env.JOB_NAME} - ${env.BUILD_DISPLAY_NAME} Failed <${env.RUN_DISPLAY_URL}|(Open)>")
        }
    }
}

// 部署到指定服务器
def switchContainer(String server, String project) {
    sh "ssh ${server} mkdir -p /apps/${project}"
    sh "scp docker-compose.yml ${server}:/apps/${project}"
    //追加tag环境变量
    sh "echo TAG=${env.tag} >> .env"
    sh "scp .env ${server}:/apps/${project}"
    sh "ssh ${server} docker network create --subnet=${env.docker_network_range} ${env.docker_network} || true"
    sh "ssh ${server} 'cd /apps/${project} && docker-compose  -f /apps/${project}/docker-compose.yml  pull'"
    sh "ssh ${server} 'cd /apps/${project} && docker-compose  -f /apps/${project}/docker-compose.yml  down --remove-orphans -v'"
    sh "ssh ${server} 'cd /apps/${project} && docker-compose  -f /apps/${project}/docker-compose.yml  up -d'"
    sh "ssh ${server} docker image prune -f"
}

def lastSuccessfulBuild(passedBuilds, build) {
    if ((build != null) && (build.result != 'SUCCESS')) {
        passedBuilds.add(build)
        lastSuccessfulBuild(passedBuilds, build.getPreviousBuild())
    }
}

@NonCPS
def getChangeLog(passedBuilds) {
    def log = ""
    for (int x = 0; x < passedBuilds.size(); x++) {
        def currentBuild = passedBuilds[x];
        def changeLogSets = currentBuild.rawBuild.changeSets
        for (int i = 0; i < changeLogSets.size(); i++) {
            def entries = changeLogSets[i].items
            for (int j = 0; j < entries.length; j++) {
                def entry = entries[j]
                log += "\n * ${entry.msg} by ${entry.author} "
            }
        }
    }
    return log;
}