Simple Blog

1
package main
2

3
import (
4
  "fmt"
5
  "net/http"
6
  "os"
7

8
  "github.com/prometheus/client_golang/prometheus/promhttp"
9
)
10

11
var version = "v1.0.0"
12

13
func main() {
14
  // 主页面
15
  http.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
16
    hostname, _ := os.Hostname()
17
    fmt.Printf("Received request from %s\n", r.RemoteAddr)
18
    fmt.Fprintf(w, "<h1>Go Demo App</h1>")
19
    fmt.Fprintf(w, "<div>Version: <strong>%s</strong></div>", version)
20
    fmt.Fprintf(w, "<div>Hostname: %s</div>", hostname)
21
  })
22

23
  // 健康检查
24
  http.HandleFunc("/health", func(w http.ResponseWriter, r *http.Request) {
25
    w.WriteHeader(200)
26
    w.Write([]byte("ok"))
27
  })
28

29
  // Prometheus 监控指标
30
  http.Handle("/metrics", promhttp.Handler())
31

32
  fmt.Printf("Starting server on port 8080, version: %s\n", version)
33
  if err := http.ListenAndServe(":8080", nil); err != nil {
34
    fmt.Printf("Error starting server: %s\n", err)
35
  }
36
}

1
# 构建阶段
2
FROM reg.westos.org/library/golang:1.25-alpine AS builder
3

4
WORKDIR /app
5

6
# Go 代理加速
7
ENV GOPROXY=https://goproxy.cn,direct
8

9
COPY go.mod go.sum ./
10
RUN go mod download
11

12
COPY . .
13
RUN CGO_ENABLED=0 GOOS=linux go build -o go-demo-app .
14

15
# 运行阶段
16
FROM reg.westos.org/library/alpine:latest
17

18
WORKDIR /root/
19

20
COPY --from=builder /app/go-demo-app .
21

22
EXPOSE 8080
23

24
CMD ["./go-demo-app"]

1
pipeline {
2
  agent {
3
    kubernetes {
4
      yaml '''
5
      apiVersion: v1
6
      kind: Pod
7
      spec:
8
        hostAliases:
9
        - ip: "192.168.100.14"
10
          hostnames:
11
          - "reg.westos.org"
12
        containers:
13
        - name: kaniko
14
          image: gcr.io/kaniko-project/executor:debug
15
          command:
16
          - sleep
17
          - infinity
18
          volumeMounts:
19
          - name: registry-creds
20
            mountPath: /kaniko/.docker/
21
        - name: git-tools
22
          image: bitnami/git:latest
23
          command:
24
          - sleep
25
          - infinity
26
        volumes:
27
        - name: registry-creds
28
          secret:
29
            secretName: harbor-auth
30
            items:
31
              - key: .dockerconfigjson
32
                path: config.json
33
      '''
34
    }
35
  }
36

37
  environment {
38
    IMAGE_REPO = "reg.westos.org/library/go-demo-app"
39
    IMAGE_TAG = "v1.0.${BUILD_NUMBER}"
40
    GITEA_REPO = "192.168.100.10:30030/admin/go-demo-app.git"
41
  }
42

43
  stages {
44
    stage('Checkout') {
45
      steps {
46
        checkout scm
47
      }
48
    }
49

50
    stage('Build & Push') {
51
      steps {
52
        container('kaniko') {
53
          sh """
54
            /kaniko/executor \
55
            --context `pwd` \
56
            --dockerfile `pwd`/Dockerfile \
57
            --destination ${IMAGE_REPO}:${IMAGE_TAG} \
58
            --destination ${IMAGE_REPO}:latest \
59
            --skip-tls-verify \
60
            --insecure
61
          """
62
        }
63
      }
64
    }
65

66
    stage('Update Manifest') {
67
      steps {
68
        container('git-tools') {
69
          withCredentials([usernamePassword(credentialsId: 'gitea-auth', usernameVariable: 'GIT_USER', passwordVariable: 'GIT_PASS')]) {
70
            sh """
71
              git config --global user.email "jenkins@westos.org"
72
              git config --global user.name "Jenkins CI"
73
              git config --global --add safe.directory '*'
74

75
              git checkout main
76
              git pull origin main
77

78
              sed -i "s|image: ${IMAGE_REPO}:.*|image: ${IMAGE_REPO}:${IMAGE_TAG}|" deploy/deployment.yaml
79

80
              echo "Updated deployment.yaml:"
81
              grep "image:" deploy/deployment.yaml
82

83
              if git status --porcelain | grep deploy/deployment.yaml; then
84
                  git add deploy/deployment.yaml
85
                  git commit -m "Deploy: update image tag to ${IMAGE_TAG} [skip ci]"
86
                  git push http://${GIT_USER}:${GIT_PASS}@${GITEA_REPO} main
87
              else
88
                  echo "No changes to commit"
89
              fi
90
            """
91
          }
92
        }
93
      }
94
    }
95
  }
96
}

1
// Pod Template 里加这个容器
2
- name: sonar-cli
3
  image: sonarsource/sonar-scanner-cli:latest
4
  command:
5
  - sleep
6
  - infinity
7

