初始化远程仓库
拉取空仓库
生成代码
上传代码
Git的暂存区
Git的本地仓库
git的远程仓库
问题
原因是你尝试推送代码到远程仓库的主分支（master），但此时远程仓库的主分支正处于被检出（checked out） 状态，也就是说远程仓库那边有人正在使用这个分支进行工作
解决
在远程仓库设置
允许直接向远程仓库当前正在检出（checked out）的分支推送代码，绕过 Git 默认的安全限制
or
推送新的内容
jenkinsl连接k8集群
Kubernetes 云配置
下载插件
创建新项目
bash
*
kubectl cluster-info
*
## 查看K8S集群信息
*
*
crt=$(cat /etc/kubernetes/admin.conf | awk -F: '/certificate-authority-data/{print $2}' | tr -d ' ')
*
## 将证书赋给crt变量
*
*
echo $crt | base64 -d
*
## 解密证书
AI优化运行代码
获取解密证书
创建连接账户
sql
kubectl create sa jenkins
AI优化运行代码
创建role角色
vbnet
*
kind: Role
*
apiVersion: rbac.authorization.k8s.io/v1
*
metadata:
*
namespace: default
*
name: pod-reader-role
*
rules:
*
- apiGroups: [""]
*
resources: ["pods"]
*
verbs: ["get", "list", "watch","create","update","delete"]
AI优化运行代码
添加bindroling绑定
vbnet
*
kind: RoleBinding
*
apiVersion: rbac.authorization.k8s.io/v1
*
metadata:
*
namespace: default
*
name: pod-reader-role-binding
*
subjects:
*
- kind: ServiceAccount
*
name: jenkins
*
namespace: default
*
roleRef:
*
kind: Role
*
name: pod-reader-role
*
apiGroup: rbac.authorization.k8s.io
AI优化运行代码
csharp
*
kubectl describe rolebinding pod-reader-role-binding -n default
*
##查看绑定关系是否建立
*
*
kubectl auth can-i get pods -n default --as=system:serviceaccount:default:jenkins
*
##验证是否有读取 Pod 的权限
AI优化运行代码
生成token凭证
有效期为1h
sql
kubectl -n default create token jenkins
AI优化运行代码
添加凭证
添加jenkins地址
部署discuz论坛
cobol
*
cat /var/lib/jenkins/mysql-svc.yaml
*
*
apiVersion: v1
*
kind: Service
*
metadata:
*
name: mysql-svc
*
namespace: default
*
spec:
*
selector:
*
app: mysql
*
ports:
*
- port: 3306
*
targetPort: 3306
*
clusterIP: None # 无头服务，Pod 可直接通过服务名访问
AI优化运行代码
cobol
*
cat /var/lib/jenkins/mysql-deploy.yaml
*
apiVersion: apps/v1
*
kind: Deployment
*
metadata:
*
name: mysql
*
namespace: default
*
spec:
*
replicas: 1
*
selector:
*
matchLabels:
*
app: mysql
*
template:
*
metadata:
*
labels:
*
app: mysql
*
spec:
*
containers:
*
- name: mysql
*
image: mysql:5.7 # 官网镜像
*
ports:
*
- containerPort: 3306
*
env:
*
- name: MYSQL_ROOT_PASSWORD
*
value: "123.com" # root 密码
*
- name: MYSQL_DATABASE
*
value: "discuz" # 预创建数据库
*
- name: MYSQL_USER
*
value: "discuz" # 专用用户
*
- name: MYSQL_PASSWORD
*
value: "123.com" # 用户密码
*
volumeMounts:
*
- name: mysql-data
*
mountPath: /var/lib/mysql
*
- name: init-script
*
mountPath: /docker-entrypoint-initdb.d # MySQL 初始化脚本目录
*
volumes:
*
- name: mysql-data
*
emptyDir: {} # 非持久化存储
*
- name: init-script
*
configMap:
*
name: mysql-init-script # 引用初始化脚本的 ConfigMap
*
---
*
# 创建 MySQL 初始化脚本的 ConfigMap
*
apiVersion: v1
*
kind: ConfigMap
*
metadata:
*
name: mysql-init-script
*
namespace: default
*
data:
*
init.sql: |
*
# 授权 discuz 用户访问 discuz 数据库（可选，增强权限控制）
*
