def SERIAL def ENAMES = [ 'prod', 'dev' ] //def ENAMES = [ 'dev' ] def CLUSTERS = ['prod': 'iru-swarm.infoclinica.lan', 'dev': 'dev-iru-swarm.infoclinica.lan'] def REGISTRIES = ['prod': 'registry.infoclinica.ru:5000', 'dev': 'dev-registry.infoclinica.ru:5000'] pipeline { agent { label "swarm" } environment { NGINX_GOST_GIT_URL='https://git.sdsys.ru/iru/nginx-gost.git' DOCKER_IMAGE='letsencrypt' SERVICE_NAME='proxy_letsencrypt' DOCKER_CERT_PATH='/run/secrets/swarm' JENKINS_MAIL='jenkins.dev@sdsys.ru' SWARM_GIT_NAME='stack-deploy' SWARM_GIT_URL='ssh://git@git.sdsys.ru:8022/iru/stack-deploy.git' } parameters { string( name: "branch", defaultValue: "master", description: "Which branch to use." ) string( name: "mailto", defaultValue: "admin@sdsys.ru", description: "Email which has to be notified." ) } stages { stage ("Discover SERIAL") { steps { script { SERIAL = sh script: "echo -n `date +%y%m%d``printf %03d $BUILD_NUMBER`", returnStdout: true } } } stage ("Build Image") { steps { echo "\u001B[32m \u2600 Building \u001B[35m ${DOCKER_IMAGE}:${SERIAL}. \u001B[0m" sh "docker build --no-cache -t ${DOCKER_IMAGE}:${SERIAL} ." } } stage ("Push to registry") { steps { script { ENAMES.each { item -> echo "Pushing to: ${item}, REGISTRIES ${REGISTRIES.get((item))}" sh """docker tag ${DOCKER_IMAGE}:${SERIAL} ${REGISTRIES.get((item))}/${DOCKER_IMAGE}:${SERIAL} docker push ${REGISTRIES.get((item))}/${DOCKER_IMAGE}:${SERIAL} """ } } } } stage ("Deploy") { steps { script { ENAMES.each { item -> echo "Deploy to: ${item}, CLUSTERS ${CLUSTERS.get((item))}" try{ sh "DOCKER_HOST=tcp://${CLUSTERS.get((item))}:2376 DOCKER_TLS_VERIFY=1 docker service update ${SERVICE_NAME} --image ${REGISTRIES.get((item))}/${DOCKER_IMAGE}:${SERIAL}" } catch(err){ echo "Recovering service $item" sh "DOCKER_HOST=tcp://${CLUSTERS.get((item))}:2376 DOCKER_TLS_VERIFY=1 docker service rollback ${SERVICE_NAME}" throw err } } } } } stage("Tagging") { steps { echo "Updating tag info in ${SWARM_GIT_NAME} repository" withCredentials([sshUserPrivateKey(credentialsId: 'provision', keyFileVariable: 'GIT_SSH_KEY', passphraseVariable: '', usernameVariable: 'GIT_SSH_USERNAME')]) { sh """GIT_SSH_COMMAND='ssh -i $GIT_SSH_KEY -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no' \ git clone \${SWARM_GIT_URL} && cd \${SWARM_GIT_NAME} if [ \$(git branch --list -a | grep -q ${branch}; echo \$?) == 0 ];then echo "${branch} is already exist";git checkout ${branch}; \ else echo "${branch} does not exist!!!"; git checkout -b \${branch};fi echo -n ${SERIAL} > tags/${DOCKER_IMAGE}.version git add -A git config --global user.email "${JENKINS_MAIL}" git config --global user.name "Jenkins" git commit -m 'Version update' GIT_SSH_COMMAND='ssh -i ${GIT_SSH_KEY} -o UserKnownHostsFile=/dev/null -o StrictHostKeyChecking=no' \ git push origin ${branch} """ } } } } post { always { echo "CleaningUp work directory" deleteDir() sh "docker image rm -f `docker image ls -q ${DOCKER_IMAGE}:${SERIAL}`" } failure { mail charset: 'UTF-8', subject: "Jenkins build ERROR", mimeType: 'text/html', to: "${mailto}", body: "ATTENTION!!!
Jenkins job failed.\n\n
Project Name:
${env.JOB_NAME}
\nBuild Number:
${env.BUILD_NUMBER}
\nURL Build:
${RUN_DISPLAY_URL}" } success { mail charset: 'UTF-8', subject: "Jenkins build SUSCCESS", mimeType: 'text/html', to: "${mailto}", body: "Congradulations!!!
Jenkins job succefully finished.\n\n
Project Name:
${env.JOB_NAME}
\nBuild Number:
${env.BUILD_NUMBER}
\nURL Build:
${RUN_DISPLAY_URL}" } } }