在K8s上成功部署jenkins相关scripts

流程 1. ingress-controller [root@master001 jenkins]# kubectl apply -f ingress-controller.yaml #查看controller启动情况 [root@master001 ingress-controller]# kubectl get pod -n ingress-nginx NAME READY STATUS RESTARTS AGE nginx-ingress-controller-54b86f8f7b-dj69f 1/1 Running 0 7d23h 2. service-nodeport.yaml---ingress [root@master001 jenkins]# kubectl apply -f service-nodeport.yaml [root@master001 ingress-controller]# kubectl get svc -n ingress-nginx NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE ingress-nginx NodePort 10.101.101.136 <none> 80:30242/TCP,443:32668/TCP 7d23h 3. 创建namespace [root@master001 jenkins]# kubectl create namespace mycloud [root@master001 jenkins]# kubectl get ns mycloud Active 10s #删除namespace 建议删除ns里的资源再删除 [root@master001 jenkins]# kubectl delete namespace mycloud 4. 创建 ServiceAccount & ClusterRoleBinding----jenkins-rbac.yaml 此 kubernetes 集群用的是 RBAC 安全插件，必须创建权限给一个 ServiceAccount，然后将此 ServiceAccount 绑定到 Jenkins 服务，这样赋予 Jenkins 服务一定权限执行一些操作，为了方便，这里将 cluster-admin 绑定到 ServiceAccount 以保证 Jenkins 能拥有一定的权限。 [root@master001 jenkins]# kubectl create -f jenkins-rbac.yaml serviceaccount/jenkins-admin created Warning: rbac.authorization.k8s.io/v1beta1 ClusterRoleBinding is deprecated in v1.17+, unavailable in v1.22+; use rbac.authorization.k8s.io/v1 ClusterRoleBinding clusterrolebinding.rbac.authorization.k8s.io/jenkins-admin created [root@master001 jenkins]# kubectl get clusterrole -n kube-system NAME CREATED AT admin 2022-07-24T15:54:29Z jenkins-admin 2023-05-17T02:44:36Z 5. 创建ingress routing,配置转发规则 [root@master001 jenkins]# kubectl apply -f ingress-http-routing.yaml ingress.networking.k8s.io/my-ingress created [root@master001 jenkins]# kubectl get ingress -n mycloud NAME CLASS HOSTS ADDRESS PORTS AGE my-ingress nginx bbs.kelvin.cn 80 4s 6. 创建 pod的service文件-------jenkins_service.yaml # kubectl create -f jenkins_service.yaml [root@master001 jenkins]# kubectl create -f jenkins_service.yaml service/jenkins created [root@master001 jenkins]# kubectl get svc -n mycloud NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE jenkins NodePort 10.111.191.211 <none> 80:32450/TCP,50000:32577/TCP 12s 7.创建Deployment文件----jenkins-deployment.yaml(如果yaml里定义了namespace，那么就不用-n 了) [root@master001 jenkins]# kubectl apply -f jenkins-deployment.yaml deployment.apps/jenkins created [root@master001 jenkins]# kubectl get pod -n mycloud NAME READY STATUS RESTARTS AGE jenkins-6f88dcf89c-t77gr 1/1 Running 0 43s #一只启动不成功，查询日志 [root@master001 jenkins]# kubectl logs jenkins-6f88dcf89c-7cdkg -n mydlqcloud 8. 获取 Jenkins 生成的 Token 8.1： 查看 Jenkins Pod 启动日志 [root@master001 jenkins]# kubectl logs jenkins-6f88dcf89c-t77gr -n mycloud #查看日志中生成的 Token 字符串 ..................................................... 2023-05-17 03:18:51.693+0000 [id=28] INFO jenkins.install.SetupWizard#init: ************************************************************* Jenkins initial setup is required. An admin user has been created and a password generated. Please use the following password to proceed to installation: 7f83c51464f14756b75cfab0bc925906 This may also be found at: /var/jenkins_home/secrets/initialAdminPassword ************************************************************* ...................................... 8.启动 Jenkins 进行安装 #通过域名的方式访问：bbs.kelvin.cn:ingress的端口号：bbs.kelvin.cn:30242/jenkins #通过IP访问：node ip:svc端口号：192.168.200.171:32450/jenkins 9.初始化jenkins 账户：admin 密码：admin