GRANT ALL PRIVILEGES ON discuz.* TO 'discuz'@'%' IDENTIFIED BY '123.com';
*
FLUSH PRIVILEGES;
AI优化运行代码
cobol
*
cat /var/lib/jenkins/discuz-deploy.yaml
*
apiVersion: apps/v1
*
kind: Deployment
*
metadata:
*
name: discuz
*
namespace: default
*
spec:
*
replicas: 1
*
selector:
*
matchLabels:
*
app: discuz
*
template:
*
metadata:
*
labels:
*
app: discuz
*
spec:
*
containers:
*
- name: discuz
*
image: php:7.4-apache # 官网 PHP+Apache 镜像
*
ports:
*
- containerPort: 80
*
volumeMounts:
*
- name: discuz-data
*
mountPath: /var/www/html # Apache 网站根目录
*
# 安装 Discuz 依赖的 PHP 扩展
*
command: ["/bin/sh", "-c"]
*
args:
*
- apt-get update && \
*
apt-get install -y libmysqlclient-dev zip unzip && \
*
docker-php-ext-install mysqli pdo pdo_mysql && \
*
apache2-foreground
*
volumes:
*
- name: discuz-data
*
emptyDir: {} # 非持久化存储
AI优化运行代码
安装kubectl命令
拷贝证书到 jenkins用户
检测
编写 pipeline
使用构建wezzer平台的镜像
pipeline {
agent any
environment {
// 定义Kubernetes相关环境变量
K8S_MASTER = "192.168.11.10"
POD_NAME = "lnmp-pod"
NAMESPACE = "wezzer"
CONTAINER_PORT = "80"
NODE_PORT = "30080"
IMAGE_NAME = "lnmp:1"
}
stages {
stage('部署到Kubernetes') {
steps {
script {
echo "部署 ${POD_NAME} 到Kubernetes集群..."
// 创建部署的YAML内容
def deploymentYaml = """
apiVersion: apps/v1
kind: Deployment
metadata:
name: ${POD_NAME}
namespace: ${NAMESPACE}
spec:
replicas: 1
selector:
matchLabels:
app: ${POD_NAME}
template:
metadata:
labels:
app: ${POD_NAME}
spec:
containers:
- name: ${POD_NAME}
image: ${IMAGE_NAME}
imagePullPolicy: Never
ports:
- containerPort: ${CONTAINER_PORT}
resources:
requests:
memory: "64Mi"
cpu: "250m"
limits:
memory: "128Mi"
cpu: "500m"
"""
writeFile file: 'deployment.yaml', text: deploymentYaml
sh 'cat deployment.yaml'
sh "kubectl apply -f deployment.yaml -n ${NAMESPACE}"
// 创建Service
def serviceYaml = """
apiVersion: v1
kind: Service
metadata:
name: ${POD_NAME}-service
namespace: ${NAMESPACE}
spec:
selector:
app: ${POD_NAME}
type: NodePort
ports:
- port: ${CONTAINER_PORT}
targetPort: ${CONTAINER_PORT}
nodePort: ${NODE_PORT}
"""
writeFile file: 'service.yaml', text: serviceYaml
sh 'cat service.yaml'
sh "kubectl apply -f service.yaml -n ${NAMESPACE}"
}
}
}
stage('验证部署') {
steps {
script {
echo "验证部署状态..."
sh """
echo "等待Pod就绪..."
kubectl wait --for=condition=ready pod -l app={POD_NAME} -n {NAMESPACE} --timeout=300s
echo "部署状态:"
kubectl get deployments {POD_NAME} -n {NAMESPACE}
echo "Pod状态:"
kubectl get pods -l app={POD_NAME} -n {NAMESPACE}
echo "Service状态:"
kubectl get service {POD_NAME}-service -n {NAMESPACE}
echo "部署成功! 访问地址: http://${K8S_MASTER}:${NODE_PORT}"
"""
}
}
}
}
post {
failure {
echo "部署失败!"
}
success {
echo "部署成功! 服务已通过30080端口暴露"
}
}
}
访问
