ln-web/Jenkinsfile

pipeline {
    agent any

    parameters {
        choice(name: 'env', choices: ['dev', 'test', 'prod'], description: '部署环境')
        string(name: 'NAMESPACE', defaultValue: 'hfln-dev', description: 'K8s 命名空间')
    }

    environment {
        PROJECT_NAME        = 'portal-service-frontend'
        BUILD_DIR           = 'dist'
        NODE_ENV            = 'production'
        HARBOR_HOST         = '8.130.28.21:81'
        KUBECONFIG_PATH     = '/root/.kube/config'
        NODE1_IP            = '172.27.73.147'
        NODE2_IP            = '172.27.73.146'
        HARBOR_USER         = 'admin'
        HARBOR_PASS         = 'Hfln@1024'
        HARBOR_RETENTION_ID = '1'
        DOMAIN              = 'radar-power.asia'
        TLS_CERT_PATH       = '/data/cert/radar-power.asia.pem'
        TLS_KEY_PATH        = '/data/cert/radar-power.asia.key'
    }

    stages {
        stage('🧬 初始化环境') {
            steps {
                script {
                    env.HARBOR_PROJECT = params.env
                    env.IMAGE_TAG = "${env.HARBOR_HOST}/${env.HARBOR_PROJECT}/${env.PROJECT_NAME}:${BUILD_NUMBER}"
                    echo ">>> 环境：${params.env}, Harbor项目：${env.HARBOR_PROJECT}, K8s命名空间：${params.NAMESPACE}"
                    echo ">>> IMAGE_TAG = ${env.IMAGE_TAG}"
                    echo ">>> 域名：https://${env.DOMAIN}/"
                }
            }
        }

        stage('📥 拉取代码') {
            steps {
                checkout scm
                echo "✅ 代码拉取成功"
            }
        }

        stage('🔧 构建 Docker 镜像') {
            steps {
                script {
                    sh """
                        docker login -u ${env.HARBOR_USER} -p ${env.HARBOR_PASS} ${env.HARBOR_HOST}
                        docker build --build-arg ENV=${params.env} -t ${env.IMAGE_TAG} .
                    """
                    echo "✅ 镜像构建成功：${env.IMAGE_TAG}"
                }
            }
        }

        stage('🚀 推送镜像到 Harbor') {
            steps {
                script {
                    sh """
                        docker push ${env.IMAGE_TAG}
                        docker rmi ${env.IMAGE_TAG} || true
                    """
                    echo "✅ 镜像推送并本地清理完成"
                }
            }
        }

        stage('🔍 测试节点能否拉取镜像') {
            steps {
                script {
                    echo ">>> 测试节点能否拉取镜像..."
                    sh """
                        ssh root@${env.NODE1_IP} docker login -u ${env.HARBOR_USER} -p ${env.HARBOR_PASS} ${env.HARBOR_HOST} && docker pull ${env.IMAGE_TAG} || echo '[❌ 节点 ${env.NODE1_IP} 拉取失败]'
                        ssh root@${env.NODE2_IP} docker login -u ${env.HARBOR_USER} -p ${env.HARBOR_PASS} ${env.HARBOR_HOST} && docker pull ${env.IMAGE_TAG} || echo '[❌ 节点 ${env.NODE2_IP} 拉取失败]'
                    """
                }
            }
        }

        stage('📦 部署到 Kubernetes（Ingress + ClusterIP）') {
            steps {
                script {
                    // 自动创建 portal-tls secret
                    sh """
                        export KUBECONFIG=${env.KUBECONFIG_PATH}
                        if ! kubectl get secret portal-tls -n ${params.NAMESPACE} >/dev/null 2>&1; then
                            echo ">>> 未检测到 portal-tls，正在创建..."
                            kubectl create secret tls portal-tls \\
                                --cert=${env.TLS_CERT_PATH} \\
                                --key=${env.TLS_KEY_PATH} \\
                                -n ${params.NAMESPACE}
                            echo "✅ portal-tls 创建完成"
                        else
                            echo "✅ portal-tls 已存在，跳过创建"
                        fi
                    """

                    def ingressBlock = """---
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
  name: ${env.PROJECT_NAME}
  namespace: ${params.NAMESPACE}
  annotations:
    nginx.ingress.kubernetes.io/rewrite-target: /
spec:
  tls:
  - hosts:
    - ${env.DOMAIN}
    secretName: portal-tls
  rules:
  - host: ${env.DOMAIN}
    http:
      paths:
      - path: /
        pathType: Prefix
        backend:
          service:
            name: ${env.PROJECT_NAME}
            port:
              number: 80
"""

                    def deployYaml = """apiVersion: apps/v1
kind: Deployment
metadata:
  name: ${env.PROJECT_NAME}
  namespace: ${params.NAMESPACE}
spec:
  replicas: 2
  selector:
    matchLabels:
      app: ${env.PROJECT_NAME}
  template:
    metadata:
      labels:
        app: ${env.PROJECT_NAME}
    spec:
      containers:
      - name: ${env.PROJECT_NAME}
        image: ${env.IMAGE_TAG}
        ports:
        - containerPort: 80
        env:
        - name: NODE_ENV
          value: "${params.env}"
---
apiVersion: v1
kind: Service
metadata:
  name: ${env.PROJECT_NAME}
  namespace: ${params.NAMESPACE}
spec:
  type: ClusterIP
  selector:
    app: ${env.PROJECT_NAME}
  ports:
  - port: 80
    targetPort: 80
${ingressBlock}
"""

                    writeFile file: 'deploy.yaml', text: deployYaml
                    sh """
                        export KUBECONFIG=${env.KUBECONFIG_PATH}
                        kubectl get ns ${params.NAMESPACE} >/dev/null 2>&1 || kubectl create ns ${params.NAMESPACE}
                        kubectl apply -f deploy.yaml
                        kubectl rollout status deployment/${env.PROJECT_NAME} -n ${params.NAMESPACE} --timeout=120s || echo '[rollout timeout or incomplete]'
                    """

                    echo ">>> ✅ 部署完成，访问地址：https://${env.DOMAIN}/"
                }
            }
        }

        stage('🧹 清理本地旧镜像（保留最新3个）') {
            steps {
                script {
                    def baseImage = "${env.HARBOR_HOST}/${env.HARBOR_PROJECT}/${env.PROJECT_NAME}"
                    sh """
                        docker images ${baseImage} --format "{{.Repository}}:{{.Tag}}" \\
                        | grep -v latest \\
                        | sort -r -t ':' -k2 \\
                        | tail -n +4 \\
                        | xargs -r docker rmi || true
                    """
                    echo "✅ 本地旧镜像清理完成"
                }
            }
        }

        stage('🧼 清理 dangling 镜像') {
            steps {
                script {
                    sh """
                        docker images -f "dangling=true" -q | xargs -r docker rmi || true
                    """
                    echo "✅ 悬空镜像（<none>）清理完成"
                }
            }
        }

        stage('🔁 触发 Harbor 镜像保留策略（可选）') {
            steps {
                script {
                    sh """
                        curl -u ${env.HARBOR_USER}:${env.HARBOR_PASS} -X POST "http://${env.HARBOR_HOST}/api/v2.0/retentions/${env.HARBOR_RETENTION_ID}/executions" || echo '[retention trigger failed]'
                    """
                    echo "✅ Harbor 镜像保留策略已触发（若配置）"
                }
            }
        }
    }

    post {
        success {
            echo "✅ 构建 & 部署成功 🎉"
        }
        failure {
            echo "❌ 构建或部署失败，请检查日志"
        }
        always {
            cleanWs()
        }
    }
}