DevOps技术

[【原文链接】基于K8s平台部署Jenkins环境](http://devops-dev.com/article/409)

[TOC]

### 1 编写jenkins.yaml文件，内容如下：
```yaml
apiVersion: v1
kind: Namespace
metadata:
  name: devops

---

apiVersion: apps/v1
kind: Deployment
metadata:
  name: devops-jenkins
  namespace: devops
spec:
  replicas: 1
  revisionHistoryLimit: 5
  strategy:
    type: RollingUpdate
  selector:
    matchLabels:
      app: devops-jenkins
  template:
    metadata:
      labels:
        app: devops-jenkins
    spec:
      volumes:
        - name: devops-jenkins
          nfs:
            server: xx.xx.xx.xx  # 挂载存储的服务器的ip
            path: /root/data/nfs/jenkins/devops   # 挂载存储的路径
      containers:
        - name: devops-jenkins
          image: jenkins/jenkins
          env:
            - name: LIMITS_MEMORY
              valueFrom:
                resourceFieldRef:
                  resource: limits.memory
                  divisor: 1Mi
            - name: JAVA_OPTS
              value: -Xmx$(LIMITS_MEMORY)m -XshowSettings:vm -Dhudson.slaves.NodeProvisioner.initialDelay=0 -Dhudson.slaves.NodeProvisioner.MARGIN=50 -Dhudson.slaves.NodeProvisioner.MARGIN0=0.85
          imagePullPolicy: Always
          ports:
            - containerPort: 8080
          volumeMounts:
            - name: devops-jenkins
              mountPath: /var/jenkins_home

---

apiVersion: v1
kind: Service
metadata:
  name: devops-jenkins
  namespace: devops
spec:
  ports:
    - port: 8080
      protocol: TCP
      targetPort: 8080
      nodePort: 30002
  selector:
    app: devops-jenkins
  type: NodePort
  sessionAffinity: ClientIP

---
apiVersion: v1
kind: ServiceAccount
metadata:
  name: devops-jenkins
  namespace: devops

---

kind: Role
apiVersion: rbac.authorization.k8s.io/v1
metadata:
  name: devops-jenkins
  namespace: devops
rules:
- apiGroups: [""]
  resources: ["pods","events"]
  verbs: ["create","delete","get","list","patch","update","watch"]
- apiGroups: [""]
  resources: ["pods/exec"]
  verbs: ["create","delete","get","list","patch","update","watch"]
- apiGroups: [""]
  resources: ["pods/log"]
  verbs: ["get","list","watch"]
- apiGroups: [""]
  resources: ["secrets","events"]
  verbs: ["get"]

---

apiVersion: rbac.authorization.k8s.io/v1
kind: RoleBinding
metadata:
  name: devops-jenkins
  namespace: devops
roleRef:
  apiGroup: rbac.authorization.k8s.io
  kind: Role
  name: devops-jenkins
subjects:
- kind: ServiceAccount
  name: devops-jenkins

```

### 2 对挂载的存储修改所属组

```bash
mkdir -p /root/data/nfs/jenkins/devops
chown -R 1000 /root/data/nfs/jenkins/devops
```

### 3 执行如下命令创建Jenkins
```bash
kubectl apply -f jenkins.yaml
```

### 4 使用如下命令查看创建的Pod状态
```bash
kubectl get pod -n devops
```

### 5 在浏览器通过ip+端口访问，这里端口为30002
![](https://redrose2100.oss-cn-hangzhou.aliyuncs.com/img/ba7d544a-4b80-11ed-947e-0242ac110002.png)

### 6 根据上面提示，使用如下命令查看密码
```bash
kubectl exec -it devops-jenkins-9d4555c89-xzz55 /bin/cat /var/jenkins_home/secrets/initialAdminPassword -n devops
```

### 7 复制上述密码，填入WEB登录页面
![](https://redrose2100.oss-cn-hangzhou.aliyuncs.com/img/c6229a58-4b80-11ed-947e-0242ac110002.png)

### 8 为了方便，这里可以选择推荐插件安装，如果自定义安装的话，需要对Jenkins的常用插件比较了解
![](https://redrose2100.oss-cn-hangzhou.aliyuncs.com/img/d6f2ba7a-4b80-11ed-947e-0242ac110002.png)

### 9 然后设置管理员用户名密码等
![](https://redrose2100.oss-cn-hangzhou.aliyuncs.com/img/e2443fde-4b80-11ed-947e-0242ac110002.png)

### 10 确认Jenkins的Url
![](https://redrose2100.oss-cn-hangzhou.aliyuncs.com/img/ee4508a4-4b80-11ed-947e-0242ac110002.png)

### 11 点击【开始使用Jenkins】
![](https://redrose2100.oss-cn-hangzhou.aliyuncs.com/img/f766e5a6-4b80-11ed-947e-0242ac110002.png)

### 12 至此，Jenkins就安装完成了
![](https://redrose2100.oss-cn-hangzhou.aliyuncs.com/img/025e6b3c-4b81-11ed-947e-0242ac110002.png)

不积跬步，无以至千里

博客