Jenkinsfile如下：
stage(‘deploy to dev’) {
agent none
steps {
container('maven') {
withCredentials([kubeconfigContent(credentialsId : 'kubeconfig' ,variable : 'deploy.yaml' ,)]) {
sh 'envsubst < deploy.yaml | kubectl apply -f -'
}
}
deploy.yaml:
kind: Deployment
apiVersion: apps/v1
metadata:
name: ttc-dev-v1
namespace: ttc-dev
labels:
app: ttc-dev
version: v1
annotations:
deployment.kubernetes.io/revision: '1'
kubesphere.io/creator: admin
spec:
replicas: 1
selector:
matchLabels:
app: ttc-dev
version: v1
template:
metadata:
creationTimestamp: null
labels:
app: ttc-dev
version: v1
spec:
volumes:
- name: host-time
hostPath:
path: /etc/localtime
type: ''
containers:
- name: container-xmbuab
image: 'registry.cn-hangzhou.aliyuncs.com/houchengwei/ttc-dev:SNAPSHOT-$BUILD_NUMBER'
ports:
- name: http-9999
containerPort: 9999
protocol: TCP
resources:
limits:
cpu: '1'
memory: 512Mi
volumeMounts:
- name: host-time
readOnly: true
mountPath: /etc/localtime
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
imagePullPolicy: IfNotPresent
restartPolicy: Always
terminationGracePeriodSeconds: 30
dnsPolicy: ClusterFirst
serviceAccountName: default
serviceAccount: default
securityContext: {}
imagePullSecrets:
- name: ali-docker-hub
schedulerName: default-scheduler
strategy:
type: RollingUpdate
rollingUpdate:
maxUnavailable: 25%
maxSurge: 25%
revisionHistoryLimit: 10
progressDeadlineSeconds: 600
---
kind: Service
apiVersion: v1
metadata:
name: ttc-dev
namespace: ttc-dev
labels:
app: ttc-dev
version: v1
annotations:
kubesphere.io/creator: admin
kubesphere.io/serviceType: statelessservice
spec:
ports:
- name: http-9999
protocol: TCP
port: 9999
targetPort: 9999
nodePort: 30878
selector:
app: ttc-dev
clusterIP: 10.233.25.139
clusterIPs:
- 10.233.25.139
type: NodePort
sessionAffinity: None
externalTrafficPolicy: Cluster
ipFamilies:
- IPv4
ipFamilyPolicy: SingleStack
报错如下：
+ envsubst + kubectl apply -f - Error from server (Forbidden): error when retrieving current configuration of: Resource: “apps/v1, Resource=deployments”, GroupVersionKind: “apps/v1, Kind=Deployment” Name: “ttc-dev-v1”, Namespace: “ttc-dev” from server for: “STDIN”: deployments.apps “ttc-dev-v1” is forbidden: User “system:serviceaccount:kubesphere-devops-worker:default” cannot get resource “deployments” in API group “apps” in the namespace “ttc-dev” Error from server (Forbidden): error when retrieving current configuration of: Resource: “/v1, Resource=services”, GroupVersionKind: “/v1, Kind=Service” Name: “ttc-dev”, Namespace: “ttc-dev” from server for: “STDIN”: services “ttc-dev” is forbidden: User “system:serviceaccount:kubesphere-devops-worker:default” cannot get resource “services” in API group "" in the namespace “ttc-dev” script returned exit code 1
