hfln-interior-gateway/Jenkinsfile

pipeline {
    agent any

    parameters {
        choice(name: 'env', choices: ['dev', 'test', 'prod'], description: '部署环境（dev/test/prod）')
        string(name: 'NAMESPACE', defaultValue: 'gateway', description: 'Kubernetes 命名空间')
    }

    environment {
        PROJECT_NAME       = 'gateway-service'
        MAVEN_HOME         = '/usr/local/apache-maven-3.9.9/bin'
        HARBOR_HOST        = '8.130.28.21:81'
        HARBOR_USER        = 'admin'
        HARBOR_PASSWORD    = 'Hfln@1024'
        KUBECONFIG_PATH    = '/root/.kube/config'
        SPRING_PROFILES_ACTIVE = "${params.env}"
    }

    stages {
        stage('🧬 拉取 Git 代码') {
            steps {
                script {
                    echo ">>> 正在拉取 Git 代码..."
                    checkout scm
                    echo ">>> 拉取完成 ✅"
                }
            }
        }

        stage('📦 Maven 构建项目') {
            steps {
                script {
                    echo ">>> 开始构建模块 ${PROJECT_NAME}"
                    sh "${MAVEN_HOME}/mvn clean package -DskipTests"
                    echo ">>> 构建完成 ✅"
                }
            }
        }

        stage('🐳 构建并推送 Docker 镜像') {
            steps {
                script {
                    def imageTag = "${HARBOR_HOST}/${params.env}/${PROJECT_NAME}:${BUILD_NUMBER}"
                    echo ">>> 构建 Docker 镜像: ${imageTag}"
                    sh """
                        docker login -u ${HARBOR_USER} -p ${HARBOR_PASSWORD} ${HARBOR_HOST}
                        docker build --build-arg env=${params.env} -t ${imageTag} .
                        docker push ${imageTag}
                        docker rmi ${imageTag}
                    """
                    echo ">>> 镜像推送完成 ✅"
                }
            }
        }

        stage('🔍 镜像拉取测试（可选）') {
            steps {
                script {
                    def imageTag = "${HARBOR_HOST}/${params.env}/${PROJECT_NAME}:${BUILD_NUMBER}"
                    echo ">>> 测试节点能否拉取镜像..."
                    sh """
                        # 登录节点测试拉取镜像
                        ssh root@node1 "docker login -u ${HARBOR_USER} -p ${HARBOR_PASSWORD} ${HARBOR_HOST} && docker pull ${imageTag} || echo '[❌ 节点 node1 拉取失败]'"
                        ssh root@node2 "docker login -u ${HARBOR_USER} -p ${HARBOR_PASSWORD} ${HARBOR_HOST} && docker pull ${imageTag} || echo '[❌ 节点 node2 拉取失败]'"
                    """
                }
            }
        }

        stage('🚀 部署到 Kubernetes') {
            steps {
                script {
                    def imageTag = "${HARBOR_HOST}/${params.env}/${PROJECT_NAME}:${BUILD_NUMBER}"
                    echo ">>> 部署到 Kubernetes，命名空间：${params.NAMESPACE}"

                    sh """
                        export KUBECONFIG=${KUBECONFIG_PATH}

                        # 创建命名空间（如果不存在）
                        kubectl get ns ${params.NAMESPACE} || kubectl create ns ${params.NAMESPACE}

                        # 应用 Deployment（2 副本）
                        kubectl apply -n ${params.NAMESPACE} -f - <<EOF
apiVersion: apps/v1
kind: Deployment
metadata:
  name: ${PROJECT_NAME}
spec:
  replicas: 2
  selector:
    matchLabels:
      app: ${PROJECT_NAME}
  template:
    metadata:
      labels:
        app: ${PROJECT_NAME}
    spec:
      imagePullSecrets:
      - name: harbor-secret
      containers:
      - name: ${PROJECT_NAME}
        image: ${imageTag}
        ports:
        - containerPort: 8090
        env:
        - name: SPRING_PROFILES_ACTIVE
          value: "${params.env}"
EOF

                        # 应用 NodePort Service（暴露端口为 30085）
                        kubectl apply -n ${params.NAMESPACE} -f - <<EOF
apiVersion: v1
kind: Service
metadata:
  name: ${PROJECT_NAME}
spec:
  type: NodePort
  selector:
    app: ${PROJECT_NAME}
  ports:
  - port: 80
    targetPort: 8090
    nodePort: 30085
EOF
                    """
                    echo ">>> 部署完成 ✅，请访问：http://<任意节点IP>:30085/"
                }
            }
        }
    }

    post {
        success {
            script {
                echo "✅ 构建 & 部署成功 🎉"

                // 清理本地旧镜像（仅保留最新3个）
                sh """
                    docker images --format '{{.Repository}}:{{.Tag}} {{.CreatedAt}}' | \
                    grep '${HARBOR_HOST}/${params.env}/${PROJECT_NAME}:' | \
                    sort -rk2 | \
                    tail -n +4 | \
                    awk '{print \$1}' | \
                    xargs -r docker rmi || true
                """
            }
        }

        failure {
            echo "❌ 构建或部署失败，请检查日志。"
        }

        always {
            echo "🧼 清理 Jenkins 工作目录..."
            cleanWs()
        }
    }
}