8
// stages 里加这个阶段
9
stage('Code Analysis') {
10
    steps {
11
        container('sonar-cli') {
12
            withSonarQubeEnv('sonar-server') {
13
                sh """
14
                    sonar-scanner \
15
                      -Dsonar.projectKey=go-demo-app \
16
                      -Dsonar.sources=. \
17
                      -Dsonar.host.url=http://sonarqube-sonarqube.sonarqube.svc.cluster.local:9000 \
18
                      -Dsonar.login=$SONAR_AUTH_TOKEN
19
                """
20
            }
21
        }
22
    }
23
}

1
NAME         CPU(cores)   CPU(%)   MEMORY(bytes)   MEMORY(%)
2
k8s-master   130m         6%       1277Mi          77%
3
k8s-node1    68m          3%       1440Mi          19%
4
k8s-node2    145m         7%       883Mi           11%

1
resources:
2
  requests:
3
    cpu: "200m"
4
    memory: "1Gi"
5
  limits:
6
    cpu: "1000m"
7
    memory: "1800Mi"
8

9
jvmCeOpts: "-Xmx1024m -Xms512m"
10
jvmOpts: "-Xmx1024m -Xms512m"

1
controller:
2
  javaOpts: "-Xms512m -Xmx800m -Djenkins.install.runSetupWizard=false"
3

4
  resources:
5
    requests:
6
      cpu: "200m"
7
      memory: "512Mi"
8
    limits:
9
      cpu: "1000m"
10
      memory: "1280Mi"

1
NAMESPACE     NAME                      CPU(cores)   MEMORY(bytes)
2
sonarqube     sonarqube-sonarqube-0     913m         767Mi
3
kube-system   kube-apiserver-k8s-master 53m          530Mi
4
jenkins       jenkins-0                 945m         328Mi

1
apiVersion: monitoring.coreos.com/v1
2
kind: ServiceMonitor
3
metadata:
4
  name: jenkins
5
  namespace: monitoring
6
  labels:
7
    release: prometheus
8
spec:
9
  selector:
10
    matchLabels:
11
      app.kubernetes.io/instance: jenkins
12
  namespaceSelector:
13
    matchNames:
14
      - jenkins
15
  endpoints:
16
  - port: http
17
    path: /prometheus/
18
    interval: 15s

1
apiVersion: monitoring.coreos.com/v1
2
kind: ServiceMonitor
3
metadata:
4
  name: go-demo-app
5
  namespace: monitoring
6
  labels:
7
    release: prometheus
8
spec:
9
  selector:
10
    matchLabels:
11
      app: go-demo-app
12
  namespaceSelector:
13
    matchNames:
14
      - default
15
  endpoints:
16
  - port: http
17
    path: /metrics
18
    interval: 5s

1
apiVersion: argoproj.io/v1alpha1
2
kind: AnalysisTemplate
3
metadata:
4
  name: success-rate-check
5
  namespace: default
6
spec:
7
  args:
8
  - name: service-name
9
  metrics:
10
  - name: success-rate
11
    successCondition: result[0] == 1
12
    provider:
13
      prometheus:
14
        address: http://prometheus-kube-prometheus-prometheus.monitoring:9090
15
        query: |
16
          # 演示用的查询，永远返回 1
17
          # 生产环境应该改成真实的成功率查询
18
          vector(1)

1
apiVersion: argoproj.io/v1alpha1
2
kind: Rollout
3
metadata:
4
  name: go-demo-app
5
  namespace: default
6
  labels:
7
    app: go-demo-app
8
spec:
9
  replicas: 5
10
  selector:
11
    matchLabels:
12
      app: go-demo-app
13
  strategy:
14
    canary:
15
      steps:
16
      - setWeight: 20  # 先切 20% 流量
17
      - analysis:
18
          templates:
19
          - templateName: success-rate-check
20
          args:
21
          - name: service-name
22
            value: go-demo-app
23
      - pause: {duration: 30s}  # 人工观察 30 秒
24
      - setWeight: 50  # 再切 50% 流量
25
      - pause: {duration: 10s}
26
      - setWeight: 100  # 最后全量上线
27
  template:
28
    metadata:
29
      labels:
30
        app: go-demo-app
31
      annotations:
32
        prometheus.io/scrape: "true"
33
        prometheus.io/port: "8080"
34
        prometheus.io/path: "/metrics"
35
    spec:
36
      hostAliases:
37
      - ip: "192.168.100.14"
38
        hostnames:
39
        - "reg.westos.org"
40
      containers:
41
      - name: go-demo-app
42
        image: reg.westos.org/library/go-demo-app:latest
43
        imagePullPolicy: Always
44
        ports:
45
        - containerPort: 8080
46
        resources:
47
          limits:
48
            cpu: "200m"
49
            memory: "128Mi"
50
        readinessProbe:
51
          httpGet:
52
            path: /health
53
            port: 8080
54
          initialDelaySeconds: 5
55
          periodSeconds: 10
56
      imagePullSecrets:
57
      - name: harbor-auth
58
---
59
apiVersion: v1
60
kind: Service
61
metadata:
62
  name: go-demo-app-svc
63
  namespace: default
64
  labels:
65
    app: go-demo-app
66
spec:
67
  type: NodePort
68
  selector:
69
    app: go-demo-app
70
  ports:
71
  - name: http
72
    port: 8080
73
    targetPort: 8080
74
    nodePort: 30095