Jenkins CI/CD 全流程流水线架构设计

// Jenkinsfile - 全流程 CI/CD 流水线 pipeline { agent { kubernetes { yaml ''' apiVersion: v1 kind: Pod spec: containers: - name: maven image: maven:3.8-openjdk-17 command: - cat tty: true - name: docker image: docker:24.0 command: - cat tty: true - name: kubectl image: bitnami/kubectl:latest command: - cat tty: true ''' } } environment { DOCKER_REGISTRY = 'registry.example.com' IMAGE_NAME = 'myapp-backend' KUBE_CONFIG = credentials('kubeconfig') SONAR_TOKEN = credentials('sonar-token') } stages { // 阶段 1: 代码检出与依赖安装 stage('Checkout & Install') { steps { checkout scm container('maven') { sh 'mvn clean install -DskipTests' } } } // 阶段 2: 代码质量检查 stage('Code Quality') { steps { container('maven') { sh 'mvn sonar:sonar -Dsonar.projectKey=${JOB_NAME}' } } } // 阶段 3: 单元测试 stage('Unit Test') { steps { container('maven') { sh 'mvn test' } junit allowEmptyResults: true, testResults: '**/target/surefire-reports/*.xml' } } // 阶段 4: 集成测试 stage('Integration Test') { steps { container('maven') { sh 'mvn verify -Pintegration-test' } } } // 阶段 5: Docker 镜像构建 stage('Build Docker Image') { steps { container('docker') { script { def version = sh(script: 'mvn help:evaluate -Dexpression=project.version -q -DforceStdout', returnStdout: true).trim() env.IMAGE_TAG = "${version}-${BUILD_NUMBER}" } sh 'docker build -t ${DOCKER_REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG} .' } } } // 阶段 6: 安全扫描 stage('Security Scan') { steps { container('docker') { sh 'docker scan ${DOCKER_REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG}' } } } // 阶段 7: 推送镜像仓库 stage('Push to Registry') { steps { container('docker') { withCredentials([usernamePassword(credentialsId: 'docker-registry-auth', usernameVariable: 'DOCKER_USER', passwordVariable: 'DOCKER_PASS')]) { sh 'echo ${DOCKER_PASS} | docker login -u ${DOCKER_USER} --password-stdin ${DOCKER_REGISTRY}' sh 'docker push ${DOCKER_REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG}' } } } } // 阶段 8: K8S 部署 stage('Deploy to K8S') { steps { container('kubectl') { script { kubeconfig(credentialsId: 'kubeconfig', serverUrl: 'https://k8s-cluster.example.com') { sh 'kubectl set image deployment/${IMAGE_NAME} ${IMAGE_NAME}=${DOCKER_REGISTRY}/${IMAGE_NAME}:${IMAGE_TAG} -n production' sh 'kubectl rollout status deployment/${IMAGE_NAME} -n production --timeout=300s' } } } } } // 阶段 9: UI 自动化测试 stage('UI Automation Test') { steps { container('maven') { sh 'mvn test -Pselenium-test -Dbase.url=https://prod.example.com' } } } // 阶段 10: 通知与报告 stage('Notification') { steps { script { if (currentBuild.result == 'SUCCESS') { emailext subject: "部署成功：${JOB_NAME} [${BUILD_NUMBER}]", body: "应用 ${IMAGE_NAME} 已成功部署到生产环境\n版本：${IMAGE_TAG}", to: 'team@example.com' } else { emailext subject: "部署失败：${JOB_NAME} [${BUILD_NUMBER}]", body: "部署失败，请登录 Jenkins 查看详细信息", to: 'team@example.com' } } } } } post { always { cleanWs() archiveArtifacts artifacts: '**/target/*.jar', allowEmptyArchive: true } failure { script { sh 'kubectl rollout undo deployment/${IMAGE_NAME} -n production' } } } }